Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1759d2c2-97ba-4469-b5be-de2697c7cb3d.roa
File:                     1759d2c2-97ba-4469-b5be-de2697c7cb3d.roa (raw, json)
Hash identifier:          RpsQjMXqq7M9+yXigl8dTYG681RX7USDr7Zlhc5TSj0=
Subject key identifier:   B0:05:FC:19:94:2A:68:2F:C4:D2:E0:AB:49:53:E8:30:D1:8B:C1:01
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       499088ABB470AA71F849511BD2D0DAB348FD9E82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1759d2c2-97ba-4469-b5be-de2697c7cb3d.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        206.131.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:90:88:ab:b4:70:aa:71:f8:49:51:1b:d2:d0:da:b3:48:fd:9e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=99e7df9933c3f092cf60b1aca37dc42178646008a732138a3b62b8ddf28b578a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:cf:93:c2:5a:71:f5:00:7b:cc:51:b5:79:
                    af:90:51:91:84:92:72:c5:58:67:45:79:73:22:bc:
                    ee:9b:fe:5d:45:24:27:3d:1e:b2:cf:df:2a:ed:0b:
                    68:78:ca:24:5e:e4:3d:8a:4d:fc:f5:83:ed:12:52:
                    1d:c5:91:27:e9:de:d2:17:67:44:45:11:32:10:11:
                    21:2f:ee:a1:12:38:69:f2:49:f8:fb:e7:fe:8f:c0:
                    1b:03:16:f7:5e:fa:49:c9:ec:8d:f2:a1:1a:8b:4f:
                    7d:bd:e7:50:75:1c:f7:92:87:f7:08:70:6d:96:27:
                    38:34:7e:a3:8c:1e:89:63:3a:02:cd:87:6c:0b:9f:
                    17:fa:e6:f3:d2:0f:b6:40:0c:02:c8:c2:84:4b:0e:
                    a9:a9:2f:be:13:aa:8a:94:26:28:4a:6e:d2:f0:cf:
                    e9:01:72:1d:be:a4:6c:e2:df:4c:c0:2c:b9:8e:09:
                    58:1f:f8:a5:82:2c:90:71:ec:b0:22:55:7f:32:b5:
                    d1:ae:ce:4d:39:fb:f2:60:a4:c0:7d:09:5f:1c:22:
                    10:66:2a:c6:e3:fc:78:7b:4a:60:30:58:b3:4f:94:
                    e5:ad:a0:bf:45:c6:1a:9e:1c:8a:c8:2f:9b:88:92:
                    65:8d:49:97:1a:0a:76:9a:c3:98:5c:71:71:05:ca:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:05:FC:19:94:2A:68:2F:C4:D2:E0:AB:49:53:E8:30:D1:8B:C1:01
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1759d2c2-97ba-4469-b5be-de2697c7cb3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.131.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:cc:23:6b:a1:b7:8b:48:11:9b:31:fa:19:d2:4d:ed:83:41:
         96:fb:0d:54:b4:48:01:ea:1e:d6:68:f6:dc:15:16:b0:c5:13:
         26:b5:bb:73:3b:dc:06:2f:a9:12:76:c4:02:80:65:b2:8c:df:
         14:eb:b6:84:fc:ab:6d:a4:fa:01:bd:20:0b:3a:ed:5d:e9:b6:
         3d:32:51:65:b1:33:81:98:93:0d:3f:5f:66:6a:c3:3e:29:e4:
         c7:0f:36:0a:b2:91:6d:60:ad:42:f2:7b:c4:43:b5:55:e4:65:
         c4:85:0f:19:ce:e7:53:aa:05:4a:9a:b2:9a:35:fd:ea:02:8a:
         3d:e5:3d:32:a0:71:68:8d:d0:3c:39:8d:c4:26:5a:ba:f8:f6:
         1f:f0:db:81:81:15:45:a2:c3:72:be:76:ad:43:c1:fa:b2:bf:
         fe:91:88:e2:13:9a:a3:2d:10:3e:ee:6e:28:22:79:bd:1b:69:
         aa:1e:90:f5:f2:70:a9:b7:bf:4f:1b:8b:67:06:a9:4b:2e:3a:
         1f:fa:06:d3:ff:c1:32:a0:37:0d:9c:ac:11:dd:f0:82:21:da:
         c9:20:fc:4d:e8:0d:0d:8d:0f:3a:1e:2b:f2:54:0d:9b:45:3b:
         a5:05:8c:b2:eb:e9:09:88:3e:69:c8:bc:e5:bc:1c:d7:de:41:
         47:9f:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:44 2024 by rpki-client on console-fra.rpki-client.org