Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17e0131d-8b2f-4e22-b3eb-49cd5c8c3df6.roa
File:                     17e0131d-8b2f-4e22-b3eb-49cd5c8c3df6.roa (raw, json)
Hash identifier:          jf7dU4Qpidp7JXOUKNrQC8KPzyTt8w+cDtEF3mS+pFc=
Subject key identifier:   F4:B4:10:E6:9A:87:63:D0:81:4C:52:78:55:34:57:5B:E2:C0:D6:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13B59AA5B6C05525154F69B6E26C8796CEAF25CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17e0131d-8b2f-4e22-b3eb-49cd5c8c3df6.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.188.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b5:9a:a5:b6:c0:55:25:15:4f:69:b6:e2:6c:87:96:ce:af:25:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=fef6106ab8d1c432a296dbfb4d6c100b964b3e8989ca2685e46804f3ef60675c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:81:ed:c6:01:36:d9:be:5b:b0:12:21:1c:
                    0a:8d:04:c8:4c:45:4f:ab:b1:61:8c:75:69:fe:21:
                    aa:fe:e4:ea:d0:a0:88:cb:25:76:e6:d9:6e:89:8f:
                    aa:85:22:03:2c:e5:61:28:a7:e9:f3:04:ac:c7:d7:
                    e1:9c:8d:07:4f:09:24:df:c1:15:44:56:97:bb:5f:
                    09:01:ec:de:04:9e:26:1a:2c:5f:ce:ae:3a:85:0a:
                    0f:97:f0:9f:06:29:c8:80:86:1f:ee:8b:6d:f6:f4:
                    06:3d:d2:9f:41:8b:d5:06:2d:ba:ae:49:a3:82:f5:
                    1b:fd:10:a3:92:5d:65:cb:13:1a:17:f1:54:ea:ea:
                    00:eb:8f:5b:a1:07:de:6c:84:3a:29:f0:85:b1:11:
                    88:58:85:be:90:d1:f3:39:5b:ba:2d:d8:1b:75:bb:
                    06:f9:0d:36:7f:89:c8:ec:fd:34:92:8f:1b:98:c7:
                    95:db:58:ea:c2:c0:66:31:49:c7:4c:96:3c:e9:3c:
                    c3:2b:4a:86:f1:61:72:89:e1:53:40:9b:97:c4:34:
                    1d:95:d4:6c:20:de:98:54:97:69:dd:79:0d:c3:70:
                    77:2f:84:5e:ee:c1:14:09:6e:ff:f9:54:e4:48:b3:
                    57:dd:56:dd:70:ef:66:ea:10:ad:91:5c:82:ee:a1:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B4:10:E6:9A:87:63:D0:81:4C:52:78:55:34:57:5B:E2:C0:D6:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17e0131d-8b2f-4e22-b3eb-49cd5c8c3df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:bf:fe:c4:5f:69:0c:db:cf:18:3c:5f:ef:a4:2c:42:41:
         59:38:ff:2a:74:09:21:d7:2f:97:84:4c:35:3d:e3:6a:59:fe:
         6f:af:0b:e2:13:05:db:7b:7c:95:02:b3:64:7f:47:3f:95:5f:
         d1:2a:1a:14:5c:9f:01:59:d2:44:a7:a9:a2:96:eb:be:aa:2f:
         7c:cd:6f:98:80:da:b3:91:da:4b:58:e4:b5:3b:0d:a9:41:ad:
         95:62:2a:2a:b6:2e:a5:38:e0:a0:bf:af:3a:a0:cd:03:4a:84:
         17:2c:ea:33:9c:08:80:7d:1a:45:c1:13:6f:a4:73:cb:cc:28:
         ff:24:ff:97:35:9c:f3:17:30:d5:d8:27:3a:bd:f7:08:d7:5d:
         40:ff:c8:db:fa:5c:b9:83:aa:f1:e8:60:0e:c6:db:59:ea:35:
         42:1c:ed:95:c4:49:f9:77:5e:3a:ae:40:ee:bd:d0:d9:56:49:
         1b:32:da:54:99:d6:75:8a:30:2b:ea:b6:21:8c:d0:97:81:ed:
         d2:d3:e8:3a:90:d7:c4:b5:e6:72:17:da:44:65:52:5a:26:0c:
         df:98:0b:53:6f:57:7a:c0:47:b9:2c:b7:bc:94:66:7e:53:83:
         23:a4:64:3c:76:43:e2:8b:f4:a8:b8:45:33:43:51:8f:96:9d:
         03:9e:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:02:27 2024 by rpki-client on console-fra.rpki-client.org