Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a37f2c5-9f84-49b3-9b53-dc8a55e9d4c3.roa
File:                     1a37f2c5-9f84-49b3-9b53-dc8a55e9d4c3.roa (raw, json)
Hash identifier:          cCcmbDVz+Ksp9mFdQDu7nvbxz6rtQs5zRQq6yhchE2k=
Subject key identifier:   2B:16:5F:69:53:D3:5A:77:BD:45:1F:20:9E:73:64:ED:D0:13:21:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2264428F82AC10BE63783213D72ED940A20C3F72
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a37f2c5-9f84-49b3-9b53-dc8a55e9d4c3.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        192.26.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:64:42:8f:82:ac:10:be:63:78:32:13:d7:2e:d9:40:a2:0c:3f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=376a08946fdc8a68e4886eba288435d7a1500fe05b1acc690638fd6ac3296f56, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:57:28:d5:e3:1b:0e:c6:2d:1f:75:68:10:
                    15:21:3d:f8:a6:e4:07:19:42:f9:bb:cc:72:e3:ae:
                    06:20:28:15:6f:84:de:47:4d:57:0b:8f:08:a5:16:
                    69:e1:7b:15:e5:7f:0a:cb:21:7a:89:48:36:fd:46:
                    89:bb:2f:c3:27:7f:ba:fb:f2:8d:ce:11:45:65:cb:
                    61:2a:ad:67:cd:14:ea:9f:1b:df:f1:f5:f0:88:58:
                    46:ea:64:4c:c4:37:4f:cf:fd:c7:5c:73:cc:d9:0c:
                    b0:ec:cc:58:19:31:63:fb:ce:00:f1:38:d7:ae:00:
                    9b:ff:93:47:14:a2:2f:9c:e1:c4:e6:3e:a2:60:b0:
                    46:77:d6:3b:e3:75:51:c6:8a:58:3e:ec:71:88:b9:
                    23:3b:2b:cd:07:bd:23:22:09:49:17:b3:68:80:22:
                    c0:23:32:f1:c5:36:f8:eb:45:3c:a5:68:83:68:08:
                    f0:b8:e2:c4:8a:a8:fc:f3:b2:79:be:eb:79:69:40:
                    83:2b:c8:e6:64:33:ea:ba:ab:40:21:65:a7:ce:82:
                    2a:8f:db:a6:82:63:e7:3f:dc:d5:93:77:de:db:bf:
                    d4:6f:3c:c2:80:2a:38:70:e3:f1:7d:6d:0b:ec:39:
                    a8:f3:06:ca:58:09:32:2e:22:5c:58:92:f9:91:86:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:16:5F:69:53:D3:5A:77:BD:45:1F:20:9E:73:64:ED:D0:13:21:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a37f2c5-9f84-49b3-9b53-dc8a55e9d4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:43:b0:42:68:53:00:be:fa:07:16:94:8a:07:0e:dd:3c:df:
         b4:27:1e:ee:56:07:91:9b:ca:35:8e:09:01:92:1f:88:bc:78:
         1d:8e:95:57:4f:61:12:74:e1:f0:5b:7c:24:e7:88:46:31:04:
         45:37:57:48:df:90:69:b7:0e:f8:0a:f3:16:20:21:59:dd:07:
         c1:31:8f:60:98:f8:80:88:65:01:68:b5:20:9f:e6:58:5d:ec:
         dc:62:30:a6:bb:0e:bd:6a:90:0a:eb:aa:bd:04:e0:d5:99:c7:
         5d:19:e1:b8:b8:1d:0c:9b:2d:63:35:2f:54:98:26:98:68:a4:
         7d:ce:a7:e2:f9:a2:29:c0:27:b5:61:3f:20:9e:c0:84:7e:83:
         8c:5d:3d:51:2a:1b:03:10:e5:91:63:dc:89:95:01:52:16:6d:
         a6:61:de:1e:62:1c:e5:b6:1b:56:b2:28:44:1d:05:cc:2b:b6:
         ed:50:b6:18:fe:23:d5:8e:32:7d:b5:09:da:ef:c3:df:4b:a1:
         f4:76:5c:21:8b:9c:91:a3:d6:fe:3b:74:ee:75:62:a3:06:f6:
         ea:0d:e3:64:9e:e2:c9:e6:0f:33:d4:21:5c:8b:dc:bd:1d:92:
         b6:2c:9a:34:b6:98:a7:4c:cd:98:51:84:cc:a2:65:7f:a8:8b:
         1e:24:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:46:19 2024 by rpki-client on console-ams.rpki-client.org