Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227ceee6-22a9-41af-a045-f2326713ef00.roa
File:                     227ceee6-22a9-41af-a045-f2326713ef00.roa (raw, json)
Hash identifier:          M3j/VLRUMBNL6+cHZYliOx2uF4OziLVLcndsIc2fPaQ=
Subject key identifier:   DA:B8:7D:F8:18:A0:72:DE:3F:0C:84:34:88:4B:18:52:87:6A:07:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       283F0BE1EAFA5E9A507D17CDAD742D6D49E4400C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227ceee6-22a9-41af-a045-f2326713ef00.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        204.168.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3f:0b:e1:ea:fa:5e:9a:50:7d:17:cd:ad:74:2d:6d:49:e4:40:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=42f6083d988c4437ab20683ff944f05cb02698c67c66c69c94408dcbfffbebb0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:fa:09:95:17:d2:a4:ae:44:f0:6d:9d:f3:
                    7c:6b:21:39:5d:4c:fe:97:86:11:65:fb:08:16:a1:
                    08:9c:5b:ea:c3:fb:a9:bc:a8:49:6c:90:77:c1:0a:
                    ca:e3:7d:3d:75:ca:02:05:54:d7:28:ac:17:b5:4d:
                    16:ab:61:6c:6c:f3:ce:a2:51:89:5b:b2:55:f8:ab:
                    2c:c1:f5:e0:62:02:fd:54:e2:51:d4:13:9b:f1:93:
                    e3:f2:81:f3:05:d2:34:83:a1:02:51:3c:ff:4d:04:
                    bb:f2:5c:b7:b1:aa:ad:0b:8a:b4:87:08:8f:87:6e:
                    dd:95:80:b1:38:84:70:41:99:06:cb:c3:5f:53:5c:
                    9b:1b:65:68:d2:34:c6:a0:96:93:c3:53:ee:2e:0a:
                    b3:91:39:18:ad:39:56:8d:9d:65:3c:e6:7d:54:d8:
                    29:f5:c4:3e:35:a7:da:9c:41:48:c6:bb:44:b9:c0:
                    4e:a3:e7:73:ad:4c:3a:fd:15:1e:f6:0d:7f:5c:27:
                    2e:3a:29:ed:5c:a4:2c:cf:9f:00:d8:9f:f9:7a:d9:
                    a1:de:13:8a:03:2e:27:dc:56:29:63:b4:10:6f:48:
                    d6:9e:df:8b:08:dd:1a:84:12:ff:5d:19:68:cb:b6:
                    08:7b:b4:b6:e7:39:d6:ca:7e:3c:e9:e9:a3:fc:e5:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B8:7D:F8:18:A0:72:DE:3F:0C:84:34:88:4B:18:52:87:6A:07:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227ceee6-22a9-41af-a045-f2326713ef00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.168.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6f:93:a5:6b:f1:bf:87:b7:e1:ea:9b:3c:f0:64:bc:75:45:d8:
         10:58:20:50:f2:7d:d6:cf:19:be:e9:d3:ae:2b:b1:f3:05:fd:
         cf:6d:1e:ec:fb:d2:8f:ec:30:8f:f7:3e:bf:5a:cf:17:ba:a0:
         df:0c:c6:5d:74:29:56:8d:45:45:0d:c5:51:f2:a0:ac:b4:7f:
         b8:86:f3:91:79:94:0b:35:c2:39:b2:27:9a:cf:fd:c3:ef:cc:
         06:92:18:6e:c2:63:bb:d5:a4:b3:eb:c8:0e:27:f7:03:48:c8:
         14:9d:42:b7:62:91:8f:e7:c9:ed:7b:c0:f8:b2:91:50:58:ea:
         e4:89:08:3a:67:cd:71:1d:bd:7c:d8:78:63:ef:a8:11:68:66:
         67:83:8c:41:8c:47:4c:d5:37:a8:a4:85:ab:6f:61:3c:97:83:
         8b:e7:5a:4b:25:bc:e7:a2:1f:ed:5b:e2:1f:d3:76:4f:f8:20:
         22:51:a3:e1:a0:40:eb:66:19:b2:45:0a:d5:38:a5:58:2c:6f:
         ac:36:e7:00:2b:0d:d6:e4:c5:3f:fe:7b:70:c6:a7:6a:bc:ff:
         6e:ed:a6:c3:d1:76:a3:47:a7:84:12:b1:8a:3b:91:e0:6b:58:
         c3:2c:27:54:b0:35:8e:6a:47:82:9e:f4:9c:3b:56:b9:28:3e:
         6e:89:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:11:28 2024 by rpki-client on console-ams.rpki-client.org