Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b25ccf-2082-4e9a-a5f1-b24b4b94a75a.roa
File:                     22b25ccf-2082-4e9a-a5f1-b24b4b94a75a.roa (raw, json)
Hash identifier:          R2dvkmJPNJ1GJF3262BsRxIH8SliE++rEgJhimGIEBM=
Subject key identifier:   1A:6C:EC:91:DE:2D:EA:15:FD:8F:E0:B1:15:D9:EA:9B:BA:79:3D:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04D5A1A1052F318866493E2C49C34A2A66DE9EC1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b25ccf-2082-4e9a-a5f1-b24b4b94a75a.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.240.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d5:a1:a1:05:2f:31:88:66:49:3e:2c:49:c3:4a:2a:66:de:9e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=f9bf9e86f46e8028bbaed27eab63099c538c7fe8ce1b937ff4836a3e2f0bccab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:46:ae:f5:60:2d:6c:7b:16:e3:59:2a:2a:
                    d5:83:97:d9:b4:86:44:27:cc:05:c0:b4:dc:7c:77:
                    14:79:3d:78:fe:a7:72:8c:8c:5a:2f:89:6e:6a:c6:
                    39:b3:81:d1:10:85:44:f2:95:85:8f:f6:29:64:bc:
                    19:1b:d9:83:9c:63:22:e1:17:55:2c:f8:ed:34:db:
                    02:f1:c0:3d:c1:49:d7:f0:59:66:6a:9f:24:22:42:
                    46:f7:13:67:44:35:c3:25:72:c4:d1:2a:f5:5c:e4:
                    f9:19:f3:75:92:f6:aa:77:db:b7:27:cf:df:0f:87:
                    e3:1b:44:b1:de:c1:f7:10:04:53:83:93:6d:67:bc:
                    09:04:00:2c:e2:24:44:8d:a2:1f:4f:da:6c:07:53:
                    db:38:4d:ba:bb:5c:5f:db:a5:74:b1:bd:d1:90:5e:
                    6e:79:10:fa:05:13:a3:f4:16:28:39:1b:7f:27:2e:
                    3c:36:f5:96:64:24:39:9f:09:96:d3:73:02:99:1f:
                    69:f0:78:53:99:8c:14:aa:b6:98:3e:98:86:79:fc:
                    de:0e:ea:73:c3:e9:e3:e8:9c:49:10:c4:bf:22:3d:
                    9a:8f:33:78:af:5f:2f:f7:b8:49:24:34:6b:59:8c:
                    fb:40:b5:49:fa:e7:1a:f0:76:62:18:d5:1c:8e:96:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6C:EC:91:DE:2D:EA:15:FD:8F:E0:B1:15:D9:EA:9B:BA:79:3D:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b25ccf-2082-4e9a-a5f1-b24b4b94a75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:8d:03:21:d2:af:b8:3d:88:1b:ef:0c:b4:da:aa:de:a3:e1:
         fe:6e:3b:30:2c:36:8f:74:5c:bd:0b:51:9b:6c:b8:9e:13:61:
         7b:87:00:95:4c:e0:92:b2:75:e9:f0:48:ec:83:e5:95:93:42:
         72:5b:ce:3a:6e:66:f5:f2:4c:09:fc:9b:bd:1f:ac:c3:5e:48:
         99:27:64:e0:ec:ce:ee:22:dd:cf:72:13:7f:f1:46:a2:56:7b:
         02:b1:98:48:e1:19:3c:ac:fb:9b:cc:b3:65:bb:19:5f:d6:5b:
         78:46:ce:fa:cb:00:bb:3c:09:67:d8:38:16:89:76:65:1d:9e:
         c3:30:50:33:b2:e2:e4:5f:67:90:8e:f3:fc:ec:3c:dd:d1:49:
         2b:39:7f:8b:22:a4:84:c4:8f:4a:f6:8d:4a:66:cd:0f:b3:e1:
         91:05:5c:98:e6:4d:55:6e:fb:fd:62:21:63:16:e6:23:a0:2b:
         4d:92:9a:87:d5:02:eb:9c:53:37:17:09:b9:53:62:26:83:45:
         93:5c:2f:99:b1:2f:d8:44:d6:89:91:df:91:19:5b:3b:12:c1:
         fa:bf:21:bc:71:39:50:33:2a:2a:0f:97:71:12:6a:10:d2:b7:
         74:0c:df:b9:fe:9c:51:ed:2f:49:00:10:9b:89:96:d3:b1:a5:
         5f:c9:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:22 2024 by rpki-client on console-fra.rpki-client.org