Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284ee337-d59d-458a-afa5-4dc1b9587ad2.roa
File:                     284ee337-d59d-458a-afa5-4dc1b9587ad2.roa (raw, json)
Hash identifier:          A2jlbLTxMSXauZfxgWBvip6Adi3hUFZbBM/KxJmnspE=
Subject key identifier:   A2:74:56:74:03:3F:AB:0B:FE:7E:03:AE:56:03:B3:05:8F:0E:32:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26D120CE5B683816A61CB3739711D75F3B690122
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284ee337-d59d-458a-afa5-4dc1b9587ad2.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        35.34.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d1:20:ce:5b:68:38:16:a6:1c:b3:73:97:11:d7:5f:3b:69:01:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=a1816415872d634b767f79ccddf36276c250bb9973ecb6a7ab172c33febf5d53, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:14:7b:00:ea:fb:85:e8:5d:40:5b:27:5b:
                    97:45:96:a6:48:00:22:12:66:42:de:b8:ec:3b:b1:
                    52:41:83:71:f3:ce:ad:51:80:8d:a6:24:76:88:d8:
                    39:2c:d3:03:de:1d:f2:70:e1:19:cc:05:c7:c7:d0:
                    f0:96:3d:a3:a0:69:48:dc:33:9f:1a:fa:a9:18:a8:
                    99:42:78:7b:8e:61:60:ed:e0:1c:b9:14:c9:c1:3c:
                    6a:0b:3b:f0:12:ec:1f:9d:2a:32:61:bf:10:21:40:
                    25:7f:4d:a1:50:c3:35:1e:56:62:33:02:e2:2e:9f:
                    13:89:70:e1:46:c0:7c:ec:3b:84:f5:37:d4:af:d3:
                    79:9c:12:93:1c:cd:23:0c:f3:67:14:66:ef:b2:78:
                    ea:ac:07:c6:f6:97:99:22:61:72:77:6a:87:26:fc:
                    73:99:8b:bf:14:77:f0:38:8e:90:4c:06:54:ab:ac:
                    61:10:4e:ab:57:12:f7:b0:ee:f3:ba:6f:a4:3d:b1:
                    64:a0:a2:14:43:55:12:3e:5c:64:aa:09:20:59:c9:
                    75:e0:43:d0:4c:5e:d9:e3:21:60:cd:28:de:eb:c0:
                    f3:0f:c7:47:a7:30:0a:e9:5e:b9:6b:2d:06:18:02:
                    63:b5:0f:31:56:fc:c3:e1:d7:13:4b:76:ca:a7:51:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:56:74:03:3F:AB:0B:FE:7E:03:AE:56:03:B3:05:8F:0E:32:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284ee337-d59d-458a-afa5-4dc1b9587ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.34.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d3:b4:fb:67:f3:42:88:78:03:5e:b5:24:61:d1:93:e9:6f:81:
         50:c8:8b:e3:7e:7e:53:62:5f:91:3f:89:f7:f6:27:f4:89:89:
         97:03:5e:9b:84:e5:cc:53:b2:8a:c8:a7:c4:3d:65:63:d7:58:
         18:f9:95:a9:a3:98:76:0f:eb:99:f1:16:3c:45:ed:83:f8:ff:
         41:18:b8:23:74:cd:bd:b3:55:25:cf:3c:ad:1f:85:47:b1:47:
         8a:1d:8e:3c:f4:5a:5a:50:59:3e:00:c7:ce:f2:cd:fc:b6:cd:
         02:7b:49:61:ac:18:a1:b0:6e:52:fb:24:de:62:65:28:6e:42:
         d7:45:8b:78:9a:ac:7d:a8:42:26:30:9f:c4:6f:1e:a6:bc:c3:
         57:77:43:d7:ce:c9:6e:8b:aa:58:23:5a:60:be:0b:0e:b2:70:
         59:c6:75:c7:91:34:55:de:6c:a7:76:57:e0:9c:a6:cf:44:7d:
         fe:0d:d0:77:4b:6a:10:71:79:93:97:3d:9e:2d:72:9a:67:ff:
         f3:15:2d:33:fc:2e:42:18:bb:33:69:73:c4:c2:54:e9:28:ad:
         84:c3:3b:7f:b7:3d:95:5c:cf:0e:5b:66:48:c3:9e:59:a6:6e:
         a7:a8:77:c3:a7:75:7b:f5:e2:72:35:30:42:f3:fb:66:65:45:
         c6:87:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:09 2024 by rpki-client on console-ams.rpki-client.org