Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38d0bbfe-cfca-4c10-92ea-d8b18549a0d9.roa
File:                     38d0bbfe-cfca-4c10-92ea-d8b18549a0d9.roa (raw, json)
Hash identifier:          YuIlC72GOb+PL8mi55xyaEDY73aW6omWZr51RZQbmlk=
Subject key identifier:   7E:CE:98:C2:15:99:44:47:60:AC:41:F1:D0:46:B0:03:1C:16:C1:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4AAB8CCF9CBEE5DABE7D6B558E68F2FCE52466E1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38d0bbfe-cfca-4c10-92ea-d8b18549a0d9.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        128.167.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ab:8c:cf:9c:be:e5:da:be:7d:6b:55:8e:68:f2:fc:e5:24:66:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=cb2f635e6cec3767fa5b54260ef59c8f96c47020df9759845455970dde2fb799, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:26:59:be:eb:a0:1c:3d:21:94:07:fd:84:11:
                    8e:f4:9c:e7:1c:41:22:c0:a3:71:df:38:06:a1:3e:
                    77:fb:93:26:db:01:a7:16:b9:a6:c4:92:bb:65:5b:
                    da:71:b8:c7:1c:e5:75:2b:0e:44:36:5c:97:e6:c2:
                    bb:4a:51:b7:a7:70:ae:7e:24:2f:da:88:26:8c:43:
                    d0:3d:48:a5:ff:33:cf:f2:33:b6:d9:63:f0:28:22:
                    23:8b:51:c1:8d:e6:61:a6:9b:26:bf:2c:25:44:c5:
                    7f:96:cb:c6:55:5b:25:7f:35:cf:33:08:23:a6:e0:
                    51:26:a4:b5:2f:4d:a9:87:04:ba:c8:4c:d6:de:16:
                    8b:25:25:a6:62:d5:af:29:5c:1b:21:24:51:af:55:
                    4e:72:8c:fc:5a:b1:68:b0:2f:ad:78:a2:0f:aa:22:
                    61:72:7e:27:d6:21:50:cd:e7:31:f2:7c:04:87:e5:
                    20:d0:f0:09:96:db:38:8c:20:ab:26:19:bc:27:44:
                    3d:56:4b:a3:93:99:e8:ad:43:3f:93:5e:13:fe:66:
                    b4:87:a6:e5:59:dd:a0:79:2b:d0:43:14:1b:37:7e:
                    5d:77:ee:dc:98:ac:1e:71:b4:eb:f0:64:ec:a5:bc:
                    27:fd:de:db:91:0c:a2:1d:36:4e:7e:84:d6:3e:ee:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CE:98:C2:15:99:44:47:60:AC:41:F1:D0:46:B0:03:1C:16:C1:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38d0bbfe-cfca-4c10-92ea-d8b18549a0d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:88:70:2e:f4:dc:9b:ba:df:32:7e:77:b3:3c:38:e1:d8:4a:
         27:05:3b:94:82:67:89:ee:e2:c1:bf:b2:86:99:b4:8b:85:b2:
         f0:61:36:6a:6b:cb:55:5b:f7:06:27:8e:be:2f:7b:73:ea:1c:
         10:92:9d:c6:26:40:e7:0d:06:86:57:11:72:f8:c1:c2:51:2d:
         9c:40:54:00:82:29:e1:80:0c:4c:6f:72:a1:73:39:70:02:df:
         f1:45:0d:54:7f:07:1c:da:b7:31:5e:e2:ae:07:40:ab:27:ba:
         dc:74:f6:88:b5:3f:83:ef:1c:8c:57:4b:ff:ed:69:34:73:0d:
         83:54:eb:2c:a3:0d:a4:87:5e:80:b5:e4:d5:75:68:1b:16:16:
         2c:7b:2e:a0:d5:cd:56:d7:50:7f:16:71:83:9a:a3:4d:97:42:
         e7:2c:6a:67:92:e0:4e:72:61:34:d4:c9:fa:3a:af:92:87:fc:
         c9:b8:b6:9b:76:c2:ca:fa:a8:e9:1c:d0:6e:72:5b:b1:2a:a6:
         e5:b1:23:de:b9:f8:5a:fb:c6:d9:bf:e8:d0:9b:f7:92:fb:4d:
         28:f5:77:09:f3:90:a4:9d:7d:7c:65:9d:39:7f:8f:ac:92:17:
         68:37:c8:be:66:95:88:c5:a9:e3:30:f5:0c:20:0d:e7:5a:71:
         01:6f:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:52:03 2024 by rpki-client on console-ams.rpki-client.org