Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40cfe69e-1046-4bff-bd97-84448fb80390.roa
File:                     40cfe69e-1046-4bff-bd97-84448fb80390.roa (raw, json)
Hash identifier:          ln/8Ek4fc58h0C/Qzvcdwr/Dn05Q4uyaJgEVflDuQ+0=
Subject key identifier:   7F:BC:BC:02:26:0E:B8:1D:43:33:F6:E8:7A:37:5F:5F:1B:69:BC:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31FBAFCD57FD6CD1E108DC7D829E9B52E01EFCCD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40cfe69e-1046-4bff-bd97-84448fb80390.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        54.137.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fb:af:cd:57:fd:6c:d1:e1:08:dc:7d:82:9e:9b:52:e0:1e:fc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=3dc4720ceb225c665703602618efdb62ed84f4d5147967e66866191610af2afb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5c:7b:ed:bf:8d:28:ef:10:ec:2a:c3:de:a6:
                    97:46:bf:d1:8e:c4:82:23:d2:7f:63:3e:1b:67:3b:
                    f2:18:c8:bf:19:eb:53:71:73:3a:17:9b:f6:0d:06:
                    3c:11:a9:90:53:df:85:75:d3:cf:5d:9f:dc:0e:5f:
                    47:de:8b:03:d4:8a:f5:ec:c0:12:43:22:1c:c8:42:
                    8b:88:e7:27:0a:0d:b3:4d:cc:74:76:c8:3a:e4:39:
                    81:0f:d6:be:db:0f:95:6e:bf:69:0e:a1:e3:7d:f7:
                    03:4d:ee:3f:f4:49:c7:fb:cc:9e:30:e2:46:14:cf:
                    a2:2a:b7:2d:f2:4b:b5:61:44:c4:37:c0:d6:73:11:
                    e6:b3:14:07:08:c0:42:18:cb:c2:66:92:53:f6:ac:
                    2f:f0:88:aa:2b:64:a7:35:6f:7e:21:db:8b:63:a2:
                    2f:a3:fe:f2:9d:82:9c:d7:9b:0c:65:6a:22:40:14:
                    7c:4a:0d:97:f4:b7:69:0d:87:68:12:b1:9a:09:88:
                    4d:b0:0a:56:f8:4c:58:a5:c3:60:ee:46:d0:9d:bc:
                    4b:7c:64:b8:ce:30:b7:82:1e:c4:f1:48:b9:e8:85:
                    ea:f2:73:66:a2:b5:bb:15:c8:81:d8:8a:ac:a9:ad:
                    a6:f7:87:77:39:af:33:bc:7f:7c:41:90:e1:16:39:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BC:BC:02:26:0E:B8:1D:43:33:F6:E8:7A:37:5F:5F:1B:69:BC:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40cfe69e-1046-4bff-bd97-84448fb80390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:df:8b:09:56:62:9d:b3:e2:6c:83:46:a1:35:fd:a3:6f:5b:
         19:cf:3e:f9:22:36:2a:d1:19:a4:bc:d9:75:83:8a:e3:3a:a3:
         ae:d9:5f:c4:e6:7e:9e:5a:ed:39:12:e4:36:19:75:5b:25:45:
         a5:8f:51:90:b9:57:1d:f4:72:8d:43:0c:21:96:0b:67:8d:82:
         72:02:3b:c3:7f:91:ed:75:17:c9:57:e5:40:4f:ca:26:0d:52:
         97:50:b6:b0:33:51:43:45:e1:e9:7b:9e:5c:57:b0:a1:a0:0f:
         74:6a:20:6b:51:26:41:8f:b3:f7:8c:50:f6:31:be:a8:8f:d2:
         8d:79:49:68:82:13:71:12:cf:38:e1:f6:bb:2f:14:e9:8f:c5:
         c0:26:8f:cd:fa:3d:79:fa:93:e4:a8:40:7d:3c:04:15:67:00:
         15:b7:9f:c2:8f:17:9b:86:53:20:ad:1d:a1:ea:a4:89:c4:7f:
         97:3c:82:f1:a9:df:25:d6:7f:5a:1b:f0:86:95:e4:54:e8:15:
         60:6a:00:d0:27:f1:bd:64:e2:74:b7:d2:3e:e4:e5:c6:cb:81:
         ba:62:54:17:eb:b9:24:23:d6:3f:b3:a7:c0:50:0b:03:3f:67:
         4e:39:56:00:d7:42:09:5d:66:f6:70:33:28:a0:a8:a4:2d:2a:
         3d:14:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:19:28 2024 by rpki-client on console-fra.rpki-client.org