Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/475aedaf-9d2c-46eb-992e-0ed3d3a82c66.roa
File:                     475aedaf-9d2c-46eb-992e-0ed3d3a82c66.roa (raw, json)
Hash identifier:          pzd6T9+eKkWZhgPQOEBZx5KINIX3x5p3oyLwzy2I3RA=
Subject key identifier:   6B:54:50:9E:23:0A:91:05:39:E8:56:B8:B9:E8:39:1B:3A:6E:92:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10FBCF4EB0474E280E372ED05E827A6E5CDAE731
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/475aedaf-9d2c-46eb-992e-0ed3d3a82c66.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.159.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fb:cf:4e:b0:47:4e:28:0e:37:2e:d0:5e:82:7a:6e:5c:da:e7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=4eae23dd176d06b9bc6e33fc6388468c4615e418ce860c7671e991f63bfcfe04, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:c8:0b:b8:b0:d3:2e:f8:5f:f2:f8:4a:ea:
                    7e:26:a6:cd:2b:ab:c2:df:66:e7:c5:0d:af:d6:a5:
                    51:91:07:d9:31:11:0c:0d:c3:3a:54:2f:7b:d3:d6:
                    cb:fa:36:ba:d9:c2:0f:9d:c5:69:9b:3a:9f:7d:24:
                    02:10:9a:71:e7:9e:bd:cf:52:cb:3e:12:5b:fe:4f:
                    ab:26:c5:d2:2e:2d:af:2f:5c:70:7d:f2:57:6a:02:
                    af:f4:36:85:dd:2b:fb:21:19:cb:6b:b0:1f:d6:aa:
                    f8:08:b6:2c:f0:6a:20:e8:b4:de:d8:b2:69:a0:9a:
                    a9:13:2a:ba:64:96:25:03:1d:e5:cc:ba:37:b3:bd:
                    a3:79:e6:14:0d:71:6b:a8:e7:4b:4b:6d:00:e0:a2:
                    29:33:81:3a:0e:81:d9:d5:25:66:ae:68:97:1d:ce:
                    e5:1a:ff:bf:11:c0:3a:27:16:17:8b:37:7b:c3:f6:
                    bf:e4:07:42:55:69:80:c0:a8:76:a5:19:c1:c7:c7:
                    00:6e:fb:ec:3c:dc:bc:09:86:af:0e:d7:91:57:02:
                    25:76:eb:24:70:c5:30:da:b6:d6:e1:d6:42:f2:13:
                    e2:ad:27:ba:f2:38:02:55:a7:26:19:74:f8:8d:84:
                    a1:f2:39:03:49:ad:ee:51:4b:31:cd:43:09:22:17:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:54:50:9E:23:0A:91:05:39:E8:56:B8:B9:E8:39:1B:3A:6E:92:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/475aedaf-9d2c-46eb-992e-0ed3d3a82c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:27:79:11:77:a5:65:f5:f5:6f:15:ff:48:50:40:0c:4c:27:
         5d:c5:d3:a6:6c:2d:7b:62:fe:82:c6:f0:b4:fe:c9:75:4c:ac:
         07:bf:28:56:e4:59:8b:53:dc:e4:c2:75:a4:5d:ae:08:be:ff:
         81:ba:c3:7b:e1:2c:5b:ab:a4:51:85:13:ee:61:8f:fe:62:06:
         33:d2:fb:1e:96:a8:fb:89:80:ef:d1:40:0a:af:d5:f1:1f:ca:
         0e:ef:72:20:6b:0e:91:0d:e1:c7:0a:5f:38:31:86:0c:3d:a3:
         af:70:74:30:4a:de:10:d4:6d:bd:67:47:fb:9e:37:13:d5:01:
         79:3f:f8:e2:37:75:eb:0d:ac:9c:cb:1c:3a:d5:2c:93:74:2a:
         8f:08:a9:39:33:ff:4e:c0:65:2f:c9:5c:d7:50:f1:7e:f4:a2:
         7b:ca:01:c0:d8:43:10:a8:92:35:38:62:d3:5e:08:5f:56:00:
         75:b9:96:c3:2b:7a:48:ef:01:22:59:e9:ec:47:5b:24:13:cd:
         fd:65:ef:be:2e:ed:fd:ca:84:45:cd:0f:49:9e:41:dd:9e:e0:
         20:2b:9b:6d:2b:07:7c:42:79:f8:24:b3:1e:92:54:49:71:63:
         c7:2c:11:8b:c5:38:8f:4e:23:17:14:94:21:68:4b:75:c1:7c:
         d2:df:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:57 2024 by rpki-client on console-fra.rpki-client.org