Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47a95b2d-b390-454d-b7fe-61f0be7e13af.roa
File:                     47a95b2d-b390-454d-b7fe-61f0be7e13af.roa (raw, json)
Hash identifier:          Il8NSeBnlb21rNwaB2emnvir6FbFv6f3EleSiid+p8w=
Subject key identifier:   E9:12:EC:C7:93:80:2C:2E:C0:58:89:D6:2D:51:21:59:9F:53:0A:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30654C90F73BD0FACD3C75963F7380DCA51022C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47a95b2d-b390-454d-b7fe-61f0be7e13af.roa
Signing time:             Tue 19 Mar 2024 00:00:00 +0000
ROA not before:           Tue 19 Mar 2024 00:00:00 +0000
ROA not after:            Tue 23 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        131.127.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:4c:90:f7:3b:d0:fa:cd:3c:75:96:3f:73:80:dc:a5:10:22:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 19 00:00:00 2024 GMT
            Not After : Apr 23 23:59:59 2024 GMT
        Subject: serialNumber=4f8a5175e9ef6565e10881fd914b260c9dbd89592dd59eba3621f0d833ba07a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cf:40:49:0a:5c:5e:74:fe:1d:7a:26:75:05:
                    31:86:61:ae:a1:0d:42:81:0c:08:e4:3a:b1:61:e3:
                    fd:fc:3e:9a:c6:41:72:dc:7a:c6:eb:ae:d6:32:f8:
                    bc:9e:5d:0c:d9:19:9d:4b:a9:1c:ab:8c:7d:06:7d:
                    20:7b:b9:eb:d9:52:6e:ac:4e:08:28:2e:aa:94:da:
                    d9:83:d3:5f:56:46:63:08:ce:71:7f:4d:bb:84:28:
                    fc:c5:ab:e7:e5:9c:79:71:cb:bd:a0:d7:82:63:21:
                    3f:aa:d1:13:cc:c5:57:5f:f7:e9:c5:50:b2:15:66:
                    76:e5:4e:93:b0:57:94:17:f3:0a:af:fe:3c:ee:e0:
                    95:dc:16:97:97:16:40:58:54:28:23:f9:4d:57:0a:
                    5c:8b:78:a7:50:9d:8b:ac:42:06:c7:f5:9e:6e:4a:
                    5b:f0:e2:ea:24:ec:3c:2e:0a:e9:3e:ea:a6:4f:92:
                    d0:e6:8c:10:42:60:14:83:e5:a6:0d:d7:f7:ae:f0:
                    9f:1c:d6:0f:3e:25:58:a9:31:30:13:3d:f4:1a:48:
                    f4:4a:8e:e9:66:a0:a9:1b:80:27:b1:61:ad:0e:76:
                    c0:7c:30:1d:c8:09:4c:ab:87:f2:0d:22:2a:67:7c:
                    bc:3e:26:47:9f:3c:31:2f:c8:d7:ad:3f:44:4f:fd:
                    14:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:12:EC:C7:93:80:2C:2E:C0:58:89:D6:2D:51:21:59:9F:53:0A:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47a95b2d-b390-454d-b7fe-61f0be7e13af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.127.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:18:d2:c3:6c:71:c5:3a:2a:71:88:48:ef:5e:db:06:9a:b8:
         a1:91:b8:56:16:f2:2c:c1:7d:9d:81:bd:62:88:e8:95:cc:00:
         c8:cb:03:d4:06:c7:d3:64:90:e8:5b:f8:b7:9c:27:c9:8d:46:
         dd:60:ae:cb:2d:e4:ac:d1:a7:a0:28:9d:5d:b0:09:96:e6:45:
         e4:cb:c1:33:20:67:cc:a3:64:56:80:f0:c2:df:da:8a:ef:15:
         99:d5:95:db:b8:33:77:d7:d3:0a:b4:94:da:a7:18:e2:d1:82:
         a6:62:bd:a4:dd:e2:d0:3b:79:b3:9f:a9:56:f3:e6:3b:bf:5f:
         a5:15:60:d6:51:8f:62:bb:9c:7c:15:79:32:4c:f9:54:14:cb:
         a9:65:f9:48:7d:22:12:47:29:9a:ba:ca:04:b9:2b:cd:7e:7e:
         f2:db:dc:ef:51:e9:69:50:ec:62:82:2b:13:70:f8:4d:d4:63:
         f0:13:28:5c:d4:fe:c6:a2:61:4d:06:79:6c:ac:cd:8e:a7:d0:
         9e:b5:ca:58:1b:79:e9:49:75:73:74:34:b4:9c:88:75:96:0d:
         df:89:93:27:46:23:66:d4:a1:c1:bc:b2:db:3d:31:74:f5:d8:
         a5:b3:2d:b5:22:e6:ca:5e:55:d8:6d:79:14:6c:9c:20:3d:67:
         5f:c3:ac:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:05:21 2024 by rpki-client on console-ams.rpki-client.org