Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4924c9f7-6c9a-4f1e-85db-2abea0bc2cc5.roa
File:                     4924c9f7-6c9a-4f1e-85db-2abea0bc2cc5.roa (raw, json)
Hash identifier:          n2qnAcCZ2kz82lbAGPR2ZNLS9nPpUstX0HviW2xbreM=
Subject key identifier:   7C:24:7F:85:99:0E:7E:E2:E2:74:C3:A8:83:AC:BD:DD:C0:85:77:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F90F9BEC98DB5E1BD73FAFD30174EC2548A896D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4924c9f7-6c9a-4f1e-85db-2abea0bc2cc5.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        65.175.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:90:f9:be:c9:8d:b5:e1:bd:73:fa:fd:30:17:4e:c2:54:8a:89:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=e75cb1e7f3e86db814b42b9166f36b38019054ad138623d57c12cce1dd73d72e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:78:5b:19:08:5e:80:aa:c6:b5:dc:57:41:
                    02:60:2a:71:8b:16:b9:c0:d5:81:bd:e1:64:b6:87:
                    e9:ab:eb:c4:1e:6b:36:5a:f3:f4:cf:aa:a9:88:9e:
                    b8:cd:a4:5e:60:6c:e6:23:22:1b:95:05:b7:20:73:
                    58:9e:53:32:33:9d:3e:f4:bc:79:a8:a9:31:c3:3f:
                    7f:d1:9c:69:db:4d:0e:3a:f8:c9:66:df:5a:5f:1a:
                    2e:88:67:0f:06:61:71:cb:00:40:5e:3e:af:da:18:
                    70:0a:9c:3a:2b:fb:26:f2:77:f4:b9:ed:cc:87:66:
                    b8:5b:20:3c:c1:ef:e5:47:ee:4e:3b:db:e5:ac:e2:
                    9c:bb:c5:51:9d:7a:a4:df:25:fd:8d:25:48:00:24:
                    c1:0b:c1:76:dc:85:9c:68:da:01:0c:b9:86:27:16:
                    18:aa:94:cb:b2:88:ee:0d:cc:97:61:64:6e:90:eb:
                    c0:a2:89:c8:5f:ad:80:b1:c7:85:5e:ab:b6:75:38:
                    31:a4:02:71:18:88:8f:21:48:b7:f5:9d:13:0b:78:
                    bc:7f:b9:a0:2e:71:db:e6:4f:a5:bf:29:ce:36:cc:
                    97:17:13:82:a2:11:b3:9b:9d:dc:91:63:aa:a5:e8:
                    21:91:94:11:97:4d:72:b0:d1:07:4e:2f:00:7d:f4:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:24:7F:85:99:0E:7E:E2:E2:74:C3:A8:83:AC:BD:DD:C0:85:77:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4924c9f7-6c9a-4f1e-85db-2abea0bc2cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.175.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:99:d0:9a:65:fd:2e:bb:26:4e:75:5f:21:14:ab:19:aa:07:
         60:47:ea:31:9d:1c:fe:79:30:6b:1b:70:e2:e6:5a:60:18:34:
         cd:84:59:5c:0c:58:01:81:52:d0:d2:f4:8d:35:b2:34:a8:3e:
         3c:7b:11:ba:ce:46:a0:e6:24:77:37:a6:d8:47:05:3b:a5:d1:
         c8:11:95:2b:38:21:55:1c:98:d0:33:29:21:ac:24:3f:36:5f:
         f8:6b:eb:9a:71:02:14:ff:08:96:4a:1a:73:29:bc:16:26:9b:
         f4:e2:93:af:fc:f7:3e:60:4a:c6:55:2d:81:b2:3d:ec:8a:7f:
         21:d1:25:08:d6:ec:5f:56:57:d6:9a:cd:9c:a6:12:79:b8:be:
         42:86:d5:af:ab:ab:dc:bb:7f:ad:39:c2:41:7c:00:c2:2f:63:
         93:1a:d5:9b:16:92:43:ba:74:50:0f:a2:96:0a:c6:48:6c:e5:
         84:27:2f:f9:67:1c:de:0b:e7:60:7f:05:13:b7:1e:f9:2b:05:
         06:f8:c1:85:2e:cf:12:d5:69:5e:4f:cd:7e:41:47:40:2b:59:
         af:f6:b5:58:b2:a9:32:79:df:b7:51:26:e5:2c:db:87:45:59:
         a4:86:7f:07:95:09:f0:be:ee:cb:82:70:6b:20:b1:c4:76:82:
         76:55:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:35 2024 by rpki-client on console-fra.rpki-client.org