Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e638f6-0362-4c37-b8e1-db367d04f229.roa
File:                     49e638f6-0362-4c37-b8e1-db367d04f229.roa (raw, json)
Hash identifier:          f+qoPO4LX4n1dKQJtHI5v/Xm/2q/Do6RebmH9KE5Mpw=
Subject key identifier:   B0:7C:AA:D8:7F:EC:FF:A3:EA:7F:4E:D4:10:CC:B2:23:A8:10:E0:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       073D8600578AF8D883894039DDBA9D77A9B96DD9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e638f6-0362-4c37-b8e1-db367d04f229.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        75.45.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3d:86:00:57:8a:f8:d8:83:89:40:39:dd:ba:9d:77:a9:b9:6d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=8b04720db59854fd185f56a416035741a70482f57177328825620b8e7162b688, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d2:5d:ab:3a:eb:15:48:8f:08:0c:c6:88:bd:
                    83:f5:ea:b1:89:62:08:a1:53:a2:32:a0:ee:a7:3f:
                    03:a0:09:61:13:55:4d:de:06:19:73:18:f3:61:aa:
                    6e:0a:f1:ef:35:31:44:bd:ee:53:43:97:a5:e3:28:
                    97:9c:fa:62:b6:13:5b:94:bc:00:cd:db:67:4d:6c:
                    3c:00:75:b2:b5:09:7e:d7:33:3f:86:0e:d4:d2:1a:
                    7d:65:55:20:98:be:21:a8:7a:b5:4b:ed:88:5e:96:
                    bb:6b:52:4d:f4:a0:79:ef:9e:97:1d:7e:b8:53:4f:
                    29:cd:f7:14:84:6f:e6:0e:36:dc:49:66:d2:de:e7:
                    a5:77:9c:7e:7f:24:0c:76:4c:c0:f2:19:28:29:34:
                    d4:19:de:49:de:aa:97:57:b1:e2:03:03:1b:05:e6:
                    c2:5c:cc:34:fd:bc:b7:28:9c:5e:fd:b1:a7:55:57:
                    1d:e1:76:1c:41:0d:dd:19:c2:73:47:f1:52:1c:f4:
                    38:33:54:2b:ed:93:3d:72:6c:09:b9:68:2b:3a:e9:
                    98:cd:34:ec:0d:13:ba:59:89:e9:3f:53:2b:4b:0c:
                    7f:4f:67:32:ff:99:fc:8e:46:d1:ce:97:06:22:d2:
                    f7:af:4e:80:d2:9d:bc:9d:24:16:49:12:e7:55:d1:
                    b3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7C:AA:D8:7F:EC:FF:A3:EA:7F:4E:D4:10:CC:B2:23:A8:10:E0:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e638f6-0362-4c37-b8e1-db367d04f229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.45.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:60:f2:50:00:e4:d5:3f:18:c6:10:ba:7b:c0:73:b4:f9:1a:
         1a:d8:c8:25:5b:23:e1:ae:7d:1b:70:81:14:99:ba:84:e3:61:
         8b:a3:14:82:79:1d:eb:7c:88:6c:8f:09:02:41:73:59:5d:2e:
         54:fb:12:49:37:71:cf:af:6f:27:6a:bd:60:2d:c6:55:b0:1b:
         30:8b:0b:45:83:d4:76:85:ce:7e:d5:54:46:99:ab:63:75:e6:
         d2:d3:a0:6d:b9:70:4d:b5:78:f4:81:9e:3b:9d:f6:4c:35:21:
         47:1d:84:dc:4c:6d:30:f5:a7:f8:1d:c7:7a:2c:20:bf:20:7d:
         7e:5c:f0:7c:20:5f:eb:a9:c3:d5:c8:3d:ce:a2:5f:47:eb:98:
         40:bd:bd:41:81:ac:bb:61:22:f4:70:dc:23:e9:a6:4b:bb:bc:
         b2:40:39:40:6d:e6:ef:96:a9:d8:be:c8:c8:34:4b:1c:57:d2:
         51:6e:dc:d5:5f:b7:32:10:4f:2a:9f:fc:c0:c4:e8:9e:c4:61:
         29:ea:95:4c:bd:45:df:d4:80:89:cc:7c:c0:90:4a:3e:f0:0f:
         a8:0a:12:e6:43:46:e2:c6:5a:3c:1f:44:bc:97:2b:63:ef:49:
         60:2e:38:bb:34:f7:38:ce:09:3e:4f:45:15:2f:d2:d9:ba:8e:
         e2:10:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:58 2024 by rpki-client on console-fra.rpki-client.org