Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e2d026c-a787-469b-92ef-8c20037377d9.roa
File:                     4e2d026c-a787-469b-92ef-8c20037377d9.roa (raw, json)
Hash identifier:          gMWHQHK2IMGrb1N9zwMGSNE7rG4d4flw9PNk4nQ91b4=
Subject key identifier:   9A:06:AF:03:68:48:91:ED:30:44:59:8E:82:CB:8F:1A:D6:3D:1F:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       255423D5E8DD77CC5A480FAE83B8F64DA38A57AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e2d026c-a787-469b-92ef-8c20037377d9.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.121.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:54:23:d5:e8:dd:77:cc:5a:48:0f:ae:83:b8:f6:4d:a3:8a:57:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=9e4e7a7a7b628e1cc814ee6a27ae85c73ba8966383c10c66cd059f369cb8be98, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:06:25:04:b4:c5:c6:d1:a1:e5:75:7a:88:
                    c2:4b:22:b1:d6:6a:ce:b6:a7:26:cd:49:43:a2:1b:
                    4c:da:d1:ec:05:c0:af:ca:9b:09:89:7f:7a:1b:c6:
                    4b:e8:23:df:a1:f6:4e:19:c5:67:f2:e8:27:8c:2f:
                    a9:73:c0:10:ab:9f:34:24:a8:79:75:9c:5c:76:72:
                    b8:74:5e:06:3e:fc:6e:02:39:bc:78:ab:91:e6:25:
                    52:4f:35:fa:d5:75:23:3c:63:4c:95:b3:49:7a:f9:
                    95:d8:8f:80:b3:79:2e:85:d3:62:0f:ef:7f:1a:42:
                    9e:a5:90:b7:9f:25:7b:a5:dd:c3:74:a0:98:09:ca:
                    7a:19:e2:ad:a5:4c:9c:87:33:7f:a8:6c:69:b5:36:
                    0e:ad:65:c5:f0:c3:38:e9:c3:59:f1:25:4a:2a:60:
                    15:cd:a7:5d:f0:07:77:e3:2f:69:eb:a1:f9:1d:39:
                    76:3f:d7:f6:04:ce:f3:9b:37:c7:22:f5:98:2a:63:
                    bc:8e:2f:98:61:86:cd:6b:ab:17:db:20:37:ae:ee:
                    63:ed:96:0a:e3:0f:92:8b:4e:fb:06:a2:44:fd:f8:
                    ea:6b:cc:1d:49:5e:77:61:5c:24:7b:9d:02:0d:ef:
                    c8:57:0a:c6:dc:7b:87:76:9c:96:a6:ea:66:15:a4:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:06:AF:03:68:48:91:ED:30:44:59:8E:82:CB:8F:1A:D6:3D:1F:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e2d026c-a787-469b-92ef-8c20037377d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.121.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:68:f8:2a:48:27:25:55:6d:d7:87:0d:36:bb:1c:6b:62:01:
         b4:ff:c9:bc:ab:bc:a4:a1:9c:45:68:2e:2e:60:ef:c2:62:85:
         95:db:c2:3c:b4:74:b9:1b:f2:61:59:18:b2:6b:04:1b:15:06:
         0b:fb:f2:27:b7:b6:aa:dc:83:da:c1:d3:6d:19:f4:2d:de:1d:
         f3:61:b7:43:3a:d3:5b:52:cd:e5:8a:f2:31:18:6c:eb:25:ef:
         28:6e:b0:83:a1:14:8c:c8:74:6e:ff:8d:10:4e:dd:93:65:1e:
         25:c0:f9:51:3f:a4:f0:41:fa:ef:45:69:e5:f4:2b:7f:a2:c5:
         cf:26:94:43:97:87:d9:68:6d:1b:ab:69:9a:0d:6f:ca:77:2e:
         1c:89:7f:c8:87:58:7b:19:fa:93:b8:39:0d:85:84:fc:7d:44:
         04:81:5b:db:f2:4f:74:a5:f9:bc:04:da:1b:73:25:21:c3:bc:
         46:18:05:3e:51:7f:23:f7:4b:73:bb:36:60:73:1a:0e:e9:be:
         b0:1c:91:30:89:e4:d7:e6:2b:a9:e9:c9:60:ed:02:bc:ef:97:
         ad:39:12:9a:e9:23:a2:72:89:ea:79:b7:07:8d:b1:11:83:64:
         3f:d9:aa:a8:28:93:24:3a:fd:e0:3c:1e:ad:48:9b:fc:44:2d:
         d9:b8:bb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:19 2024 by rpki-client on console-fra.rpki-client.org