Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e462c9e-fd4f-491e-85c8-1ea8930f2f62.roa
File:                     4e462c9e-fd4f-491e-85c8-1ea8930f2f62.roa (raw, json)
Hash identifier:          lP3N58ZwURduiYkoqWBStaE7KwuUP8aiNH7rBRfnXq8=
Subject key identifier:   A2:27:5C:2D:1B:14:26:2E:5C:0C:80:6F:82:A3:9A:7E:3E:62:29:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C1D14E0F73B9BFD739C27FF8FC027C887D38D5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e462c9e-fd4f-491e-85c8-1ea8930f2f62.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        208.86.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1d:14:e0:f7:3b:9b:fd:73:9c:27:ff:8f:c0:27:c8:87:d3:8d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=0e6459598716feed8293e36e572d5567c725c02fddbea45df7b2f4dd947ec289, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:27:41:40:c4:9b:62:35:cc:f3:ca:db:4f:
                    23:7a:73:06:bf:72:54:83:b7:c5:39:5a:53:e9:c8:
                    1b:8a:f3:16:32:79:8b:0b:fd:56:84:02:72:2d:5e:
                    96:89:b5:af:7b:0b:25:a6:4b:bf:2f:05:69:fd:6a:
                    6a:48:3a:dd:84:6e:72:52:1d:bb:be:27:cf:72:f3:
                    fa:62:d7:07:29:d1:68:24:a3:8b:bb:82:4c:7f:41:
                    bb:4c:83:11:4a:39:4d:bf:33:dd:1d:86:fd:de:87:
                    07:42:72:07:ad:30:89:0e:de:12:db:b6:09:43:18:
                    93:92:5d:0d:23:1f:d6:a1:19:91:29:7f:83:1e:c7:
                    f4:41:bb:41:7e:fb:a3:b7:6c:f3:a6:ff:8a:86:b8:
                    48:f1:e6:d3:5e:f6:c9:93:de:63:61:a9:47:ab:85:
                    61:ef:d9:ec:ba:e5:eb:cb:6e:37:26:52:05:1b:d3:
                    55:8f:77:f2:e3:95:30:7d:30:9e:25:6a:e3:15:a6:
                    ed:1a:d2:1f:d9:07:3a:bb:95:0f:66:c2:0f:17:1c:
                    88:c8:2f:a6:c2:15:76:53:f4:2d:ed:c3:02:bc:98:
                    ad:1a:93:b4:15:74:0e:1e:e9:54:8a:2e:b0:55:61:
                    b7:7f:1f:f7:f1:72:ee:b4:f4:59:83:42:8d:6f:e0:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:27:5C:2D:1B:14:26:2E:5C:0C:80:6F:82:A3:9A:7E:3E:62:29:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e462c9e-fd4f-491e-85c8-1ea8930f2f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:7a:08:12:2d:21:56:6c:4f:c5:1a:19:6a:11:81:dd:f1:ba:
         b4:ec:db:35:15:64:ac:ec:24:b7:13:c5:16:ea:69:7c:a3:2b:
         b0:15:33:7c:30:20:29:c7:33:f7:4f:16:d4:dc:a5:0f:bf:5d:
         db:01:44:95:05:db:06:80:a1:81:6c:49:01:a9:85:27:0b:d5:
         e1:76:b4:e9:b1:db:29:b6:4c:c9:6e:04:1b:54:d5:14:f4:c4:
         0d:9d:dd:b5:df:78:cd:ca:49:f1:a2:fe:58:13:0a:57:37:ca:
         fe:6e:ef:51:15:a3:de:95:e1:3f:f3:68:a1:45:53:eb:a9:28:
         b9:85:2f:cb:09:09:bf:0f:c2:8f:c0:71:c9:05:0a:d0:ae:c1:
         11:f8:ea:94:96:73:c1:ad:e6:ee:b0:72:ad:25:56:69:3a:26:
         75:26:48:2d:3d:80:00:b3:7a:44:be:8b:c5:35:f1:48:de:47:
         a8:f4:1a:61:cb:dd:23:ab:ea:f9:8f:cc:16:3e:a1:0d:b0:9a:
         fa:43:03:88:4d:7a:1f:95:09:e0:6f:86:6e:49:75:8f:3d:e6:
         f6:cb:a3:0f:62:c3:64:13:b5:68:e9:b2:22:dc:b5:cd:4b:ea:
         6c:80:8d:8d:9e:d8:4d:81:0f:b6:7a:0a:03:cc:8a:09:c4:c6:
         0d:69:a0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:00 2024 by rpki-client on console-fra.rpki-client.org