Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50e09b36-f1ad-47c4-b874-6b645decbc58.roa
File:                     50e09b36-f1ad-47c4-b874-6b645decbc58.roa (raw, json)
Hash identifier:          lDaGFRebvhoO0OdG82bNlh5++YCAWa17dhxAvKtEyxA=
Subject key identifier:   B0:E6:50:D1:C0:12:12:B9:25:40:4A:98:CB:AF:6F:9A:87:BD:00:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EEBA58DA37DD99AC7DC6D4AD808A604C6A0995B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50e09b36-f1ad-47c4-b874-6b645decbc58.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.18.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:eb:a5:8d:a3:7d:d9:9a:c7:dc:6d:4a:d8:08:a6:04:c6:a0:99:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=71327e25abae1d975f8773de84fe2d75570eae27c1cab4cf7c3c8e56740617ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:3c:06:0d:e5:0e:67:a9:0d:38:43:6b:09:
                    ca:25:d5:6b:f5:b5:09:0f:9c:97:12:94:60:36:d6:
                    76:0f:a9:38:b0:32:44:3b:f2:bb:a3:48:d9:0d:31:
                    ef:f2:a6:a8:bb:af:6a:f2:f9:0f:fd:22:9f:c9:a0:
                    fb:ec:b9:8f:5c:50:be:8a:83:f4:e8:a4:7b:6d:af:
                    33:52:d9:d9:69:6c:b4:2f:d5:f3:45:80:4e:40:e2:
                    80:db:79:e4:76:b7:97:54:0e:c9:26:a0:55:0c:ce:
                    bf:14:38:68:f0:0d:10:f0:43:04:c0:33:12:8d:e3:
                    59:d9:9a:11:b7:3b:20:ca:01:4f:9b:ec:ad:6c:09:
                    83:e5:2c:18:68:05:e2:64:53:bb:8c:ec:08:54:71:
                    16:2a:65:ee:57:10:49:f5:b1:32:3e:82:45:ac:6d:
                    21:83:fd:f1:98:be:98:0d:70:26:74:b6:30:a5:9e:
                    32:61:06:c3:06:14:59:53:ff:46:07:1a:11:22:d8:
                    9b:68:36:fb:09:d2:34:e9:d3:73:31:ab:d7:bf:bc:
                    11:16:cd:aa:29:28:8b:f4:1e:ec:db:e2:e4:72:0d:
                    dc:a2:12:3a:9b:59:12:52:99:a9:7e:12:2b:d6:52:
                    5b:9b:ef:63:73:36:e1:c4:18:68:9c:7e:3e:cd:40:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E6:50:D1:C0:12:12:B9:25:40:4A:98:CB:AF:6F:9A:87:BD:00:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50e09b36-f1ad-47c4-b874-6b645decbc58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d1:bc:d3:2e:bc:7e:e0:09:0e:7a:3f:51:5a:07:43:9a:0b:66:
         67:d7:43:55:df:31:d1:c9:29:97:c6:a4:a2:64:b5:d0:98:6d:
         67:45:5c:e2:fc:f0:f8:ed:0b:9f:b2:f3:d6:ea:4a:ad:c3:0e:
         1a:25:4c:5e:18:0e:1b:c1:66:13:c2:ec:27:f7:1d:41:79:07:
         8f:8a:ea:57:2c:cf:fa:50:5f:fd:c6:3a:fa:e6:25:1e:0c:cb:
         00:31:b6:ee:23:18:26:31:08:1b:f1:fb:52:97:57:97:11:02:
         53:cb:cf:ea:2d:2a:87:72:63:50:42:6b:3b:43:16:40:45:59:
         a7:60:9e:e5:b2:43:d2:ed:ed:5e:cd:69:2b:1d:03:15:87:04:
         87:e3:f5:58:ee:15:f1:e1:eb:5e:fd:c1:26:d9:6d:eb:1c:8a:
         1a:f5:cc:48:f3:20:a5:4d:eb:0f:ef:b4:55:75:69:d5:07:ee:
         8d:78:55:88:f3:3a:e2:8f:52:61:ad:5c:92:09:76:84:d5:7c:
         81:2d:b8:ff:5f:18:59:cd:a3:7a:e5:2f:b6:66:b5:66:f3:cd:
         07:2b:e2:eb:e6:b3:62:ff:3c:5b:e2:6c:44:12:b2:56:c3:62:
         1a:22:f5:a1:a5:56:c0:16:2c:bd:86:04:59:89:77:cd:9a:48:
         36:26:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:00 2024 by rpki-client on console-fra.rpki-client.org