Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51c7afd7-8071-4553-b552-00d83dbc5e05.roa
File:                     51c7afd7-8071-4553-b552-00d83dbc5e05.roa (raw, json)
Hash identifier:          FH3XoaY09f+boDATvR6hhW0y3GXeRZUQyNFGS27k694=
Subject key identifier:   DA:62:58:46:27:85:52:B3:22:84:6A:79:DE:81:F8:83:2D:E4:DA:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14A43ED0E4DEC0E0BCFCA9356D507B65542EE817
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51c7afd7-8071-4553-b552-00d83dbc5e05.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.12.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a4:3e:d0:e4:de:c0:e0:bc:fc:a9:35:6d:50:7b:65:54:2e:e8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=60c80d3ed6b1ab27b855e6b99d774b856fe62257172e31709eb9d1e098febe6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:36:d3:79:a1:60:89:8e:47:9c:51:ee:4c:
                    7a:16:12:51:48:15:78:8a:00:07:c9:b7:ac:63:4b:
                    bc:55:23:a6:09:a3:98:38:a3:1a:aa:23:7d:3b:55:
                    26:0f:a4:93:49:48:5d:cc:1a:61:90:2a:39:d1:b5:
                    18:9d:37:0e:2d:d2:a9:6d:b8:1d:f8:6d:0c:e8:db:
                    0a:0d:62:d0:6d:b4:96:81:ae:7d:f5:ea:7f:92:58:
                    ee:1e:43:5f:38:a9:67:2c:5a:e8:0b:b2:17:fc:da:
                    cd:dd:6d:4b:f1:a4:e9:e7:bd:74:44:7a:85:71:f5:
                    f1:91:e2:31:34:67:8c:af:f4:48:af:4a:87:ee:8b:
                    d0:07:c8:06:75:75:f5:36:ae:f0:aa:c4:c4:6b:ed:
                    67:8e:d2:85:1a:bd:0b:6d:72:09:02:a9:57:fb:e7:
                    5c:4d:0e:3f:54:12:6f:7b:fe:2e:ac:74:b9:a6:b8:
                    97:a9:0c:08:4d:42:cf:03:5b:d3:02:5c:56:f2:c8:
                    10:3e:3b:90:34:6c:b6:97:5b:78:ca:9a:2f:9f:d0:
                    c2:9e:f7:95:7b:df:a6:5c:0e:e2:35:13:15:b6:66:
                    6d:e1:1b:8f:6e:79:78:26:b0:08:ae:3f:ed:c8:1d:
                    05:6b:22:0d:73:7e:82:4d:00:c2:a9:ad:8f:ec:79:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:62:58:46:27:85:52:B3:22:84:6A:79:DE:81:F8:83:2D:E4:DA:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51c7afd7-8071-4553-b552-00d83dbc5e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.12.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:40:c2:26:98:88:a7:b8:df:f0:de:39:d3:72:cf:cd:36:d0:
         28:c1:44:07:0d:66:72:55:f0:b2:b5:a4:eb:10:05:68:7a:3c:
         97:f9:3b:24:84:c0:4a:db:b7:90:da:b7:b3:d5:51:97:00:97:
         32:cc:98:3e:d8:e4:f0:80:c3:15:78:f3:87:e7:41:c2:5f:42:
         b0:4f:51:98:ac:0a:35:bd:d9:69:cb:8f:1f:b6:74:55:97:0f:
         eb:09:c0:f0:6e:2c:79:05:3b:a9:31:93:7d:a9:d7:56:e3:78:
         62:26:c1:0a:c6:9b:2a:3e:0c:7c:49:98:90:ca:29:a8:ac:00:
         7f:d4:42:5b:ce:9b:9e:e5:e6:c2:83:3f:2f:e3:2e:dd:01:11:
         61:92:25:4d:07:8b:8e:7b:f4:65:ef:40:fd:ca:86:68:1a:84:
         56:92:17:b2:7f:e1:87:32:94:c0:ac:6c:81:f7:3b:e6:3b:9c:
         ef:49:8a:56:c2:04:39:2d:4b:63:b4:80:aa:06:24:da:3b:0f:
         cb:b3:17:4d:30:95:ef:76:59:cb:c5:44:32:a9:e7:96:cd:a9:
         b4:6b:e5:dc:b3:4f:35:27:e9:bd:5b:a1:69:a2:ab:c6:d7:eb:
         53:eb:43:8b:c9:3a:60:6d:9f:cf:22:8b:dd:e3:2c:b6:ab:5b:
         c1:66:8e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:02 2024 by rpki-client on console-ams.rpki-client.org