Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53f0ccf6-a379-4bb4-a5f3-1e03b1877c99.roa
File:                     53f0ccf6-a379-4bb4-a5f3-1e03b1877c99.roa (raw, json)
Hash identifier:          COxqAMhmoXBDwIEm7iq4+j7E5aK+WuRV48MEPK7jfhA=
Subject key identifier:   0E:D0:3D:15:72:05:A2:1C:EE:8C:C9:9A:58:F9:85:11:3E:D3:83:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E271B88BB61F88C9B1AA50EC66B508AB92D9342
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53f0ccf6-a379-4bb4-a5f3-1e03b1877c99.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        172.103.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:27:1b:88:bb:61:f8:8c:9b:1a:a5:0e:c6:6b:50:8a:b9:2d:93:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=595bfeeecea752a9ad2f1d0fe87237b4f95d7d492045132b73e77551d8db2805, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:aa:89:ac:d1:d4:42:ef:70:e3:79:c1:e7:93:
                    e5:b9:91:5a:24:cd:e9:8a:85:9e:30:95:6b:a5:43:
                    e7:82:6f:b3:9c:d2:26:70:58:6e:61:05:c1:e8:33:
                    4e:b2:2d:71:f7:73:d3:68:fe:ad:fe:64:9c:c4:64:
                    8c:98:a3:92:c4:bc:0b:56:ea:b5:34:0b:2a:f9:d8:
                    d6:b5:88:67:2f:6f:13:1a:09:70:92:9e:c1:d6:31:
                    3e:2b:28:38:8a:93:a7:e1:b1:4c:0b:ba:2a:d6:c9:
                    be:59:2c:2e:d2:48:d3:ab:10:54:2d:a9:d9:af:4c:
                    fc:fe:b0:94:7f:39:79:86:80:eb:84:60:dc:af:ec:
                    e7:fc:8e:3d:d9:c4:fe:bb:39:20:c4:9e:f6:ba:b6:
                    11:da:c2:b3:d2:ce:18:c2:fd:b8:9c:19:71:21:df:
                    4e:6d:15:c0:f5:95:97:01:7a:97:92:1a:f4:69:2c:
                    ea:61:b5:ff:9c:3d:d9:b4:21:37:75:59:a8:2e:3c:
                    88:b2:44:37:ee:5e:f8:ee:6c:c7:b9:fc:1c:81:5f:
                    26:fe:da:f0:f5:33:49:b7:aa:9a:0c:ea:f5:01:45:
                    29:1f:c1:70:df:d1:27:5a:c4:a1:a0:36:2c:7e:e4:
                    80:a0:dd:32:61:34:30:ca:0c:fd:8a:0d:e8:82:92:
                    3f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D0:3D:15:72:05:A2:1C:EE:8C:C9:9A:58:F9:85:11:3E:D3:83:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53f0ccf6-a379-4bb4-a5f3-1e03b1877c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d7:18:7a:3b:1a:cf:4b:26:cf:bb:cd:91:08:e2:c2:05:3f:0d:
         d0:ce:f0:41:e8:c7:71:d7:1b:05:36:c2:ec:c3:d5:e1:61:8c:
         1d:d4:54:02:65:e9:80:c7:b3:f6:fc:7c:70:1a:a2:26:c2:0a:
         14:54:6c:fc:de:c7:ba:35:58:41:b9:07:c9:1d:87:1b:b6:ba:
         21:f3:c0:bf:c1:8b:49:1a:8e:e4:36:79:31:8b:4d:69:7e:0d:
         83:1c:47:b3:82:d5:84:a0:d7:55:0e:16:31:27:11:5f:27:b6:
         91:66:d8:54:ce:e9:4e:87:85:0f:4a:a2:3d:c7:30:51:b8:5f:
         03:46:1f:95:07:d6:17:94:34:ba:d9:6b:da:5e:b5:d7:59:4a:
         5e:0e:87:c7:97:2a:33:1e:78:c8:43:ad:e7:e0:c7:e0:b2:4e:
         92:d3:6a:9d:e7:f7:b0:2b:7d:84:0d:c4:c2:79:fe:4d:0f:8e:
         3e:1f:f1:2b:9f:74:06:34:01:3f:37:67:a2:43:a7:16:cb:05:
         9e:6a:a5:02:62:40:97:7b:a0:fc:ba:d6:16:16:3c:8f:ea:17:
         d7:c1:bf:23:63:df:89:ce:83:b3:c4:c2:a0:6c:a3:f9:4c:49:
         4f:fc:db:de:fa:e2:0c:d6:d4:37:46:9e:aa:f9:b7:ef:a6:e2:
         3f:b0:9f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:03 2024 by rpki-client on console-ams.rpki-client.org