Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5453119f-94ae-4ba4-8b53-1ab197b2d4bc.roa
File:                     5453119f-94ae-4ba4-8b53-1ab197b2d4bc.roa (raw, json)
Hash identifier:          uqTAcp+MhzPexklHemiOjqARxpFk/tgNy3NniTsVdkk=
Subject key identifier:   07:90:C4:4D:25:27:DE:FD:07:5F:D0:02:5A:7D:FA:7A:45:AC:F7:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3437557C666CBDA823936CEF2897B4BA4432EB83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5453119f-94ae-4ba4-8b53-1ab197b2d4bc.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        164.168.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:37:55:7c:66:6c:bd:a8:23:93:6c:ef:28:97:b4:ba:44:32:eb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=e82b209c48d48d3576d4b6bb50c9c37c0d474d3d291e9a3d077af9a52d9d16bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:3b:c6:de:5c:06:3e:88:6f:5c:d4:98:58:
                    9e:d7:33:e7:62:f9:56:dd:39:d6:b1:0f:85:23:af:
                    e6:9a:e3:79:26:64:6d:20:62:b1:0b:cb:3b:82:fc:
                    a4:10:3d:6f:67:1d:0d:18:2f:06:57:95:86:c9:82:
                    ef:de:6c:5d:06:ea:39:03:bc:b3:3e:05:97:c8:5a:
                    34:dc:77:f4:2c:ac:8f:85:fc:ae:a4:12:1c:f6:80:
                    f9:64:d1:bb:ec:21:28:19:79:cf:e7:c2:4b:da:f7:
                    51:cb:83:a3:c9:03:ea:ba:b0:6b:e7:52:06:34:08:
                    31:e7:ce:22:4b:1a:4d:7f:95:8e:9b:f8:09:af:16:
                    81:4e:e8:f4:be:58:d9:93:f8:c5:85:e6:ec:86:7e:
                    a8:b3:ab:34:78:d9:ae:3a:6d:95:a4:4e:60:d6:41:
                    82:63:01:49:d8:1c:5a:57:19:7e:d7:78:30:c6:eb:
                    cd:f8:99:a8:21:d3:bf:5d:f0:27:32:06:a3:9c:af:
                    24:f6:7e:3f:92:2e:20:e4:e4:87:9c:48:ee:f5:b2:
                    6e:2a:4f:a1:4f:85:b8:aa:4d:cc:29:38:08:ab:d2:
                    92:b7:da:1d:28:52:03:dd:e5:fa:6e:f7:0e:6c:6a:
                    40:f1:cd:40:6f:ea:5f:bb:30:69:01:b5:23:56:3a:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:90:C4:4D:25:27:DE:FD:07:5F:D0:02:5A:7D:FA:7A:45:AC:F7:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5453119f-94ae-4ba4-8b53-1ab197b2d4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c3:72:12:66:84:46:20:24:fb:d4:d1:7e:85:8b:e6:94:f2:ac:
         16:03:f0:7a:50:e5:53:6b:c0:13:b5:9c:c1:eb:47:9c:15:e7:
         e4:3e:da:ec:63:fc:ce:a9:83:e8:33:95:7a:a7:0b:20:60:67:
         2f:d0:93:4d:45:25:e3:23:1f:33:8a:50:f5:db:fc:47:5e:f3:
         30:21:2e:51:2c:2b:87:95:36:32:71:de:f0:a5:ab:c4:f3:ef:
         85:71:db:7d:a1:d2:68:b5:24:54:05:fa:e4:6e:67:57:b1:dc:
         c9:d7:a9:18:68:82:4e:d8:45:9f:01:cd:d6:4d:e6:99:49:de:
         94:9f:48:26:f9:c1:8b:16:bc:3e:2c:4d:83:22:02:9b:90:e1:
         fd:73:50:42:6e:0e:1f:72:3b:37:61:97:1f:f1:31:a1:41:5a:
         b3:31:41:2a:3f:a1:22:89:0a:f2:ee:95:67:30:0b:69:ed:23:
         a0:d2:a4:9b:54:fe:1b:1d:a9:cd:4a:99:03:25:a4:47:8d:f6:
         56:d0:a6:fa:78:00:c6:33:ef:74:8d:25:cb:ba:2f:35:00:e8:
         7d:45:18:24:ab:1a:70:4a:f7:2a:16:5d:11:a5:19:28:de:49:
         74:97:d6:14:07:7d:4f:f1:29:98:b2:dd:8f:17:53:79:de:4a:
         65:c3:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:52:05 2024 by rpki-client on console-ams.rpki-client.org