Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54adac5c-2673-41e4-b4a9-09e8a660066d.roa
File:                     54adac5c-2673-41e4-b4a9-09e8a660066d.roa (raw, json)
Hash identifier:          WlAeVnM2x0uJLxw6N93mMYIF8TXhZrsDC0oSljQhKsA=
Subject key identifier:   54:CD:D2:9D:B9:64:00:E5:B5:1D:BC:E8:61:81:FB:B4:5B:1F:A4:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CF1E930F1AAD419124EB021C9258F056A4DB07F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54adac5c-2673-41e4-b4a9-09e8a660066d.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        173.83.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f1:e9:30:f1:aa:d4:19:12:4e:b0:21:c9:25:8f:05:6a:4d:b0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=83b124f3716ba18393db30b238665d49242c3ed316f3d70b763972fbd377a3df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:7b:4f:0b:39:aa:bf:b8:2f:11:41:fa:8f:
                    d1:d8:57:38:ef:3e:94:5a:fc:80:47:16:63:e9:a7:
                    50:79:14:22:fe:df:58:a2:a8:e5:12:30:a0:48:ea:
                    48:78:91:39:a6:4b:dd:7e:8f:fb:4b:d8:03:89:e2:
                    44:ef:52:c8:77:3d:fd:54:40:b7:2c:a5:4e:e5:52:
                    40:4d:cc:9b:d9:d2:25:34:01:56:89:45:97:d9:a6:
                    ef:97:6e:27:c5:2c:62:a0:15:d0:bb:ee:73:83:77:
                    e9:ca:60:02:f3:b6:64:33:1e:87:30:e8:f4:5b:55:
                    db:82:e6:3b:c1:a7:7f:b2:50:97:76:8f:dd:ef:44:
                    a1:5d:5f:ab:c3:7f:67:61:ea:17:26:43:8c:5c:15:
                    a6:68:e9:80:7f:9c:05:6e:e7:85:7b:16:17:8d:16:
                    1d:78:07:dd:1b:02:a5:a5:73:6b:b4:dc:a7:54:01:
                    aa:a3:73:45:0a:8c:9b:b4:a8:a0:c8:f1:3d:f5:d9:
                    ae:73:e0:c0:b8:75:ed:af:71:81:6a:11:26:26:b0:
                    8e:ca:bd:fc:3b:2c:58:c7:1a:18:7c:73:a1:0f:7a:
                    b2:4c:c0:aa:1f:e2:dd:4c:fc:37:92:9c:3c:df:0d:
                    b3:9b:f5:09:70:68:d1:e6:dc:8b:83:0a:b1:7e:0f:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CD:D2:9D:B9:64:00:E5:B5:1D:BC:E8:61:81:FB:B4:5B:1F:A4:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54adac5c-2673-41e4-b4a9-09e8a660066d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:6b:46:08:ad:2b:31:3a:bd:7d:46:51:16:83:b5:0b:5b:a1:
         e4:39:8b:4c:b4:12:40:1c:24:64:fd:f3:ee:fc:45:2d:66:af:
         3c:7d:fb:54:f6:b1:fc:20:40:dc:5a:4a:7e:c0:e4:5d:35:c5:
         6e:c0:43:bd:f7:41:9b:3f:2b:5e:c1:b9:5a:3b:cc:df:e7:a6:
         d7:ae:f7:59:17:3a:11:62:31:c2:cb:11:40:29:fb:6d:25:ae:
         6c:2d:9a:0d:72:a5:95:e5:b1:a9:d2:c2:b4:d4:e4:78:e0:91:
         b4:a8:ee:45:5f:da:9d:31:98:82:de:72:fc:7c:ed:39:13:75:
         90:61:12:5a:40:fe:e1:fa:79:b6:ce:a3:b4:5f:25:28:d2:7d:
         99:7b:9f:fe:b7:fb:10:88:ee:8f:a5:76:92:71:af:79:33:ec:
         c8:02:67:32:e8:c2:5c:89:d3:7f:05:1a:c1:e5:79:92:e2:20:
         fa:ba:93:24:3e:97:c8:00:63:b6:78:55:d6:3e:fd:53:1c:f4:
         82:60:0d:05:ed:79:d5:22:5f:b9:30:de:28:81:d0:9e:38:f2:
         36:e2:09:4f:52:c1:e3:32:10:94:6c:0a:55:98:45:55:9b:9d:
         45:7a:ae:26:b9:ea:b1:47:dc:39:9d:51:30:29:e7:89:0d:42:
         42:1c:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:47:23 2024 by rpki-client on console-ams.rpki-client.org