Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/562f261e-21df-4517-9d2a-00eced567856.roa
File:                     562f261e-21df-4517-9d2a-00eced567856.roa (raw, json)
Hash identifier:          ooufrx6XT3m15so9ea1/J6UfLfkTBtET6sjAVXto0Ns=
Subject key identifier:   3E:0F:97:BA:1B:30:81:6A:C2:9C:CE:55:05:59:2C:A4:86:D3:39:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       064C23586DB3814DDDD6EA3944E854287467A8E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/562f261e-21df-4517-9d2a-00eced567856.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        20.131.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4c:23:58:6d:b3:81:4d:dd:d6:ea:39:44:e8:54:28:74:67:a8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=91306b2684764cb3379c29ff9c017b1c862826c08aed4f44f162a938d57bf32b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:24:6d:54:2a:0b:86:1b:68:79:4e:b2:1e:
                    d7:97:b0:12:89:18:19:8c:ba:ed:0c:c4:5d:eb:37:
                    cb:7a:53:25:a8:b1:1c:94:d8:5d:24:5a:d2:2f:78:
                    6d:93:7e:81:e0:94:35:e3:10:d8:da:a3:da:28:d7:
                    c0:50:cd:ae:af:62:21:28:0e:9b:be:4a:c9:1f:38:
                    d7:ef:cc:34:5a:1d:4e:c0:b6:19:84:91:55:95:b2:
                    57:c9:29:76:df:72:dd:89:e5:7d:e2:18:85:f5:73:
                    75:20:99:26:41:a6:3b:83:58:9e:b9:c1:d4:c4:c4:
                    d2:3c:cf:8f:13:ae:58:13:c6:ae:54:7f:a4:45:dc:
                    4d:d3:f5:23:b7:25:fe:04:93:1a:e8:95:36:ea:4e:
                    da:28:ae:e3:a7:b0:09:77:cf:53:4f:d8:5c:54:f4:
                    da:7f:5b:d6:30:9a:97:46:f9:a7:83:e9:d4:4d:1c:
                    f8:f6:92:e7:49:fe:9f:02:90:0b:79:f7:15:b2:a0:
                    84:09:c2:57:4a:0a:43:74:ee:9e:bb:e1:c0:2b:a6:
                    26:01:f8:20:13:5c:32:51:a8:da:fd:0b:69:c1:ae:
                    8b:37:eb:b9:e9:10:52:6a:3a:8a:6d:85:33:83:e6:
                    fa:4e:8d:d2:f0:ea:31:53:9d:0f:bc:f9:da:08:ac:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0F:97:BA:1B:30:81:6A:C2:9C:CE:55:05:59:2C:A4:86:D3:39:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/562f261e-21df-4517-9d2a-00eced567856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:bd:2e:e4:1c:9d:d3:a1:38:6e:2a:47:cf:4c:26:8d:12:4c:
         fa:65:c3:f4:47:dd:c6:be:d0:d8:29:bc:a3:fd:27:3b:0e:ae:
         31:d8:3d:a7:64:ee:d1:45:22:44:9d:38:05:80:b5:81:7a:eb:
         ea:2a:65:28:75:bf:a0:7d:da:ab:39:70:f7:29:6b:4d:53:66:
         51:7e:18:74:ec:31:6d:be:67:32:9c:65:d1:63:46:2f:82:5d:
         33:d8:b3:b7:78:a9:63:34:47:23:d4:3f:dc:a4:3a:11:05:af:
         75:a5:b0:fd:fa:a9:68:0f:73:1b:8a:39:5d:96:0b:2a:3a:be:
         bd:e7:fe:b7:c6:ca:17:d3:4a:a0:23:2a:c5:ba:b5:4d:87:65:
         c8:77:1a:9b:97:4b:f2:87:86:d3:a1:8f:e3:5a:b1:d3:47:41:
         6a:d2:0a:8f:db:5e:d7:75:f5:6a:c7:c5:3e:d5:c5:6f:90:2c:
         e2:a2:25:19:5f:af:52:ea:95:b4:34:2e:5d:63:c7:7d:e6:9e:
         36:c5:f3:07:54:4b:1f:61:6c:d8:1f:11:e8:8f:03:f0:38:b6:
         f9:9a:52:17:55:fa:36:f7:37:7b:51:05:8c:25:ff:c7:60:20:
         c8:48:4e:5c:32:65:8e:d7:58:24:e5:59:b8:6b:51:8f:9e:4f:
         71:08:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:31 2024 by rpki-client on console-ams.rpki-client.org