Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5928830b-bdc0-40c2-82a8-029c15dbefb1.roa
File:                     5928830b-bdc0-40c2-82a8-029c15dbefb1.roa (raw, json)
Hash identifier:          GegY306TZ0ASWY/1UL+nyWlYQ1+/z1a6A29sNCXyQLk=
Subject key identifier:   F6:59:12:55:36:43:5C:EE:D4:D0:13:76:9A:DA:B3:49:AB:48:79:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06BCE94C10407828DF2976968DC953B21F44D473
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5928830b-bdc0-40c2-82a8-029c15dbefb1.roa
Signing time:             Sat 27 Apr 2024 00:00:00 +0000
ROA not before:           Sat 27 Apr 2024 00:00:00 +0000
ROA not after:            Sat 01 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        93.76.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:bc:e9:4c:10:40:78:28:df:29:76:96:8d:c9:53:b2:1f:44:d4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:00:00 2024 GMT
            Not After : Jun  1 23:59:59 2024 GMT
        Subject: serialNumber=5ba3c6358370787685e0c4ce875cf02e7e1f360e11cbd59fe15d919a02328b4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:62:55:40:5a:1a:df:a3:73:d7:28:eb:a1:
                    bd:55:88:65:55:b6:ca:54:17:b6:96:24:c8:b0:4e:
                    52:5f:bb:80:6e:2b:e1:7f:49:06:12:df:44:af:2b:
                    73:e8:78:cc:c7:0c:89:58:27:32:bd:99:f5:ac:53:
                    8d:c7:81:d6:04:7b:94:92:c9:cf:0e:b4:a2:43:af:
                    6b:82:d5:63:9b:c7:87:4d:b7:2e:a6:77:47:16:a7:
                    30:f5:6c:81:00:50:03:aa:b5:88:99:12:f7:76:7f:
                    25:85:c4:f7:26:c7:b1:4c:59:3c:9b:3e:66:3b:1e:
                    f9:25:18:52:32:c2:c1:9e:0b:a1:de:67:2e:8b:5a:
                    27:e9:a6:43:2c:a8:91:8c:fb:17:8b:3e:a8:5e:ff:
                    62:8d:d7:f0:2c:a7:3f:d2:93:83:78:ac:a4:32:11:
                    08:61:3c:74:2b:12:e0:ac:b5:aa:51:ee:b9:69:9a:
                    e0:d7:24:30:52:89:11:73:74:2f:49:9b:a4:b1:2b:
                    bb:b7:5e:ce:6b:bc:82:86:b3:b7:d7:42:07:13:e8:
                    ee:cb:aa:83:1e:27:8b:84:f3:fc:4b:7a:b7:08:a8:
                    e5:5d:96:9e:72:8d:95:c4:36:7d:d4:e9:78:99:26:
                    1b:32:c4:7b:36:cf:e8:41:8d:cb:ea:ed:99:cb:77:
                    2b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:59:12:55:36:43:5C:EE:D4:D0:13:76:9A:DA:B3:49:AB:48:79:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5928830b-bdc0-40c2-82a8-029c15dbefb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.76.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         98:5a:e6:ed:5e:af:a1:61:4e:4e:28:52:8c:0c:18:e7:36:8e:
         b8:b6:58:37:ab:cb:68:0b:8b:c3:e7:94:5e:cc:fa:c2:4c:55:
         33:eb:b5:4a:f3:7b:f1:a4:25:5f:d1:ca:3f:3f:24:ba:1e:bf:
         47:e1:11:1d:15:37:0b:3e:1b:70:84:ec:46:1c:98:f7:9f:b2:
         66:06:4b:b2:eb:28:ea:61:a3:c0:e1:be:21:1d:eb:ce:69:1f:
         41:9f:0a:b4:ce:40:6e:1e:c5:20:af:a6:1b:c2:63:c8:17:da:
         ca:e2:d4:04:87:bc:0f:7c:93:21:d5:5f:1c:3a:48:8a:37:7c:
         39:1f:2e:64:9d:1d:22:ce:9c:23:48:e8:b4:c8:ff:7c:9b:3e:
         80:29:8c:6d:10:7b:f8:e2:5f:e9:8e:43:e9:c2:98:3e:18:f7:
         3e:f1:5b:34:64:16:52:9e:4e:99:13:a4:8d:28:af:9c:51:b0:
         99:38:ed:3e:9d:18:30:7f:c9:18:c7:a3:16:58:4d:f8:6b:81:
         cd:53:4e:7c:bd:d7:11:1b:40:51:d2:ae:71:ba:cd:b6:93:d6:
         c1:80:fc:e4:96:7e:db:4e:ab:f6:be:39:b6:f5:65:0e:8d:c9:
         51:68:5a:4d:03:54:30:93:2e:2f:87:f8:af:b8:cc:d1:9b:bb:
         01:21:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:27:56 2024 by rpki-client on console-fra.rpki-client.org