Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60296100-2830-4fdf-8e75-9b29c3ec34af.roa
File:                     60296100-2830-4fdf-8e75-9b29c3ec34af.roa (raw, json)
Hash identifier:          11M/IpprDNvfKXwuQVz0xr7TW3PaOrGttqf5Fp+3U5E=
Subject key identifier:   CC:AA:E4:6B:28:1C:E7:62:AE:B6:F7:3D:BA:D0:CE:B0:5F:D4:C0:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0700999713E5CA908A549D780D8A82F8D20AAA62
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60296100-2830-4fdf-8e75-9b29c3ec34af.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        137.160.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:00:99:97:13:e5:ca:90:8a:54:9d:78:0d:8a:82:f8:d2:0a:aa:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=2998d222d53992996859b7980e62a3a8f8fdaaf56ba19acb4b7beada9a903209, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:cb:90:6b:33:a1:0a:9f:b6:29:11:59:ec:
                    4a:ca:73:e5:07:45:f5:e5:28:34:23:e8:d0:77:2a:
                    58:fd:d0:e0:8c:bb:16:1a:77:70:2d:be:16:0e:2d:
                    b9:ec:40:e9:cd:cf:3d:f3:0c:a4:ce:45:12:b6:90:
                    bf:1d:fb:57:ba:f5:82:2b:39:13:b3:25:0e:f0:b8:
                    0b:9a:f9:91:ac:77:bb:54:39:c8:9e:77:a7:31:77:
                    a9:12:b3:7e:58:15:d4:6a:64:fd:9a:34:2d:cb:5d:
                    5a:2d:c4:4d:aa:8c:bd:62:31:de:ed:74:8e:e7:f3:
                    4b:22:d2:5f:fe:0c:1b:b1:b5:8b:cb:f3:72:d9:83:
                    74:7e:ff:99:7e:7e:ea:9c:a3:f7:fc:c1:ea:53:7a:
                    70:16:77:72:6c:72:d6:1a:bf:c2:b1:e1:a7:d9:fd:
                    6d:8e:4b:9b:59:2a:c3:c5:c2:f2:b0:c0:fd:d0:f6:
                    89:5b:39:52:d8:c6:70:a9:13:e5:c5:99:b8:90:bd:
                    80:14:39:aa:3a:82:94:d2:d9:15:71:8a:47:c5:16:
                    fd:8f:b7:3c:08:31:9e:0a:13:f6:34:50:28:e8:95:
                    0d:9f:ac:0f:cc:3d:a8:24:92:3e:9b:dd:26:ea:6f:
                    4c:bc:31:d3:d8:58:18:2a:97:54:c4:2f:c5:72:0f:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AA:E4:6B:28:1C:E7:62:AE:B6:F7:3D:BA:D0:CE:B0:5F:D4:C0:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60296100-2830-4fdf-8e75-9b29c3ec34af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:47:5a:a3:8d:b0:4d:0a:20:b9:72:d8:19:d2:be:68:97:1e:
         94:76:de:a3:33:4a:57:f3:55:80:f0:f5:a2:1f:00:16:64:53:
         ff:20:e7:b9:ed:3c:f8:7a:7a:8a:fd:bb:9c:e7:1c:8b:4b:8a:
         e9:d0:e8:13:37:87:7e:7f:f0:02:d6:dd:e3:93:2b:cc:99:a4:
         e5:9a:c8:92:9d:03:e5:16:a0:56:e4:50:46:ce:db:42:31:c8:
         53:c9:6d:03:8d:09:32:a6:ec:e4:55:ba:64:d9:7c:f3:10:13:
         bc:f8:39:b9:70:68:9f:3e:8a:c9:a3:1f:2b:ea:ba:dd:de:06:
         90:5c:2c:2e:bf:39:3a:9b:ef:a9:cc:17:f7:93:c7:fc:c2:c1:
         3d:5a:c3:04:bc:71:63:ab:c6:11:cd:0e:cc:5a:07:cf:cd:1b:
         50:86:4d:c0:5e:4b:c4:ef:0e:7d:87:23:10:d1:85:28:f3:c3:
         85:27:54:ef:b5:bc:17:f3:03:f6:a5:1d:a2:f6:52:fd:0a:c2:
         c2:ba:27:e0:f6:d8:f4:d7:b6:5e:85:de:3b:95:99:e3:a3:db:
         8d:2e:23:11:34:ae:73:22:84:ad:66:60:8e:b4:bb:6c:ea:ea:
         a6:98:49:ab:19:c0:8d:2c:ff:42:d1:06:90:93:43:ab:c9:73:
         1f:33:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:52:06 2024 by rpki-client on console-ams.rpki-client.org