Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62a7397f-5427-4652-88a9-359b2337935e.roa
File:                     62a7397f-5427-4652-88a9-359b2337935e.roa (raw, json)
Hash identifier:          pJe4sswz9Pl+BKsAjTTpt6S36s/oTKJel/hN/RCCRrs=
Subject key identifier:   D8:E2:6D:DE:A1:94:6C:FF:4D:98:24:69:07:0B:C8:54:47:DB:61:00
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29C490D125569B95D8DC21D8E18EE8AAE17CEE90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62a7397f-5427-4652-88a9-359b2337935e.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        40.181.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c4:90:d1:25:56:9b:95:d8:dc:21:d8:e1:8e:e8:aa:e1:7c:ee:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=744733145876d9b5057dba9afad040d906a16000355a5c7637962f071629c5bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:c5:f5:5f:ac:39:25:7c:a8:4c:39:1d:32:
                    1c:2e:4d:30:0e:0c:51:84:2e:8e:4c:67:8d:41:2c:
                    d7:c7:a1:86:d3:58:93:2b:e2:6e:07:96:70:ff:40:
                    1a:99:34:2c:7d:30:89:ec:7d:5b:b5:fd:4e:be:46:
                    d2:19:2f:45:ee:72:70:a1:1f:dd:f0:14:e9:77:c5:
                    2c:59:ae:5a:62:e3:35:21:a8:ce:4d:38:1d:b9:15:
                    b1:81:e8:08:b2:a9:5a:84:fd:4c:fc:ea:a0:0a:3f:
                    a6:99:53:59:aa:bc:97:ca:91:bd:51:4d:1b:14:fb:
                    9c:e9:22:74:0d:bd:f4:64:5e:fd:cb:41:72:ed:61:
                    b8:0c:68:73:f8:cd:65:8c:ff:08:7d:d4:fc:c8:26:
                    80:dd:d0:59:1d:10:b1:d6:5c:a5:bc:77:92:91:ef:
                    21:11:db:56:fe:27:f7:08:b8:db:ac:c7:28:6d:0a:
                    f5:61:11:9f:98:c3:f6:7a:60:23:f9:e3:75:90:65:
                    ee:14:ae:fa:0c:8d:2b:02:4b:37:83:fa:c0:05:1b:
                    28:c0:30:dc:14:c8:f8:23:e1:0a:cc:ea:b1:29:9a:
                    e8:d2:bc:ef:d1:da:4b:c8:be:0b:16:0b:e7:2a:a3:
                    5e:54:0a:4d:09:77:59:5e:fa:c5:5a:4a:d4:ab:19:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E2:6D:DE:A1:94:6C:FF:4D:98:24:69:07:0B:C8:54:47:DB:61:00
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62a7397f-5427-4652-88a9-359b2337935e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:9e:7c:35:c1:29:90:23:80:ca:5d:ff:83:b8:60:d3:d6:f7:
         6b:3d:7f:7b:e0:74:63:16:39:2c:a0:54:7f:6e:52:a0:53:a4:
         4d:5d:bc:7f:73:e5:fa:2c:93:0b:21:c3:c4:aa:90:83:ca:1c:
         d6:d1:67:dc:2f:f0:92:b9:20:3d:98:de:17:20:92:cf:36:26:
         90:23:79:ca:1b:b5:62:bd:a0:4c:7a:ab:70:28:20:5f:ab:d9:
         45:d3:4b:8d:2c:ff:9b:ed:22:d9:10:0d:00:6c:bf:02:95:57:
         3f:b2:1c:21:79:26:10:ec:67:8d:47:ba:29:7e:7a:9d:51:ec:
         03:40:77:bc:d0:b7:cb:27:43:19:e9:29:cb:e3:da:4e:21:00:
         15:55:74:dd:cd:99:0a:8e:ba:a1:1f:46:b8:f3:c8:b3:04:b2:
         ea:ae:2e:d3:ba:23:7b:ce:52:c1:cc:40:bb:48:d9:50:be:6d:
         51:33:b8:a6:e7:32:cc:c3:7e:ea:10:cf:e6:93:9d:6a:6f:4f:
         03:68:c8:79:e5:01:f3:0b:5e:22:45:88:22:e9:c6:96:db:07:
         03:2b:bf:44:23:60:6d:53:2b:62:e0:f8:7d:f2:b8:60:1e:60:
         b5:cc:21:5d:24:02:a6:c6:93:a4:2d:bf:cd:7b:8f:8d:b5:99:
         de:dc:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:49:31 2024 by rpki-client on console-ams.rpki-client.org