Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62b6a94c-9079-4b92-b2f6-2803d071cf0b.roa
File:                     62b6a94c-9079-4b92-b2f6-2803d071cf0b.roa (raw, json)
Hash identifier:          XnvcXpRatWbfYMHHsr58TuCcWN4PP9xU8gUegrR1jYw=
Subject key identifier:   F8:E2:C7:A2:5B:F0:17:FD:C1:0D:31:1B:2D:74:0A:E1:18:FD:03:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64BEEBB2404C3110FD69922661EB16E0F6CC5AF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62b6a94c-9079-4b92-b2f6-2803d071cf0b.roa
Signing time:             Mon 06 May 2024 00:00:00 +0000
ROA not before:           Mon 06 May 2024 00:00:00 +0000
ROA not after:            Mon 10 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        75.3.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:be:eb:b2:40:4c:31:10:fd:69:92:26:61:eb:16:e0:f6:cc:5a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:00:00 2024 GMT
            Not After : Jun 10 23:59:59 2024 GMT
        Subject: serialNumber=1b4b059005014d502898227221f81a24baa434a30b8b922a9acfca3a13ee75ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:82:5f:52:56:17:d5:29:d7:bd:fa:a4:3a:
                    89:04:8d:e4:a5:41:16:50:c6:0d:29:a1:e4:1d:80:
                    2f:5d:d3:ed:2e:8c:c8:99:3f:2b:2a:9e:cd:c6:03:
                    17:66:8e:21:aa:8e:68:99:c7:39:29:0f:4f:83:64:
                    fb:8b:11:fc:af:c1:94:a4:fb:39:04:6c:c9:18:26:
                    e1:20:5a:1b:23:a9:63:8a:85:05:ea:88:c5:cc:7b:
                    0e:2a:5a:76:ba:5f:33:41:98:5f:ad:1b:ac:2f:d4:
                    77:46:ff:5d:90:1b:d2:0c:f3:94:37:2d:19:0b:e8:
                    d3:0c:b5:34:54:26:f9:17:96:9d:32:09:be:16:8f:
                    ca:51:fb:1e:6c:dc:be:e2:fa:a4:73:dd:3f:e1:dd:
                    8a:4e:5e:b1:0b:c2:58:a7:95:85:a6:83:2d:37:b8:
                    24:57:1e:29:6a:af:9e:cb:4b:c1:d3:41:be:d3:b8:
                    e5:34:ad:74:92:24:08:ba:48:b7:56:81:fe:4a:d3:
                    4e:59:47:38:69:ad:22:2e:e8:16:1b:c8:2a:a8:a0:
                    e4:7f:55:ce:a3:46:d0:56:29:12:1f:4b:1e:c3:8b:
                    b9:f0:52:b3:ee:c5:92:41:1a:09:f7:01:13:d8:e9:
                    82:d0:9d:b7:72:f5:86:aa:7e:80:e0:2a:29:8a:27:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E2:C7:A2:5B:F0:17:FD:C1:0D:31:1B:2D:74:0A:E1:18:FD:03:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62b6a94c-9079-4b92-b2f6-2803d071cf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d8:50:c3:5c:ee:3f:ee:4c:9b:d4:10:aa:46:99:96:e1:49:71:
         49:71:52:bb:82:36:22:64:04:9a:37:06:e1:8e:3d:2b:56:11:
         82:4a:34:be:9e:ee:28:98:6e:5f:be:51:54:4f:f6:6c:16:0c:
         70:de:29:43:a8:51:a8:e7:f5:46:a3:97:0f:d7:68:22:9e:65:
         ab:2d:f1:81:d9:1c:57:cc:75:0c:0a:e5:b0:ca:ae:d4:6a:38:
         e7:51:0d:e9:e6:ee:7e:9a:56:37:85:8e:01:44:08:9b:0b:5c:
         cb:9a:bc:8f:6c:4f:40:ab:76:59:db:a9:e7:61:6c:b4:e7:8b:
         c8:17:8d:45:c0:73:c4:a4:f6:f7:e1:aa:7f:53:62:7d:af:15:
         0d:fb:14:76:3a:76:22:17:58:8d:15:ad:42:cc:d3:ce:68:cd:
         26:d3:3e:4d:0f:0f:74:47:3a:76:6e:50:fb:3b:0d:24:ba:b5:
         38:ac:53:1f:0b:f3:67:18:f1:2b:bd:84:4a:15:4b:3e:07:d2:
         c7:3e:b1:07:43:d2:10:c6:a8:02:a1:c0:9a:30:e5:6c:67:e6:
         ec:a7:8e:a7:e1:d4:5b:aa:11:3e:be:c9:5c:48:5f:4f:ed:7a:
         eb:f2:f4:12:7f:7e:ac:77:be:39:3b:c5:e9:5e:32:28:38:1a:
         69:34:17:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:19:35 2024 by rpki-client on console-fra.rpki-client.org