Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65b895b1-f1f8-4c5c-a125-e3d46bfe6e2a.roa
File:                     65b895b1-f1f8-4c5c-a125-e3d46bfe6e2a.roa (raw, json)
Hash identifier:          JogV1h+1DSTZ20t6S37jMq3eoAInxdYHHveeeUg417k=
Subject key identifier:   9C:3C:EF:5C:83:5B:1B:D3:15:C0:24:6B:E0:48:DB:37:FA:38:FA:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F869DF7C622DCC82C400F250AE43C5AD6A57EC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65b895b1-f1f8-4c5c-a125-e3d46bfe6e2a.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        151.148.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:86:9d:f7:c6:22:dc:c8:2c:40:0f:25:0a:e4:3c:5a:d6:a5:7e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=44d66f8f366ced141a76e6a203b79e97cdcff266bde21c597203e77f2fb0e43f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0d:0d:17:55:e5:f6:63:91:28:c4:ee:3a:2c:
                    3f:b2:44:22:51:6e:87:c7:3a:04:06:3f:1e:97:e3:
                    8e:de:4f:5e:79:67:fe:81:2d:6f:ca:3a:de:48:12:
                    a4:c5:f4:b5:b4:4f:dd:ea:5c:63:d9:14:ff:40:81:
                    04:bb:8b:26:35:fa:68:24:04:7b:1b:4c:a0:42:2f:
                    f0:59:91:ee:b0:45:75:e0:88:9c:88:8b:b3:ef:61:
                    c7:64:ae:5b:d2:e2:d8:88:01:f1:83:21:61:73:34:
                    7a:6b:bd:2d:7e:6a:1d:57:3d:36:78:70:81:03:23:
                    e3:90:88:de:fb:ae:d3:63:c5:e4:d4:4b:e8:a1:57:
                    38:55:75:b4:cc:e4:b7:60:2c:f6:21:f7:f2:b2:8a:
                    07:ac:56:c3:eb:86:e8:85:c3:64:7b:6e:1e:65:a2:
                    7b:93:ad:57:d5:93:99:e5:07:cc:6c:43:9b:59:4b:
                    f0:da:32:39:33:7c:4f:d8:d7:b2:3f:59:d3:68:a8:
                    60:4b:4b:0d:5a:a7:f3:f7:9c:97:3a:c0:d6:a8:2b:
                    cb:48:14:22:7f:9b:b9:af:55:04:25:73:47:24:e5:
                    ad:88:12:ec:e5:07:c4:dd:cd:1b:94:73:c4:75:f6:
                    62:e1:50:d0:83:4a:8c:7a:3d:eb:77:6b:e6:a2:0c:
                    8b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3C:EF:5C:83:5B:1B:D3:15:C0:24:6B:E0:48:DB:37:FA:38:FA:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65b895b1-f1f8-4c5c-a125-e3d46bfe6e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:ab:d9:99:8a:4b:da:75:63:4a:40:c4:b5:41:53:6e:df:
         fb:7f:48:3e:92:84:59:57:a1:2f:a9:f6:21:46:2b:db:81:a6:
         92:d1:92:43:55:2e:18:06:96:80:cd:02:9c:bd:c1:00:26:46:
         d6:cd:c1:22:dc:53:23:be:9e:25:dc:51:1a:58:dd:c5:2d:ad:
         ae:b9:f1:37:ed:cf:0d:e8:59:52:92:95:4b:3a:73:82:74:78:
         ac:60:b5:c6:0e:ab:43:2f:e6:5e:d7:5f:41:e6:ad:b8:56:7d:
         54:34:8b:00:27:50:ee:3e:9d:eb:89:1f:9b:4b:62:46:ef:1b:
         7e:60:a2:22:9a:31:11:1c:47:2f:9c:87:dd:f2:06:b9:9d:98:
         44:92:0b:1d:bf:8b:32:92:01:06:06:eb:71:3b:12:02:8b:fa:
         f2:aa:c9:f5:36:2d:06:80:b5:75:58:b7:13:dc:18:b5:b2:bb:
         5d:4f:76:9f:71:8d:39:74:ab:dc:8b:84:cc:f6:6b:95:24:34:
         b7:de:42:e3:16:b8:95:bf:74:81:29:80:f0:9d:ba:6a:79:7c:
         9b:44:5b:48:14:9c:ef:c1:84:d3:89:d3:8b:15:dd:36:ce:2d:
         5a:25:f8:b2:7b:15:4a:04:63:c6:41:45:13:5c:42:9f:2d:f7:
         f3:03:c1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:25 2024 by rpki-client on console-fra.rpki-client.org