Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6714ab35-fcfc-4a4f-b8cf-9fecda42ba45.roa
File:                     6714ab35-fcfc-4a4f-b8cf-9fecda42ba45.roa (raw, json)
Hash identifier:          w/z8e3EiO1dS1NIdPCxTMEMCseeOhwmPWNuBHHS39go=
Subject key identifier:   99:B2:D8:C1:88:15:55:E4:39:40:46:98:1B:DD:75:75:89:79:C8:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AC6083D556C8B2369F7EB1BD80A886F367D6B9D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6714ab35-fcfc-4a4f-b8cf-9fecda42ba45.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        68.158.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c6:08:3d:55:6c:8b:23:69:f7:eb:1b:d8:0a:88:6f:36:7d:6b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=9b285c393d6cc08a271e267fd00568279e7d4ec7ec0d53039d7e32f002f16696, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:18:08:8c:21:07:dc:9b:a7:88:01:41:7a:
                    ee:8f:99:87:1c:ef:49:39:1e:ac:17:0e:10:5e:25:
                    d1:14:f5:87:3b:71:05:ba:9f:59:f3:e7:45:6e:f0:
                    17:31:aa:ec:1a:49:20:53:f8:63:4a:6d:44:b9:49:
                    7b:cc:1c:30:0b:f2:3d:b6:57:16:08:37:e1:f1:40:
                    6c:93:61:92:91:e3:58:4d:45:ee:70:33:48:df:ab:
                    72:49:65:0f:1e:9e:d7:a7:92:10:cb:a4:c5:74:13:
                    75:3d:a2:ea:b1:d3:7b:1a:5b:9d:d8:3d:5a:5a:12:
                    84:32:d2:af:d7:86:fe:91:91:52:74:5d:43:fd:87:
                    23:4c:c1:14:a9:7c:cb:e6:c5:7a:0b:94:72:9e:91:
                    9f:98:74:05:1d:5c:d4:89:61:7d:f3:26:88:59:04:
                    dd:51:b1:4b:f2:24:72:0e:d3:39:98:49:17:40:55:
                    64:9d:50:d6:6c:f3:36:87:1a:90:5c:25:64:1f:2d:
                    94:11:d1:20:2e:d1:ed:f7:ba:d6:c0:32:74:9e:27:
                    2b:5b:ab:fb:7d:a6:82:c6:c5:b4:f8:75:99:43:dd:
                    7d:f1:c3:05:36:b8:21:3e:8f:de:86:e0:9f:42:9d:
                    0b:38:d2:7c:ba:04:ec:04:1f:c8:4a:83:49:ff:8c:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:D8:C1:88:15:55:E4:39:40:46:98:1B:DD:75:75:89:79:C8:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6714ab35-fcfc-4a4f-b8cf-9fecda42ba45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ba:a0:f0:50:48:2a:87:63:a4:e9:57:54:19:40:7e:1c:c7:bf:
         81:da:e2:0d:e3:45:a9:dd:d5:9a:e1:78:ee:1e:d3:89:4e:1d:
         4f:8a:27:ec:27:62:8c:d4:76:54:c8:fd:5e:50:16:c3:65:68:
         09:41:ee:65:69:9c:d5:67:1d:f2:e7:fb:0f:64:54:cd:58:47:
         1b:78:18:00:49:2b:8b:46:6b:74:37:4d:8d:5a:f9:8c:c1:db:
         29:52:24:03:e5:3f:c2:8f:d3:fd:ae:32:37:ec:ef:de:23:7a:
         3a:c2:87:c3:4a:55:0d:a8:8e:13:47:a0:2e:e7:5f:2a:46:c7:
         7c:cf:81:a4:ae:0d:13:0f:ea:95:71:47:0b:75:ad:1b:c7:58:
         dc:65:d7:06:be:92:12:88:d3:7f:5e:29:f8:e2:16:62:4f:19:
         6c:32:37:5a:d5:f8:c9:cc:48:e6:03:f4:7d:64:04:6f:94:51:
         39:31:5b:2a:6e:d8:80:bc:9b:b8:9e:45:86:66:af:15:a5:50:
         1b:e4:86:6d:dd:7f:fe:69:79:59:5b:8c:d0:05:58:0d:bb:b7:
         6b:9a:3b:cf:83:d9:77:f9:8a:8a:5f:f7:a5:7a:29:f9:99:d2:
         c9:f0:cb:10:78:da:36:ea:f0:7e:dc:7d:41:6f:06:68:41:ab:
         6b:ef:f3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:05 2024 by rpki-client on console-fra.rpki-client.org