Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0b8344-bc88-4215-9cb3-4a7836dddf4c.roa
File:                     6a0b8344-bc88-4215-9cb3-4a7836dddf4c.roa (raw, json)
Hash identifier:          2ibMqKtF87vCs7GdbAK+3ZkN8d7MZHQTS+wyXvEscqQ=
Subject key identifier:   51:0E:A5:F7:26:48:73:95:57:4F:20:C4:03:76:4F:7E:78:ED:33:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17C7BEF5699E54C7B15ED1A95284FDE918F82E82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0b8344-bc88-4215-9cb3-4a7836dddf4c.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        74.127.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c7:be:f5:69:9e:54:c7:b1:5e:d1:a9:52:84:fd:e9:18:f8:2e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=a7e60449a8ef6ee71e2c1effdb56339424ecad6582500bb8949b714f4c3a7350, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:e4:ae:88:3c:34:a2:bd:55:cb:ad:d3:28:
                    d3:5b:6b:1c:6a:0c:ff:fb:57:9a:1d:18:36:94:32:
                    ce:96:44:f5:ee:65:c8:1c:c2:21:d1:8b:99:8c:1c:
                    94:0e:55:7e:4f:a6:85:3d:50:c3:21:00:ae:37:36:
                    fc:3d:49:d1:7d:90:7f:b4:b1:43:62:55:3b:82:4f:
                    7e:42:f4:29:a3:39:28:42:fa:64:5e:7f:bc:b2:d1:
                    1d:6e:10:02:6e:5b:dd:71:52:b9:37:4e:ee:4f:df:
                    33:8a:91:41:9a:0a:65:b9:a0:7d:e8:e5:fd:af:5a:
                    e9:3f:51:08:b2:e0:8b:da:96:88:f4:98:8f:be:66:
                    c0:5d:f9:3c:d4:91:56:00:02:ee:d6:25:b5:6d:2e:
                    8c:ff:8f:d6:81:a9:bc:e1:5a:d4:7f:88:a6:d4:87:
                    34:38:f4:02:24:67:e5:72:38:c9:70:af:dd:56:ae:
                    96:ef:94:e5:74:93:a5:65:f0:02:1b:39:71:2d:0f:
                    bf:2b:40:2f:d1:8e:f0:99:5c:7d:3e:af:29:6b:47:
                    73:a6:d4:6a:4b:9c:32:30:51:ca:2e:c6:ca:b9:4f:
                    9f:9d:26:78:8f:1d:24:d1:9e:b6:c4:98:9f:56:c5:
                    ec:fc:8e:1a:7b:0d:33:3b:f6:b7:3b:58:2e:df:da:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0E:A5:F7:26:48:73:95:57:4F:20:C4:03:76:4F:7E:78:ED:33:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0b8344-bc88-4215-9cb3-4a7836dddf4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:e5:8e:4f:a6:88:0f:bd:c9:83:d1:c4:0f:1c:f4:bd:09:
         dd:9e:43:78:36:d1:37:48:0d:24:b1:50:c1:a3:37:18:01:a4:
         15:d5:17:8a:1f:4a:5b:9d:a7:ee:0f:e9:25:3f:bb:0b:b9:eb:
         39:6a:7c:38:05:46:14:9d:cf:f0:e0:14:d5:35:8e:db:ca:6b:
         ca:ea:37:84:38:65:62:31:bc:67:a7:f8:4a:ec:78:7e:14:84:
         84:aa:d8:ac:39:de:ef:39:ee:c3:7b:d0:54:05:e5:1a:a5:9c:
         14:1e:b2:0a:be:22:47:cf:ff:1a:c9:c4:21:3c:8b:d5:af:bd:
         1e:53:9e:6d:bd:d8:77:44:ca:96:f2:5c:0e:c1:17:43:a4:df:
         0c:33:c2:d0:57:fa:15:a9:09:72:f1:d3:dd:e3:3b:0b:c6:df:
         cb:83:0d:14:73:6c:9f:0a:d4:48:b9:2e:04:f5:c8:de:56:90:
         3b:2c:c3:65:38:c2:ac:68:91:f8:74:3e:4d:6f:e1:7b:59:c6:
         e8:58:e7:74:b3:05:32:30:ca:1f:84:10:4a:22:e7:39:51:74:
         9b:ac:1e:27:67:71:0b:67:18:6b:0a:5f:78:1f:de:ef:69:28:
         be:36:8f:64:07:87:3c:2f:29:cd:c7:5d:b3:70:df:fb:78:7d:
         71:eb:3c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:49:01 2024 by rpki-client on console-ams.rpki-client.org