Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a535178-1ef5-4988-b043-365e7f2c989e.roa
File:                     6a535178-1ef5-4988-b043-365e7f2c989e.roa (raw, json)
Hash identifier:          ogABGgxBnJ5tviKYw8aF5uHmu+OLwrD+VnPO+YSykJQ=
Subject key identifier:   A0:56:0F:0C:B7:65:63:21:AA:A4:B9:37:78:ED:4C:2D:DE:08:BF:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CFD12958F7643460E43D63947C385553D5E5399
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a535178-1ef5-4988-b043-365e7f2c989e.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        76.223.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fd:12:95:8f:76:43:46:0e:43:d6:39:47:c3:85:55:3d:5e:53:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=9e0a50bd41f010456da31804aed793e9abb74ceffffaca75d44bbf4b39d2d0a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:53:46:d0:06:eb:a0:e9:9d:a7:ea:20:8f:
                    4d:04:db:74:de:0f:3e:91:c1:08:66:26:a4:ac:be:
                    1a:f0:5e:87:7d:c4:94:c4:b0:df:a6:7f:25:d3:9b:
                    21:fc:e4:ca:2d:ae:a0:b8:33:34:9a:99:a3:c5:9f:
                    3a:9e:64:0c:66:f8:d3:ae:72:1d:e6:e0:85:58:be:
                    c0:d6:3f:36:6f:12:83:eb:90:50:46:df:51:25:56:
                    b6:8c:db:6e:70:37:03:9e:a9:53:c2:e2:36:cc:83:
                    9f:2c:c6:34:09:8b:9b:61:c4:c8:40:81:a6:14:51:
                    a2:0e:61:96:1d:1a:18:ab:c4:dc:7b:a1:d9:5c:eb:
                    4e:9a:03:ce:8e:9c:fb:b7:f2:ec:d8:89:9f:e9:13:
                    1a:ed:c1:37:31:38:d2:ef:89:00:9e:1f:3c:48:ad:
                    7c:59:be:89:f9:c6:13:95:df:9a:96:92:9a:41:a6:
                    bc:14:08:1a:99:b2:68:23:38:54:b0:66:c4:59:27:
                    1f:ab:4c:58:8b:6f:0e:be:de:1a:11:78:5d:0c:2a:
                    c4:48:1b:8a:19:3b:3a:63:56:01:d9:09:c9:28:0f:
                    64:a0:9b:b8:27:c6:ec:81:56:72:29:bc:cd:b2:51:
                    68:55:ee:cc:87:0b:0f:8e:4a:35:cc:de:cd:db:42:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:56:0F:0C:B7:65:63:21:AA:A4:B9:37:78:ED:4C:2D:DE:08:BF:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a535178-1ef5-4988-b043-365e7f2c989e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:87:eb:40:6d:4b:7e:64:de:66:a2:f7:4f:87:f1:8f:b9:72:
         84:3e:f8:35:91:c5:2d:02:bb:3c:25:2c:3d:5f:8d:05:e5:8f:
         d3:d9:83:8d:fc:b1:a4:78:cc:d7:89:ea:f3:b0:65:24:17:90:
         40:3b:69:3a:70:9c:41:0d:9e:cd:9a:a5:e1:84:16:a6:9f:ed:
         fd:58:e5:61:ae:af:4f:dd:76:de:3f:32:e1:93:27:5f:3c:dd:
         14:2e:a2:c1:09:a9:40:38:01:1f:a8:c8:c3:0e:1e:7c:27:cf:
         fb:e7:c5:da:69:89:00:58:b7:e7:93:39:a1:47:af:43:7a:53:
         53:60:fa:39:64:03:3f:55:08:12:ed:c1:62:8d:1a:ea:9c:9f:
         ac:cf:e4:c0:1e:dc:d0:0e:65:79:67:ec:f5:48:bd:f6:d1:25:
         37:1d:84:3e:ca:bd:fa:95:90:de:74:e1:65:b8:67:06:ca:86:
         3b:19:a7:42:e6:a7:82:9d:8e:48:94:8e:5d:68:35:7a:92:b9:
         27:45:ab:21:77:5b:ad:f9:00:39:03:14:6e:c8:aa:94:9c:95:
         cb:26:d9:cb:27:a7:f2:aa:49:f4:a2:78:3e:e8:0f:c2:bf:b8:
         80:7c:5d:e3:e8:98:1f:6e:3c:e1:b8:4c:f3:16:6a:1a:6e:cb:
         bc:32:85:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:19:37 2024 by rpki-client on console-fra.rpki-client.org