Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c512c1b-f3e3-4cc4-adf7-022feda26799.roa
File:                     6c512c1b-f3e3-4cc4-adf7-022feda26799.roa (raw, json)
Hash identifier:          eU9YYDr2uoCjJ1ALFi42pG6sNggtaOUyTycpmU8DcM4=
Subject key identifier:   DD:B4:20:38:52:3A:2D:A7:8B:9B:2F:7D:3E:C9:18:7C:EC:C5:CB:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7524B2236FE76EE6FECEB17D65294BDD2088CB28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c512c1b-f3e3-4cc4-adf7-022feda26799.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        79.73.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:24:b2:23:6f:e7:6e:e6:fe:ce:b1:7d:65:29:4b:dd:20:88:cb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=1351cabbd215ccc4a00f0403c2c6a15401b8d299c3540de5a20f5809a05d3f37, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:29:b5:00:68:bb:ca:05:65:fa:61:a9:22:
                    9d:09:4c:aa:0c:7f:79:f2:16:77:59:8b:6e:a5:0e:
                    d6:c1:7d:2e:b7:19:33:3f:68:30:d3:67:b6:a2:6c:
                    d1:ec:0e:df:5a:37:a9:db:69:b3:39:3a:94:40:d3:
                    b9:c9:ce:3c:e8:f5:e3:fb:82:42:39:22:76:87:da:
                    ce:14:89:90:55:62:5e:b0:54:5e:3a:2d:49:c5:a8:
                    66:f1:43:2e:73:f3:8a:80:c7:ed:e3:c1:80:5a:f0:
                    cc:85:a4:1c:71:57:07:cc:5b:a5:fc:b5:3d:26:7d:
                    6b:73:61:6f:6a:14:b5:3a:f6:b0:b4:2b:5e:e3:73:
                    dc:2a:f1:b4:fe:73:8b:bf:7c:9f:8b:69:49:ca:03:
                    39:23:57:a5:f3:58:82:79:1d:c8:02:c4:74:df:8f:
                    f9:c5:a6:60:5e:e4:7a:43:93:ed:d0:a0:49:c2:fa:
                    37:8e:33:3e:d2:14:d6:01:53:89:84:a3:34:99:4e:
                    d5:32:d7:c7:d8:ea:1f:45:90:a7:e7:66:ab:5b:62:
                    11:9c:15:99:38:df:c1:1c:3f:78:be:28:60:f8:66:
                    63:5b:60:65:54:77:d7:00:a7:5f:5e:18:c4:5a:50:
                    b7:15:d9:3b:00:22:27:ec:73:bc:d4:6a:de:c0:8c:
                    ce:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B4:20:38:52:3A:2D:A7:8B:9B:2F:7D:3E:C9:18:7C:EC:C5:CB:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c512c1b-f3e3-4cc4-adf7-022feda26799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.73.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0c:03:2d:27:15:85:34:66:a3:77:62:08:31:3a:ac:98:dd:cd:
         d9:bb:fc:d7:ea:64:9e:01:c2:22:9f:dd:0c:ee:7c:9c:70:21:
         3e:72:d7:56:fb:7e:09:a5:11:94:9d:c3:a9:c5:cb:a8:52:bd:
         a0:fa:f6:2c:2d:22:7e:8b:49:08:b6:66:63:eb:45:32:51:09:
         d4:f4:ee:44:bd:22:9b:df:2e:a7:ac:16:65:67:71:d3:48:64:
         71:99:01:a9:fb:c1:e0:85:01:90:21:7b:4d:cb:03:8c:9b:c5:
         30:56:65:a1:46:4b:e5:d1:9e:d7:d2:14:73:43:db:be:d6:c0:
         60:3f:35:5a:58:8e:c0:4b:70:50:a3:8b:c8:53:0c:03:7c:10:
         a5:0b:f0:05:f5:8a:72:ae:56:da:be:cd:8f:5f:6a:21:b7:ca:
         2d:7b:57:17:c7:d8:06:d3:49:62:92:ef:81:a4:dc:86:23:d8:
         b6:da:f6:d9:45:59:b6:b8:b3:a9:78:ba:6b:27:09:35:19:54:
         cd:0d:73:99:56:62:e1:c3:8a:0b:73:89:1c:98:14:04:f4:8a:
         50:a9:76:d8:0b:37:07:82:9f:ad:39:f4:f3:cf:7b:7a:14:d4:
         29:6d:c3:fc:35:ff:78:91:ea:50:71:ad:45:6d:38:53:61:54:
         0d:90:70:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:12:09 2024 by rpki-client on console-fra.rpki-client.org