Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/701f0409-6f56-4330-9a4d-25cb0cb0b026.roa
File:                     701f0409-6f56-4330-9a4d-25cb0cb0b026.roa (raw, json)
Hash identifier:          D/unDxIMcQNKJ4dDroLpBHBEtN238My4ZFJcY/zWXDc=
Subject key identifier:   81:F7:48:39:28:4D:B4:A3:93:10:5B:3C:41:AB:EB:89:8C:FC:04:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       601D88CF0CA481E77DBE301EAB25EBFC82D6E055
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/701f0409-6f56-4330-9a4d-25cb0cb0b026.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1d:88:cf:0c:a4:81:e7:7d:be:30:1e:ab:25:eb:fc:82:d6:e0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=aef9a8d34042bafc688ef17b01a5ef71568122670daeb3bee289a08e9ab18b89, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:44:19:e6:1f:27:ea:d9:21:c4:08:12:20:db:
                    8a:f3:af:cc:5d:33:4a:02:6f:16:30:66:cf:06:d7:
                    61:89:2d:b4:fe:76:d8:27:19:89:9c:9b:ab:3e:28:
                    17:f2:b0:92:ce:ab:b6:c5:7a:e7:39:80:36:e1:32:
                    f4:f5:4c:03:eb:d2:a7:e2:29:fb:43:be:6a:57:47:
                    59:dd:b0:52:2b:50:b2:cf:ce:8c:82:5d:ac:27:3c:
                    ab:bd:41:2f:e6:d2:0a:a9:dc:f2:cc:72:71:62:a9:
                    c0:89:92:81:3c:cd:c0:2f:33:f9:0d:84:09:13:94:
                    67:20:9f:ba:d8:97:be:97:ed:fd:e3:b8:a8:1c:1a:
                    24:a5:29:7f:c0:c2:f2:87:f3:7b:ed:85:a3:37:14:
                    57:25:fb:da:5d:59:d5:d9:2e:68:2e:b7:63:5c:01:
                    8b:14:2a:c3:66:33:f0:a9:81:d1:1a:0b:fb:64:f0:
                    be:d2:a7:b7:de:7e:a3:c4:45:4c:18:8a:e6:b9:11:
                    86:c1:70:a5:64:6a:cd:a6:a0:9f:a9:74:1d:6f:d0:
                    dd:7d:37:46:24:cd:bb:bf:6d:42:32:21:d4:de:34:
                    5e:5f:55:f4:8a:78:2d:f8:03:81:c1:9b:c0:6b:28:
                    75:25:f3:65:8b:1d:20:ee:9c:6d:e7:2c:93:f6:9f:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:48:39:28:4D:B4:A3:93:10:5B:3C:41:AB:EB:89:8C:FC:04:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/701f0409-6f56-4330-9a4d-25cb0cb0b026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:25:4a:e6:3c:ae:6e:18:11:b9:65:9f:ed:d1:07:e5:42:70:
         6d:a2:85:0e:ce:bc:71:10:a0:b5:c9:b0:80:cf:17:cf:23:bf:
         f9:9d:82:b0:08:f7:78:8d:a2:c5:19:c5:df:25:e6:82:5c:4d:
         6b:ad:20:51:2e:84:2f:33:f7:b4:8d:d8:17:74:f4:b6:14:19:
         c0:c4:45:dc:a1:c3:77:9b:aa:01:9e:13:34:9c:37:3e:19:26:
         d7:b6:85:e0:54:3c:2f:a5:53:3e:74:21:36:a2:f7:bd:0e:99:
         09:c4:e7:60:2b:9d:49:33:70:e7:26:32:68:8e:5b:bf:35:78:
         ba:50:69:93:1b:45:c8:eb:f6:83:7f:41:a2:c3:a8:be:c6:01:
         03:85:3a:d9:ea:21:bd:63:b1:cf:fc:64:40:c2:da:6c:2f:44:
         55:4a:2e:14:58:d3:f7:9b:9e:de:b7:36:87:c9:e7:49:6e:ba:
         85:66:d2:03:49:e3:9e:5a:39:34:16:93:d3:54:d2:87:4e:bd:
         7c:d5:d1:0e:c1:4e:9e:84:9f:93:63:d4:fe:67:48:b6:f3:db:
         b6:27:56:d4:78:27:8b:f9:6d:fa:59:fc:36:cc:32:25:7a:c8:
         bf:22:0a:dc:25:8d:55:02:fb:d6:e7:ff:d7:e5:a4:84:99:6e:
         cf:de:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 17:25:46 2023 by rpki-client on console-fra.rpki-client.org