Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/740695a4-ae7e-44db-9a4c-1ddd5bc66e97.roa
File:                     740695a4-ae7e-44db-9a4c-1ddd5bc66e97.roa (raw, json)
Hash identifier:          kLs9XeThSMjH348CgKVheQusXn/zkm+dpNDrOeT7qmo=
Subject key identifier:   5A:AC:EB:78:C5:0D:A8:4A:CB:6D:42:94:1C:5C:8A:59:01:8E:C2:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64A851287431FF9DEB6C5E23BA47A0C8B6082B47
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/740695a4-ae7e-44db-9a4c-1ddd5bc66e97.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a8:51:28:74:31:ff:9d:eb:6c:5e:23:ba:47:a0:c8:b6:08:2b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=854e8875e9c7b304dadd529478d36d5cbe2300caddce5ddb5935d816c8ca23bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:02:c3:13:0a:38:03:59:87:ee:c0:70:52:46:
                    78:83:6c:ee:b1:cd:04:53:ae:79:83:35:79:2d:e7:
                    bf:3a:a4:73:6d:69:8f:c4:83:1b:0e:9c:10:4d:d0:
                    21:eb:72:45:a1:66:cc:be:93:29:58:e0:c1:6f:53:
                    1c:e3:a4:03:11:80:62:da:8f:eb:15:fd:9c:6c:c6:
                    9f:04:43:42:68:cc:c8:22:15:ca:9a:64:6b:d7:c9:
                    e2:cf:15:32:ed:8f:f2:05:97:69:c1:86:9b:5d:51:
                    40:2c:38:c5:dc:1b:8e:32:7c:c0:b9:94:8d:74:66:
                    75:ad:19:a2:93:7e:6d:1c:31:2e:c4:c7:f7:d7:86:
                    ef:0f:8c:f8:71:f1:be:73:10:a8:a9:4a:6e:ed:ba:
                    9f:f8:0a:3a:bd:36:c3:eb:a7:e2:a4:41:f6:73:e5:
                    90:61:1e:d6:00:73:7f:0c:44:e6:df:7c:8f:0b:6b:
                    2a:73:71:a4:7e:56:94:f2:ff:b5:62:88:f4:9e:32:
                    34:09:78:94:0d:29:c9:17:8f:c6:bb:10:73:3a:d6:
                    10:08:57:bc:e8:b8:72:bd:ac:37:48:bb:c5:72:1f:
                    11:7c:39:25:d7:a1:ec:c5:97:5f:03:ea:da:1f:3c:
                    00:80:ed:1e:35:c5:80:bb:b3:ca:6e:41:2e:48:ed:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:EB:78:C5:0D:A8:4A:CB:6D:42:94:1C:5C:8A:59:01:8E:C2:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/740695a4-ae7e-44db-9a4c-1ddd5bc66e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:49:00:41:ba:c0:1c:81:d1:5d:77:d4:a3:04:72:6b:1f:34:
         ee:7f:4b:5c:65:54:f7:8f:37:2f:7a:76:57:fb:b9:85:e2:53:
         dc:13:21:29:3e:f8:82:de:9e:cb:56:c4:8d:b2:c2:92:7d:f2:
         27:31:80:5c:1e:24:d2:18:fb:41:f7:12:86:57:24:74:75:e3:
         e2:54:a3:f7:65:91:b3:2e:f1:da:0a:8e:ba:92:29:5b:c0:a9:
         6b:20:10:2c:5b:dc:1a:29:0b:15:e0:76:fc:bd:16:0f:d8:9e:
         31:d3:4b:75:ad:fe:7e:32:f3:45:65:12:e1:f5:35:b2:4d:03:
         4f:14:4c:91:66:78:a2:d0:ae:83:76:61:b6:24:d1:71:fb:5c:
         8e:76:83:a0:01:34:3e:ea:a5:4e:61:0c:b0:5d:18:04:5b:42:
         50:b8:2f:5c:47:8c:8d:c0:13:ff:07:75:8d:0c:c6:38:a4:30:
         55:b3:5a:5e:22:75:11:73:d0:54:40:92:a4:59:56:c4:a8:a4:
         de:55:90:42:a9:0d:64:1f:39:63:4b:11:c4:2b:67:ae:5d:9c:
         6f:2c:71:68:f3:97:4b:e2:3e:d3:87:b3:60:01:7c:99:f7:3d:
         a5:29:05:34:ce:78:ab:42:24:6e:8e:d4:b3:bf:0c:7b:a3:0c:
         51:6d:9c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:09 2024 by rpki-client on console-fra.rpki-client.org