Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b66aff4-8d77-4f69-9d6c-213fee52f989.roa
File:                     7b66aff4-8d77-4f69-9d6c-213fee52f989.roa (raw, json)
Hash identifier:          yEllb0UZP4bPL2I/8Gp6dE2iRpgZz265Jgq0r14otHU=
Subject key identifier:   1D:A4:49:1D:E9:5F:8E:36:08:8E:EF:88:33:CF:4E:15:F6:81:E2:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4592AF3C212E4F7047907093CCB246FDF8A5EB27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b66aff4-8d77-4f69-9d6c-213fee52f989.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        35.18.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:92:af:3c:21:2e:4f:70:47:90:70:93:cc:b2:46:fd:f8:a5:eb:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=a6d2fa9fda3ecd3976c2755c644b298963652c0c4c461ee03a142ce9ed2ab8f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:3f:18:61:bb:9a:ec:e0:7d:79:c7:a8:92:
                    55:65:0d:6b:1e:49:84:99:62:10:79:36:0f:74:77:
                    8c:c3:f9:7e:0d:4c:2d:b6:06:81:80:0a:de:75:1b:
                    d2:0d:de:86:95:3e:cb:35:e8:97:07:db:4c:8c:d3:
                    19:db:5f:85:88:9b:9e:25:2c:cd:14:a1:82:ed:f7:
                    98:81:81:6e:4e:9a:b9:f8:ff:1e:bc:8b:c3:47:19:
                    3b:83:a7:e0:9b:e8:53:7a:a5:b6:62:6c:75:a4:69:
                    4a:28:8e:9e:ea:72:5e:83:c1:b9:34:94:06:c0:f0:
                    99:c4:c2:70:ee:3c:d3:6a:b9:75:ba:3e:f2:1c:ad:
                    90:e5:86:dc:a1:e7:7d:44:fe:9b:0d:19:a3:2c:e2:
                    e8:5e:b2:39:3c:19:01:38:b2:27:63:01:76:a2:b7:
                    3c:b6:e2:c3:90:48:6e:9b:aa:a6:de:db:ad:aa:d6:
                    d9:34:05:8c:72:dc:cf:48:3e:71:28:70:79:2f:9c:
                    a9:c5:ac:1a:f4:07:f4:5c:18:2d:12:7a:02:27:11:
                    6c:68:36:43:e6:5b:2e:a9:ed:c2:a9:c5:6e:5d:ae:
                    b4:7d:c8:5e:11:20:3c:46:aa:67:a5:95:92:33:ae:
                    60:4a:20:aa:da:c3:62:a8:19:6f:58:fb:8d:0a:bb:
                    f2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A4:49:1D:E9:5F:8E:36:08:8E:EF:88:33:CF:4E:15:F6:81:E2:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b66aff4-8d77-4f69-9d6c-213fee52f989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.18.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:4a:5a:72:2b:f5:ca:ea:4d:56:2e:26:3e:d1:78:15:ac:
         c0:7c:25:86:fd:76:54:a6:d8:5c:ad:70:2d:18:fc:24:db:fd:
         f6:4d:5f:8a:82:14:f0:6d:f7:b5:50:69:db:99:a1:ad:95:e8:
         74:6b:6b:43:dd:c6:85:08:39:6d:64:88:18:84:dd:fa:d8:a0:
         a8:bc:77:a8:6b:5d:46:9d:c6:14:d2:a5:02:f1:96:c3:31:a7:
         65:cd:c8:e3:30:c4:ec:60:f7:8c:51:5d:c8:b0:ae:95:87:67:
         16:40:07:3c:b9:56:cd:25:cf:b2:7c:7e:99:5d:b4:c5:c8:b8:
         57:30:be:4c:17:c6:a8:2d:8a:07:46:dc:df:76:4d:13:0b:76:
         c4:81:9c:4f:a5:1e:80:7b:3a:f5:83:40:56:46:48:fb:5e:f2:
         7d:4b:d6:18:b0:d3:ed:50:ee:23:f5:fb:87:6f:ee:19:64:56:
         dd:90:d4:a4:55:e4:2f:4d:14:af:19:23:c9:1b:17:89:b7:40:
         77:ac:bd:95:d8:49:a6:c1:c8:dc:d4:eb:aa:ad:c8:c8:2c:9c:
         24:9b:23:20:4f:5d:ba:73:7f:c9:1a:d8:82:81:86:e9:70:a6:
         8e:0b:fc:37:2c:a3:79:a7:a5:c4:13:4c:67:88:9a:50:d7:ae:
         69:25:ba:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:46 2024 by rpki-client on console-ams.rpki-client.org