Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8169e6a4-2f55-4226-a4df-50ce90e699d2.roa
File:                     8169e6a4-2f55-4226-a4df-50ce90e699d2.roa (raw, json)
Hash identifier:          elj7iG/6p+hoxurdeDEIfFSGV+SG4Tqn7d0yvURNERM=
Subject key identifier:   24:C6:BC:F3:DB:D0:0D:7A:01:B6:65:F7:54:09:2B:76:DF:0A:EC:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       425FA96F10F5249F776AD8AB745EFCAE6BECCB5B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8169e6a4-2f55-4226-a4df-50ce90e699d2.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        35.128.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5f:a9:6f:10:f5:24:9f:77:6a:d8:ab:74:5e:fc:ae:6b:ec:cb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=ecf5cf21dd545dbd18d48d2c28df5b8884278a4ca57ac60d5f0e98a036596a6b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:0b:92:5a:80:9b:04:b6:e2:87:da:e8:f3:
                    0c:d4:c2:03:bb:d5:81:4f:01:ab:70:22:42:5c:f7:
                    8f:7c:90:6a:c2:c3:1e:79:20:48:68:a7:13:06:c3:
                    ae:e7:ad:c2:3a:41:90:d5:b1:9f:00:57:f3:b8:13:
                    ba:24:f6:c3:6c:c7:0b:8c:30:a2:87:bf:3f:59:e4:
                    cd:c2:b1:63:c1:ab:6f:11:35:9b:4d:69:15:34:3c:
                    38:b4:e3:0e:2c:42:af:a9:3f:9c:e0:a0:e9:03:87:
                    9d:47:df:55:20:0e:07:c7:09:22:59:f3:95:e8:9b:
                    3c:10:ad:35:b2:45:cb:78:aa:45:db:08:be:a5:d8:
                    25:b4:5f:71:25:be:16:f5:86:1f:1f:25:7e:89:9b:
                    27:4e:09:73:63:94:b6:52:1b:74:5e:5b:f4:c8:f5:
                    cd:95:58:3d:6e:ac:30:34:82:b2:a8:79:aa:54:65:
                    d1:09:37:e8:43:53:a9:3e:dd:3c:7b:44:e0:51:58:
                    75:0e:53:02:bb:10:9f:b2:90:d6:59:b4:cc:15:54:
                    a1:27:eb:3b:63:27:70:fb:f1:b2:24:d9:f1:9d:a0:
                    22:f4:21:67:68:2c:63:4e:69:81:7a:f5:69:52:e5:
                    9a:86:8f:0a:99:19:63:fb:b0:0b:72:8f:30:e7:a6:
                    bd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C6:BC:F3:DB:D0:0D:7A:01:B6:65:F7:54:09:2B:76:DF:0A:EC:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8169e6a4-2f55-4226-a4df-50ce90e699d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.128.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         09:34:35:d9:8c:d0:6f:05:c2:41:9b:26:4a:fd:e0:7b:79:63:
         81:1c:d5:4e:52:cf:fe:c6:c3:65:b0:5c:7d:ac:0a:b9:77:f2:
         3e:4f:aa:f5:e2:ee:3e:c8:80:0e:0a:6c:a7:45:62:8d:7e:7a:
         62:24:d6:ee:d6:cf:75:e3:64:d6:8a:4d:6b:26:9e:de:c9:4b:
         24:c3:a5:96:bd:f3:c4:a9:33:5a:11:e7:6e:ab:99:68:ef:5b:
         66:85:53:c9:0d:98:0f:3c:63:5e:2c:63:65:9c:13:61:aa:75:
         a0:db:60:66:2b:9e:bc:a4:04:ad:b8:c8:b7:3d:28:d2:8f:e9:
         e8:5f:95:38:36:d2:2c:9d:4e:f8:de:8f:b6:71:9b:d0:13:e3:
         34:11:8e:22:fc:84:d9:63:6e:ac:32:8c:4b:e6:b9:95:f4:b0:
         92:63:06:4b:b3:b0:a7:63:1c:11:b3:2a:a0:ca:d0:9a:13:a3:
         58:e4:29:33:01:66:4f:a7:f1:52:bc:fc:3d:92:67:a0:6c:dc:
         13:61:ac:85:0b:09:90:57:78:1c:8e:b1:f0:e6:40:0c:b0:c0:
         d7:86:d4:0d:8d:12:f1:cc:40:84:ca:92:b8:b3:41:b8:64:aa:
         2e:b3:aa:bd:55:73:47:66:5e:25:34:0c:d8:42:b9:ce:37:91:
         72:ef:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:18 2024 by rpki-client on console-ams.rpki-client.org