Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82ae66ad-05a3-4453-84c9-cd60b4012157.roa
File:                     82ae66ad-05a3-4453-84c9-cd60b4012157.roa (raw, json)
Hash identifier:          Dq8Yh9PBOKTz8seHMLC42OLAW0oian3RwXspgXuCoOg=
Subject key identifier:   36:F3:13:60:52:11:B1:0C:ED:63:FC:71:A0:C4:F4:3D:8A:C9:63:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       16B530DEAD02E7A12B343B2F2862CF90333E8179
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82ae66ad-05a3-4453-84c9-cd60b4012157.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        156.5.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:30:de:ad:02:e7:a1:2b:34:3b:2f:28:62:cf:90:33:3e:81:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=00ed8f7994a5fb323f172e8d4d2fe52a095c53e7da9e406eab5da73ba4eb3095, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:0e:4a:36:a0:d3:03:d6:ba:c9:fd:1b:f1:
                    c7:e5:82:ef:61:5d:60:43:1d:bf:a9:c4:a6:60:56:
                    cd:d7:c2:27:dd:3e:68:55:55:4c:76:8e:6a:a2:c0:
                    e7:98:c6:91:5e:c6:e1:d4:64:8d:d7:32:7e:bb:37:
                    ee:40:fa:94:eb:02:3a:69:fd:7d:ad:40:ab:49:76:
                    16:51:57:43:d3:7f:44:f9:d8:90:79:cc:2f:d6:16:
                    84:a8:0b:77:a5:d2:28:a6:60:53:3f:f7:e0:5d:8c:
                    21:a1:d2:73:a7:ff:9c:e9:58:df:c1:9f:8c:7e:7c:
                    d8:04:af:14:e4:a8:4f:35:00:51:49:60:13:98:12:
                    44:1a:c2:69:c9:5b:55:b0:e7:ff:c3:71:00:89:e6:
                    14:a7:9c:3f:48:5a:51:51:93:93:a6:72:f0:ed:df:
                    4d:f2:f8:bd:c6:77:22:0e:23:11:1b:10:55:73:38:
                    e4:ce:76:2f:5f:f8:ab:d0:1e:0f:8a:f1:62:38:b3:
                    cd:69:69:28:b7:19:c9:c8:f1:f5:3f:5b:cc:2f:e7:
                    45:aa:2c:14:96:63:f8:b6:ef:52:d3:ee:bc:73:53:
                    99:a0:a9:9c:ee:98:30:2d:7b:ea:84:3a:9a:50:87:
                    cc:4e:aa:8f:90:e4:3e:e3:c2:af:05:44:0a:64:42:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F3:13:60:52:11:B1:0C:ED:63:FC:71:A0:C4:F4:3D:8A:C9:63:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82ae66ad-05a3-4453-84c9-cd60b4012157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.5.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:16:04:02:2a:7a:89:11:4c:7f:c9:b4:37:3f:cf:3c:8e:ab:
         3c:d3:9a:10:37:2b:0f:24:d6:25:ad:29:f3:28:a0:0f:13:49:
         00:ed:84:3e:7e:ae:67:5e:1f:d9:18:d0:82:a9:12:40:92:2e:
         fa:0d:30:6d:6c:8c:d6:fe:6d:3d:c5:2e:09:0c:55:ad:78:19:
         29:62:04:d3:d3:ba:e8:14:0f:7b:c7:41:71:ed:7b:d2:b5:b7:
         2f:91:ee:9a:60:d6:12:74:97:27:5e:6e:4b:83:25:17:8e:e3:
         44:3c:1a:5b:68:71:e9:0b:f3:47:a1:76:bc:4c:76:c3:53:08:
         04:cc:94:6a:66:d6:04:8c:5f:87:58:b1:be:21:7a:05:8d:23:
         83:d2:77:0a:0e:d0:6d:d0:04:98:6f:bd:df:d3:15:f7:f7:66:
         fd:a8:24:ff:7f:b7:8f:f0:63:4c:4c:19:47:c8:0f:0a:0c:d5:
         11:ba:ba:ed:2e:c3:ab:ef:21:9d:86:3f:58:7b:85:40:bc:29:
         ae:9b:e6:68:b9:1a:89:84:e8:b5:c8:61:ab:3a:2b:8c:ae:6c:
         48:2b:fd:0d:11:3b:17:b4:0f:ab:15:f6:ad:eb:56:61:fe:53:
         9a:2d:9d:5b:1d:36:61:56:7f:05:de:f6:4e:63:51:88:78:d4:
         70:b2:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:36 2024 by rpki-client on console-fra.rpki-client.org