Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83410682-4826-41d3-963b-6c7a7976752e.roa
File:                     83410682-4826-41d3-963b-6c7a7976752e.roa (raw, json)
Hash identifier:          fLKsNffBt8TWsvRxTSKMoQg+JtlLaDLDRmdzrOzexnw=
Subject key identifier:   0C:D8:68:32:68:44:6B:96:E2:23:64:B6:E5:92:CE:A2:3A:FA:19:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       492700684BB7C9F7310A88F77B01F11C207B3B73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83410682-4826-41d3-963b-6c7a7976752e.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        96.0.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:27:00:68:4b:b7:c9:f7:31:0a:88:f7:7b:01:f1:1c:20:7b:3b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=0fa2a63769d5fe0e019dc5908a38118715c41822b0888d6190e59054cc32f2fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:a4:37:29:0c:44:90:fc:96:9b:dd:0e:4c:
                    21:0b:0e:ef:e4:69:dc:5f:f8:3f:16:fe:08:b4:fe:
                    79:cf:c5:42:4f:29:d1:d7:38:d5:e2:32:5f:04:85:
                    31:77:ba:47:23:2e:52:6c:82:25:d3:96:e0:0b:71:
                    b2:48:ab:29:70:94:86:8e:16:f6:64:a6:e6:29:09:
                    c0:28:02:dc:0f:00:85:94:ef:de:8a:d0:3b:86:7f:
                    ad:ae:90:1c:ae:0e:c1:52:e8:55:82:8e:da:48:14:
                    33:c3:80:b3:4b:59:81:dc:11:22:f3:1d:3a:5b:2b:
                    60:56:2f:fc:b0:c8:1d:ad:c3:99:ef:34:91:87:14:
                    43:0d:67:72:12:4f:fd:d3:e0:db:1d:f7:00:c9:2b:
                    7e:25:f7:0d:85:03:b9:1c:18:52:f7:bb:1f:e3:3d:
                    de:cc:79:c2:ff:39:c0:f6:4d:33:3e:99:9a:cd:95:
                    25:fd:79:73:cf:0c:f1:67:9e:78:d6:f9:04:69:b4:
                    92:9c:fb:7a:60:ba:d8:ab:a7:4c:3c:4c:0e:fe:80:
                    62:0a:81:77:3e:d5:78:8f:b5:9c:7e:c1:79:a0:fb:
                    5e:5e:08:df:b4:e7:eb:02:aa:59:ed:5e:a8:0e:83:
                    61:f5:2f:72:ce:7a:04:f3:4c:66:af:98:ed:fb:4b:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D8:68:32:68:44:6B:96:E2:23:64:B6:E5:92:CE:A2:3A:FA:19:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83410682-4826-41d3-963b-6c7a7976752e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c1:b6:a0:24:d5:da:24:65:9e:64:cb:d6:01:7e:73:cd:75:73:
         c8:48:db:ac:18:7c:d0:8d:c6:eb:b6:52:f2:67:7a:a3:06:5b:
         ea:78:af:df:5b:3a:0e:08:c8:ce:b3:e6:2f:08:5c:de:2e:5e:
         84:b4:5e:31:86:3e:b6:79:e9:33:c0:33:e1:da:79:ae:c5:05:
         88:8d:e7:dc:20:ee:e1:e1:04:69:3d:1c:97:48:4f:f1:ee:6a:
         a5:86:67:f4:db:ab:d1:fb:14:82:b0:54:31:ea:a0:a9:ca:a1:
         e0:68:d2:b8:ee:6c:c7:0f:c2:82:4f:ad:7c:96:8e:e2:b7:57:
         eb:4a:3a:04:1e:1d:41:70:25:47:df:b5:c6:b1:d7:23:b7:78:
         27:1b:b5:c0:4d:c3:5f:fc:98:70:b2:eb:2a:c4:5a:8b:02:a3:
         15:f3:91:60:3c:d6:6a:5a:b5:ff:21:b7:57:02:8d:de:5d:f5:
         53:bf:55:c5:38:a6:fb:ea:34:86:8a:dc:21:7a:96:56:c8:d9:
         24:5b:fa:3f:14:64:78:7a:c9:a8:bf:99:80:73:f9:12:83:83:
         63:7f:fb:08:fd:70:36:97:09:1f:25:53:b6:43:a1:93:44:59:
         76:fc:d7:77:ac:0c:c2:cb:77:e7:07:c6:44:78:79:93:81:66:
         37:7d:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:29 2024 by rpki-client on console-ams.rpki-client.org