Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/844abc15-f137-4ba6-91a9-3db90fdebd62.roa
File:                     844abc15-f137-4ba6-91a9-3db90fdebd62.roa (raw, json)
Hash identifier:          eLft8QHgGmW00WrRmvdWgnuqOeWKXzwI+Ah+tmyZmkU=
Subject key identifier:   D5:33:C5:4E:2D:7A:51:F7:D3:32:A4:33:05:96:DC:F1:5D:F0:38:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       431063FA6519035219442BEDD91B7DE536FF4231
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/844abc15-f137-4ba6-91a9-3db90fdebd62.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.27.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:10:63:fa:65:19:03:52:19:44:2b:ed:d9:1b:7d:e5:36:ff:42:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=2e500517592d569980aca53d9f86e44ad36be63628c67f2ebbf42edc01b9fb18, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:64:43:1b:97:ec:61:10:79:06:34:c9:75:
                    a3:0e:2c:d6:9d:5c:bc:ca:9f:8d:b2:ff:d9:99:b4:
                    3e:b9:60:7f:af:f2:cf:13:82:ba:62:18:20:7b:86:
                    68:06:7b:63:ab:fa:30:cf:d8:ba:4d:5b:1d:0c:9c:
                    05:36:98:56:7d:f9:e6:44:28:3a:cb:cc:c0:b8:33:
                    20:bf:5e:3c:8b:14:86:a8:a9:95:a7:04:75:73:46:
                    56:6f:4d:17:42:77:94:d2:28:74:17:3c:a1:a5:1f:
                    57:6d:2a:f2:21:b5:8b:75:7c:3e:12:48:f9:67:64:
                    d9:e1:b7:26:78:69:8b:3d:8d:1a:2d:dc:27:21:1e:
                    33:62:70:a9:ef:cf:75:c8:9f:91:fd:e9:4f:b2:a2:
                    0a:10:c4:f1:16:e9:67:f7:cf:94:08:e9:5c:49:24:
                    a1:d0:b1:24:1a:cf:5c:13:e8:f1:cf:ec:b3:75:13:
                    ef:13:f1:ea:24:51:2c:62:69:28:90:8e:57:92:42:
                    4c:ff:d6:47:9a:a7:21:27:ae:6f:9b:a2:88:53:29:
                    62:82:fd:a6:9f:9d:0c:f0:33:2c:7c:5d:94:4d:32:
                    de:29:67:8d:7b:f0:2b:89:85:12:f5:08:51:fa:92:
                    3f:7a:58:77:e8:1f:e7:3a:fc:e0:bd:31:77:f6:4d:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:33:C5:4E:2D:7A:51:F7:D3:32:A4:33:05:96:DC:F1:5D:F0:38:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/844abc15-f137-4ba6-91a9-3db90fdebd62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:70:91:e1:b2:30:a1:ac:75:dc:ef:36:69:19:56:68:23:03:
         d7:75:8f:61:25:c2:1e:2f:60:fc:49:ce:45:13:30:55:f9:50:
         3a:d0:04:1d:5c:af:c1:e6:92:88:68:7b:57:02:8f:50:15:29:
         e8:76:8e:cf:59:df:12:e7:a1:46:28:a1:60:d5:76:a5:c2:4c:
         83:1a:88:ed:ad:bd:a0:4e:c5:69:b5:29:87:7a:2f:04:7d:68:
         34:3b:a0:fe:23:75:3b:d7:c7:bd:fb:4d:a2:16:80:4f:bf:91:
         3b:bd:88:a0:9b:f1:3f:f5:4b:d6:bb:07:b8:7e:73:87:88:99:
         e7:4b:2c:fb:54:6c:85:25:75:3e:44:4e:f9:3f:6f:00:a6:67:
         f4:f9:71:84:f3:a9:5c:4d:3c:45:64:d3:90:e5:5e:ce:66:89:
         16:58:22:fc:2f:4c:88:aa:a4:df:5d:8e:9a:ee:08:34:47:73:
         61:49:d5:ad:a5:10:09:b3:a9:fb:de:28:c0:1e:f0:20:6c:4f:
         84:90:a5:7c:a9:0e:4f:8a:68:0e:d1:8d:b3:21:6a:9a:6f:27:
         c4:83:7b:92:5c:d1:08:5c:d6:68:87:3b:fc:a6:5b:f9:8a:0d:
         25:cf:95:47:be:e6:3d:92:04:22:ec:01:a9:ed:0b:c9:2f:bb:
         94:5b:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:13 2024 by rpki-client on console-fra.rpki-client.org