Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8637e4f3-ecbe-44f0-8621-bd76bcc5f637.roa
File:                     8637e4f3-ecbe-44f0-8621-bd76bcc5f637.roa (raw, json)
Hash identifier:          gm6HYuTUM8QrXnqaXzYhfXwG2z8Brg3ENgJ7pkVzmXo=
Subject key identifier:   1B:79:79:7D:AE:A8:BB:4A:F0:00:02:31:18:0A:67:9C:44:11:19:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       380CB1FE5A8D84B23583807FAB17B9794C95E2A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8637e4f3-ecbe-44f0-8621-bd76bcc5f637.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        75.3.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0c:b1:fe:5a:8d:84:b2:35:83:80:7f:ab:17:b9:79:4c:95:e2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=ffa1740d0f794e3b127e4395cd96b883bfc83306cdf401342070e49ae1d763a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:1c:18:95:e6:cf:20:82:c1:bf:97:65:cb:
                    a0:8a:ca:ee:24:0a:cf:b1:e9:81:5f:56:75:75:d1:
                    e0:b0:52:88:76:1d:81:39:f8:8b:f6:f2:d2:cf:63:
                    0a:8a:64:ba:7b:6a:46:0c:62:36:7d:d9:d4:59:09:
                    d1:c2:69:f0:d2:30:d6:55:a1:6c:83:b7:c0:d8:35:
                    d3:0e:32:8c:8b:bc:1c:00:b4:12:ec:7b:69:1d:32:
                    b5:c8:a4:d3:7e:da:e6:13:86:b7:c5:ec:cb:ee:4f:
                    24:18:1b:e3:b9:13:47:e3:44:62:f0:3b:a5:38:67:
                    74:52:92:51:da:8e:97:b6:ce:65:f8:e4:55:c1:ca:
                    f2:76:09:60:a4:5e:04:e9:7d:82:30:76:e8:e4:fa:
                    f9:39:95:98:5d:f0:04:b6:96:bf:f6:7f:39:00:61:
                    cd:ad:e6:cd:b0:62:00:28:68:b5:22:d6:6d:e9:5e:
                    4e:10:ec:dd:fb:64:e6:aa:e1:d0:2c:a8:8f:54:61:
                    03:87:9b:8d:ab:8a:5c:e3:d4:e8:60:81:eb:11:98:
                    74:2d:5a:9a:49:85:4f:b8:b0:0a:cb:d8:d8:2b:24:
                    aa:f0:96:12:ff:05:9a:b4:c8:b3:93:99:dd:6a:9e:
                    a6:7c:cb:e0:25:bf:1a:49:f6:fa:33:f2:27:b0:bb:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:79:79:7D:AE:A8:BB:4A:F0:00:02:31:18:0A:67:9C:44:11:19:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8637e4f3-ecbe-44f0-8621-bd76bcc5f637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:97:52:b8:fe:65:6f:b6:7b:c4:12:6f:ce:72:10:e2:57:f9:
         4a:78:29:d0:a1:69:89:50:26:95:b6:73:b0:b3:a2:ce:63:d0:
         5d:05:65:ca:c2:4f:23:40:5c:c6:a7:62:db:a8:5b:7c:ee:e4:
         60:2f:14:7e:35:0d:0c:98:c5:68:82:3e:33:47:00:45:01:9b:
         b8:b1:4f:b2:f5:7a:c0:ad:8d:72:ef:1d:1a:a8:b4:25:08:02:
         dc:f7:3b:ac:66:fd:90:aa:f1:26:8b:7e:dd:36:a7:d5:0f:bc:
         dd:91:ae:16:52:ba:09:99:69:90:13:aa:88:a4:09:8c:3f:d6:
         0d:e1:a8:44:7b:0d:2a:9a:17:09:63:70:6a:b1:76:90:7d:8c:
         de:fb:38:46:ba:02:fe:93:7c:b0:98:c8:29:84:fb:89:51:cf:
         23:c1:2c:d9:ea:16:be:72:41:22:4f:8c:cd:6d:6f:12:ef:c4:
         f1:ad:eb:03:33:29:16:0a:19:d9:d4:da:97:31:6a:98:13:3e:
         25:d8:e3:e4:3a:9e:0b:d4:f0:f3:13:f4:f2:d7:46:8e:3e:44:
         4f:56:a3:5e:9d:fd:92:fc:5f:d3:4f:84:37:e9:b0:5c:9b:f9:
         52:fd:2f:5b:10:08:4e:aa:05:fa:be:a7:3e:ce:dc:e5:63:30:
         1b:6a:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:34:52 2024 by rpki-client on console-fra.rpki-client.org