Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c6311db-f7c4-4ff7-8a15-53e3483289d5.roa
File:                     8c6311db-f7c4-4ff7-8a15-53e3483289d5.roa (raw, json)
Hash identifier:          jo0Kp7B1fGnjDlOruJO9xkQJxtQwMkIcEfs2veoH0Hw=
Subject key identifier:   42:AD:87:A6:25:69:00:FB:01:01:CB:2C:72:BE:00:99:63:73:E7:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61B22EA38E4582F883E46A0C06D67203C9D4B31A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c6311db-f7c4-4ff7-8a15-53e3483289d5.roa
Signing time:             Sat 20 Apr 2024 00:00:00 +0000
ROA not before:           Sat 20 Apr 2024 00:00:00 +0000
ROA not after:            Sat 25 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b2:2e:a3:8e:45:82:f8:83:e4:6a:0c:06:d6:72:03:c9:d4:b3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 20 00:00:00 2024 GMT
            Not After : May 25 23:59:59 2024 GMT
        Subject: serialNumber=0fe85c928121e8250851ccd265c5a96b140126eeb2686a7269fce0dfce472955, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:5b:79:42:35:5f:5e:f0:2d:5c:e1:f4:8b:
                    88:6f:73:bb:c0:0a:92:f8:dd:5d:9f:59:c0:03:dc:
                    b9:af:04:b9:fc:0e:11:2a:f3:0d:e2:36:b9:18:55:
                    e9:08:01:7c:4a:39:d1:4f:40:9a:ef:e6:85:79:6c:
                    c2:0d:46:b6:d8:70:41:58:09:cd:a8:27:cf:95:7b:
                    98:4e:cf:82:b4:34:3e:80:97:86:92:52:f0:bd:66:
                    1b:d4:36:3f:56:13:78:6c:3f:f4:95:f9:2a:da:08:
                    19:c8:7a:65:37:5a:1a:a1:6c:fe:8d:91:c0:73:33:
                    b2:08:fc:b2:03:a2:2e:3e:ea:7f:8c:6e:79:75:5c:
                    0a:b9:7a:0d:c4:f3:29:9f:e8:05:4a:0f:5d:4e:1e:
                    c3:a5:b5:96:76:c9:93:ad:c5:82:db:c0:ec:bc:ca:
                    05:d7:7e:4c:22:2e:65:91:64:3c:b8:a1:fa:89:53:
                    e9:d5:70:b8:29:b9:8f:ec:87:5e:d7:d3:4a:40:cb:
                    9f:f0:2e:91:9b:4e:77:25:d5:b5:44:91:19:d4:0b:
                    6c:39:1a:d8:b1:e5:ab:de:c8:ff:1c:76:38:04:22:
                    13:b0:21:e7:9c:ff:10:a3:5d:26:38:d8:8d:b6:17:
                    6b:e3:c5:94:07:a3:26:cd:2a:dc:33:a6:98:f5:d9:
                    4b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AD:87:A6:25:69:00:FB:01:01:CB:2C:72:BE:00:99:63:73:E7:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c6311db-f7c4-4ff7-8a15-53e3483289d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:35:a0:c7:f5:83:6f:f6:e2:9c:92:25:58:30:c5:0d:f4:b2:
         c2:60:2a:92:63:4c:8d:d8:d7:20:a3:28:4f:78:54:d4:b8:a7:
         4d:f9:bd:84:ce:fb:ba:dc:6b:0f:18:f3:b3:9b:c7:b8:4d:a3:
         ee:7f:0c:fd:ac:e5:c5:c4:cb:ef:90:8a:05:08:22:8c:d8:56:
         8b:a7:ce:04:5b:88:f9:78:b4:b1:05:5b:f5:bd:5f:ba:e0:9c:
         2c:a3:70:a4:d6:fc:a9:64:3b:e4:4f:84:47:ed:8c:47:fe:dd:
         74:94:ef:23:a7:76:eb:99:0a:e0:fc:91:57:03:f0:d1:97:d2:
         4a:82:36:93:ce:47:1d:4b:f4:5c:65:9c:84:5d:26:af:80:a9:
         4f:2f:6f:b1:00:04:b9:1d:79:bd:03:90:a7:31:49:76:45:61:
         7c:f8:b3:e7:10:f7:ca:2b:1f:52:c1:45:d9:53:80:62:fb:ac:
         33:a0:33:97:03:cb:cc:9e:c5:87:1b:79:d0:13:7d:bd:22:81:
         be:ce:36:98:b4:db:be:6a:be:d6:63:8b:a9:4f:f4:d1:a3:d7:
         47:18:a3:0a:9d:fc:e6:19:fc:81:93:d2:7e:30:db:17:15:39:
         88:ac:68:0c:29:8d:69:89:4a:a6:80:b0:f8:6d:2d:84:12:a3:
         4b:07:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:28:00 2024 by rpki-client on console-fra.rpki-client.org