Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f7f2a2f-99f3-4fdb-834a-ff8dee0112c9.roa
File:                     8f7f2a2f-99f3-4fdb-834a-ff8dee0112c9.roa (raw, json)
Hash identifier:          L1c5TR9XeokvDvOS+4qCpv/OKSx3N9eTCslkpBCQpeg=
Subject key identifier:   3B:FA:3A:2A:35:12:5B:DC:1D:B2:DF:C2:67:4E:7C:C3:3A:11:C8:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0381C700F7C1482E7B2D88FD59BDF5B58EE451E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f7f2a2f-99f3-4fdb-834a-ff8dee0112c9.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        216.24.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:81:c7:00:f7:c1:48:2e:7b:2d:88:fd:59:bd:f5:b5:8e:e4:51:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=a75b9f5ecce2ba096943fe089151f504166bd8fd1b61aeb4c5ae7e34735dd406, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:df:be:7f:68:87:3d:82:5c:26:df:14:7c:
                    02:79:f0:95:d4:6e:06:28:6d:98:8e:3f:54:57:a0:
                    5a:38:e8:8d:13:53:59:db:78:5b:51:00:f7:9a:44:
                    65:2f:eb:ab:a7:b4:63:93:7d:db:9d:33:20:4e:e4:
                    fe:b3:21:81:74:e9:35:3a:fb:df:3c:d0:08:f2:e7:
                    d7:87:c8:1c:41:3f:07:29:24:d0:23:b8:fd:e0:24:
                    92:5d:01:38:e4:69:e9:5d:ca:16:63:b0:7a:fa:8a:
                    29:f6:ad:05:95:38:ad:a6:25:ad:16:88:04:c7:23:
                    d4:cf:36:71:06:33:55:bb:e3:d6:65:7a:86:2f:03:
                    8e:92:05:fe:73:4b:82:b9:aa:da:92:5f:8d:43:46:
                    05:e0:f8:fb:d3:3b:be:01:82:10:7b:9b:ee:06:20:
                    bb:92:91:4f:45:ec:64:29:08:58:16:59:63:09:3d:
                    f5:2e:18:7a:23:f2:aa:35:26:ec:66:c4:f3:c1:f5:
                    07:80:1b:73:e7:7d:d2:86:0d:7b:01:05:82:2c:33:
                    f9:a4:ff:fc:86:71:c2:ea:1f:32:e1:56:51:80:92:
                    8d:d9:9e:7e:94:77:60:80:2b:45:de:ce:80:c3:79:
                    79:3c:91:e0:1e:48:b5:bf:f0:19:38:b6:bd:83:1a:
                    64:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FA:3A:2A:35:12:5B:DC:1D:B2:DF:C2:67:4E:7C:C3:3A:11:C8:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f7f2a2f-99f3-4fdb-834a-ff8dee0112c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:04:2f:50:b6:9f:2e:fb:cd:b0:c0:68:dc:95:65:b5:ff:39:
         6b:5d:b8:36:5d:dd:fc:ff:62:e0:3a:65:28:f6:eb:1a:16:67:
         9d:85:f7:57:9e:d6:10:e6:de:3c:74:17:fa:3f:cd:c3:e0:3c:
         c2:08:eb:12:c2:8e:13:ae:d1:fd:ae:65:19:41:66:84:1a:bb:
         e6:45:76:25:7f:0e:00:fc:11:3c:2f:a6:d4:da:8d:37:fc:7c:
         47:e7:d7:c9:a8:4f:41:6c:4c:b8:4c:6e:3f:2d:9b:2d:44:e2:
         9e:28:37:50:c9:80:8e:e5:35:94:e3:aa:c7:04:f4:04:9c:b4:
         4f:ff:a3:e6:da:f7:77:4e:42:71:aa:b1:a4:77:7a:64:48:1a:
         66:34:22:75:e2:2e:6c:7c:ff:b9:2a:41:c7:3d:b1:ce:46:d7:
         32:a4:ce:21:26:67:ce:51:17:0d:df:bc:35:7a:f3:9a:ad:88:
         ac:e3:90:63:d4:0b:20:67:4e:5c:62:d1:d1:86:b6:dd:76:de:
         fb:34:ec:fe:58:63:f4:d7:06:cb:70:21:ce:20:fd:b9:43:c7:
         d5:c9:80:88:b6:54:2f:5f:57:fd:c8:b2:76:7a:dd:91:ef:1f:
         71:dd:3b:94:ca:e2:22:d3:e8:45:e7:87:9a:62:e8:ef:50:ce:
         94:e3:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:16 2024 by rpki-client on console-ams.rpki-client.org