Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa
File:                     9521470e-60a8-4627-854b-23346de593e3.roa (raw, json)
Hash identifier:          tlsxfpnLrnnjwrCt4Y/p8CtIWRHGgTWLPJpXl0WRNBw=
Subject key identifier:   EA:12:B9:69:9E:2B:43:F3:E0:6B:C3:92:3B:53:EE:1A:8B:9A:D8:01
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50F3871882CCF46118FE2EFEF1E6A8AF8B38EB6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.219.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f3:87:18:82:cc:f4:61:18:fe:2e:fe:f1:e6:a8:af:8b:38:eb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=b31cb089ada0317e9b8d61577bbaf2e2491317d5e16212b94a30925139300f33, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d6:3b:e9:6e:a0:06:eb:03:9a:6a:07:0c:42:
                    72:e6:81:db:b4:08:4f:07:83:29:3d:74:aa:27:8a:
                    05:38:8e:d5:84:4f:bc:af:e6:e4:fd:c9:5a:1c:cc:
                    70:89:7b:21:ca:ee:1d:dd:fe:ec:c3:1c:a7:7f:39:
                    60:3a:ff:9d:34:72:d8:a7:3b:64:e4:e6:d2:19:c4:
                    43:68:f5:fd:f0:9c:7d:70:08:bb:37:e9:c2:02:89:
                    e7:7c:70:6c:b3:d6:71:e5:29:b1:f4:d7:ba:98:40:
                    74:1f:b7:7f:46:8f:43:ab:c5:79:80:86:61:0b:f5:
                    83:11:5b:f9:b8:26:9a:3f:ce:47:5b:35:ac:50:69:
                    05:7f:a4:ba:eb:80:cb:5c:31:a8:63:9e:f7:e3:31:
                    da:87:44:4a:97:ee:08:f7:ec:0a:b0:a9:81:c0:dc:
                    78:0c:aa:20:99:c6:42:6d:65:34:92:7f:c5:58:59:
                    0a:41:da:f3:f6:63:7c:8d:e5:d4:e0:d4:53:36:f3:
                    50:d9:8f:e2:2d:fa:d4:07:f6:96:30:f8:d3:71:a7:
                    27:dd:eb:a8:ef:fb:71:bd:fe:92:30:89:0f:75:df:
                    74:7e:40:44:4b:07:56:68:53:ab:ad:a2:23:f9:5a:
                    8a:54:e5:f3:55:1c:7f:46:bf:36:ac:e8:68:82:fd:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:12:B9:69:9E:2B:43:F3:E0:6B:C3:92:3B:53:EE:1A:8B:9A:D8:01
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:1a:0a:80:d9:61:f3:c3:06:5c:27:3b:b9:72:4e:63:99:
         4c:37:1c:21:11:b2:7a:18:94:19:fb:44:b4:ba:17:34:8a:c1:
         2a:a0:23:86:fc:e1:02:71:cb:de:f6:49:c8:48:35:62:74:31:
         c3:80:26:9b:74:e0:99:aa:f1:35:8c:15:34:83:e5:f4:d3:c1:
         43:ce:13:17:73:24:ce:79:93:58:6b:7b:80:81:0a:f7:55:43:
         dc:1a:00:12:46:74:9f:2a:4e:c2:10:29:00:92:e6:4b:7f:1f:
         fd:d0:e0:f5:b5:fd:14:6d:ae:e6:ae:84:81:8a:45:10:c3:a4:
         0e:28:f8:e9:20:05:ca:b3:8c:e2:b8:b5:e2:23:a1:f2:a1:59:
         3e:0b:4a:c6:61:f0:2c:77:31:85:7c:d8:78:34:d4:77:65:6c:
         2d:00:01:36:51:de:bd:3c:dd:b7:bf:56:10:35:7e:41:4f:2c:
         da:e6:4d:55:6d:0e:e1:0b:37:fa:d2:52:9a:c7:3c:02:e0:39:
         71:21:c7:13:aa:14:9e:c7:e2:bd:d2:dd:eb:79:1e:d5:b5:10:
         60:6f:8c:95:25:65:f4:92:4a:14:f8:c6:bc:c9:bc:20:3b:9c:
         c0:f2:59:2a:1b:d2:bc:9c:a6:3f:07:44:0f:a9:69:e4:79:1c:
         e6:0a:83:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:17 2024 by rpki-client on console-fra.rpki-client.org