Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98921146-e18d-4a48-881e-125805ae23ae.roa
File:                     98921146-e18d-4a48-881e-125805ae23ae.roa (raw, json)
Hash identifier:          J6yIfFfrC1oMp4sVVc54iHSBPfBDOrUUQ7/NOltSVoI=
Subject key identifier:   63:C0:C2:6B:60:AD:A8:DE:2E:58:7D:9E:D4:1B:17:A6:4C:88:C9:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25BCD17CE6A16FD90AB94EDD1D364E529A084B03
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98921146-e18d-4a48-881e-125805ae23ae.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        141.242.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bc:d1:7c:e6:a1:6f:d9:0a:b9:4e:dd:1d:36:4e:52:9a:08:4b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=d0645a24f5954db8d7b69e46e42939753bf74a147fbad46299a52134476a5703, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:d8:59:f3:f2:00:9a:f0:32:46:97:2f:bb:
                    b3:2c:59:1c:aa:04:6c:a8:b3:b4:a5:c7:7b:54:48:
                    82:cc:6f:49:62:a0:d2:60:0a:e5:13:58:5e:e4:1e:
                    0e:b0:6f:df:af:f1:df:7c:60:cd:05:47:be:10:e9:
                    b9:28:51:79:d6:a2:f6:a6:1e:d8:27:6d:1e:dc:09:
                    37:19:77:ae:48:29:e6:b2:7d:bc:35:4a:00:d9:fb:
                    26:d3:05:be:9e:95:62:ae:25:b6:ea:fa:ad:36:61:
                    9d:20:80:32:8e:d3:28:27:fe:3b:fe:50:17:19:39:
                    ec:50:18:b6:b8:60:96:8c:36:aa:fe:f2:f1:3f:1d:
                    0f:2c:3c:19:83:c9:8a:4b:b0:12:c5:77:20:7a:e9:
                    7f:ff:e8:97:25:73:17:77:51:88:f6:14:d1:b5:e1:
                    f8:de:b7:dd:72:dc:9e:01:e6:bd:04:be:4e:83:51:
                    04:ac:f6:18:31:20:3f:dc:85:59:3e:13:62:ee:2a:
                    bf:8c:33:e5:b0:e1:15:cd:8f:15:f8:ce:73:db:74:
                    2e:9e:86:36:5a:33:c0:5d:65:1b:dd:b5:79:bd:9b:
                    2c:14:3d:b9:cc:ab:4f:8a:bd:a0:d1:92:f7:6f:d0:
                    31:ca:c4:42:42:ec:41:9f:32:00:89:54:fd:18:8d:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C0:C2:6B:60:AD:A8:DE:2E:58:7D:9E:D4:1B:17:A6:4C:88:C9:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98921146-e18d-4a48-881e-125805ae23ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:da:e7:56:1a:d4:3a:42:b0:a3:23:89:9f:38:de:b4:72:
         91:fd:4c:68:10:b4:f7:3c:27:73:57:3f:f4:9a:94:fe:45:2e:
         32:d5:b3:05:9a:12:61:eb:18:d1:e1:2a:0a:bb:bf:eb:24:ae:
         23:4c:85:fe:f3:3a:d5:bc:08:42:b9:f4:cc:9e:9a:84:de:79:
         a2:cc:7c:c6:7c:00:ab:57:a8:92:4e:12:f4:e0:0c:23:c9:b2:
         8a:48:7f:0f:9f:d2:42:26:d1:42:54:86:67:eb:31:71:ec:f3:
         46:c4:dd:f8:7e:fd:f0:49:82:b2:d2:29:8d:45:33:02:b7:3b:
         87:47:89:1f:65:ed:de:89:d8:b5:c5:0d:36:95:63:04:cb:ea:
         13:23:8c:bc:74:fc:fc:3f:c6:d3:8c:c9:4e:21:99:66:f0:8f:
         96:14:14:aa:4b:64:ea:25:c3:e9:ec:35:56:0a:0d:38:5f:dc:
         b4:0c:31:02:4d:11:19:23:40:05:93:1c:c9:cd:cd:0a:6e:80:
         f5:a5:2f:14:ef:28:44:1b:63:51:40:14:16:77:64:10:e7:95:
         84:b4:ff:4c:ad:3e:9c:69:6b:79:15:cf:e8:34:53:35:19:40:
         e5:09:11:5a:fb:3b:43:c3:a6:6f:28:79:fe:cb:9a:0f:93:cc:
         ae:de:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:36 2024 by rpki-client on console-ams.rpki-client.org