Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98943630-dbfe-4e7e-81ab-bcebb18c8c9c.roa
File:                     98943630-dbfe-4e7e-81ab-bcebb18c8c9c.roa (raw, json)
Hash identifier:          IfL241y9vICbwLi9JRdui2cIeNhvQDYNAzsn9eGs6Bw=
Subject key identifier:   B6:D5:CD:76:5D:F7:57:33:8F:A4:C7:D6:A7:85:CA:12:4B:F0:9B:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04C76D9EE2BEA8621D351D7810CCB87BFF4AD938
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98943630-dbfe-4e7e-81ab-bcebb18c8c9c.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        155.134.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c7:6d:9e:e2:be:a8:62:1d:35:1d:78:10:cc:b8:7b:ff:4a:d9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=b6e574f0ca19cd565fc42d0f55e450dfeedad4f47ca08bdce1c192f95ba1d3ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c8:4d:36:b0:71:af:b5:14:eb:47:d1:9d:81:
                    10:23:b0:af:cf:da:45:a2:dc:84:f4:e3:9c:ab:b5:
                    5d:87:2b:08:3f:c7:fc:fa:fe:4a:c7:82:f2:5f:14:
                    aa:08:62:e0:d3:2d:db:60:9a:c8:83:c6:b2:7b:10:
                    96:be:6e:d5:cc:d0:cd:54:a3:06:e5:38:9f:30:84:
                    7a:be:2f:d0:b1:0b:56:07:91:cb:67:31:1c:10:64:
                    44:64:9e:21:8f:88:ab:f6:27:42:1b:da:a9:79:73:
                    70:72:a4:ae:ee:23:68:57:23:37:e8:8b:53:62:37:
                    19:ff:1f:3f:93:34:98:7d:6d:e2:cb:f1:4f:5a:b3:
                    c9:ce:3a:6c:20:0d:73:44:51:31:75:a9:08:f9:89:
                    e7:76:cd:c0:93:9e:67:9d:58:c7:8f:8f:aa:6d:3d:
                    f2:4a:61:51:79:9e:8d:e2:7a:c7:0b:d4:02:f9:e4:
                    7d:a2:f9:21:f0:de:e1:43:ef:ce:64:0f:06:63:89:
                    cc:1b:83:3f:6b:63:bf:3c:04:8a:ad:ea:ad:e6:15:
                    72:db:f9:ca:86:a6:3d:8e:1e:35:9a:31:86:13:fd:
                    60:d6:28:db:27:69:91:92:a2:f9:df:c5:97:20:0b:
                    28:c5:06:dc:8a:c6:93:70:b6:2b:71:60:45:ae:6c:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D5:CD:76:5D:F7:57:33:8F:A4:C7:D6:A7:85:CA:12:4B:F0:9B:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98943630-dbfe-4e7e-81ab-bcebb18c8c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:f1:0a:8e:4b:ba:ef:84:08:6b:19:91:8b:9e:d8:7c:1c:ec:
         33:16:bf:26:63:14:63:23:eb:41:41:35:6f:09:d7:14:55:22:
         5d:19:bd:7c:b0:96:f0:14:85:f6:d6:6b:69:8a:7a:2b:db:66:
         40:67:4b:7d:e1:39:da:4b:86:7d:d3:71:db:fe:2c:bb:37:b2:
         9e:78:f2:55:5d:b0:2f:af:be:82:d5:88:9a:26:ba:d1:d0:e5:
         33:4a:e4:3e:71:7b:71:ff:90:cd:e3:4d:8d:5e:99:b2:7c:5b:
         d2:04:81:f3:cf:70:e4:63:58:24:d9:bd:27:26:26:d6:3a:ad:
         dd:98:1f:fe:8c:e2:7a:56:ac:d5:b7:f8:2e:c5:b2:6e:ba:76:
         84:22:56:cf:b7:e3:39:c8:88:69:32:7a:3f:2a:76:cd:c1:23:
         6d:02:c6:31:9f:ff:c7:a5:ac:91:53:7e:9b:81:49:92:19:3f:
         a2:f5:98:d7:ec:64:52:ea:78:73:8d:7f:fd:41:c1:c1:df:58:
         8f:61:37:aa:ad:0b:4c:ce:26:33:63:a8:94:93:21:71:a2:f1:
         59:d8:81:fa:f7:ed:74:76:8e:1f:31:18:7e:97:51:b7:ae:3a:
         8f:ff:f3:89:b6:da:ee:65:57:e5:54:2f:be:93:ff:b0:88:89:
         4b:17:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:31:26 2024 by rpki-client on console-fra.rpki-client.org