Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a8d5db4-e57a-43d4-b37b-f75971c4a85c.roa
File:                     9a8d5db4-e57a-43d4-b37b-f75971c4a85c.roa (raw, json)
Hash identifier:          0fGVF7EHjQYxSj1wWE4zkCGhrdH6+h0CxCZxXtoNAmY=
Subject key identifier:   A2:E2:F8:F0:50:09:04:EF:45:2B:CD:CE:DD:0F:8E:AF:5C:1E:B3:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       062AEAE7C88E1C5F32EEEA48914B5790E59F39C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a8d5db4-e57a-43d4-b37b-f75971c4a85c.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        57.251.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2a:ea:e7:c8:8e:1c:5f:32:ee:ea:48:91:4b:57:90:e5:9f:39:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=2c3a50a2d391c9383f849e922f2a12163b7f3a701555fcca43ee098cb3f99558, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:32:22:94:a0:f1:49:54:49:9c:2a:5e:77:
                    da:d8:89:9b:69:dc:0a:64:cd:61:a3:2a:bb:2b:1d:
                    9c:9b:a0:bc:da:2f:47:45:1b:02:37:ee:95:78:78:
                    df:51:41:0f:53:2a:ca:8b:32:29:d4:20:26:1e:9d:
                    aa:66:2a:b0:69:cd:59:a4:bf:03:d2:cd:c1:b0:34:
                    15:28:60:34:b3:50:a8:49:86:6f:1d:3d:85:93:e2:
                    d7:06:52:45:53:c7:ef:cc:5a:a1:c6:4e:fa:08:0f:
                    e0:4e:68:d7:0b:e8:08:7e:eb:57:4e:f1:33:84:8e:
                    1f:d3:00:fd:20:58:21:f8:c8:c4:09:51:e8:8e:3d:
                    19:69:d7:93:6a:75:28:42:2a:38:9a:be:3d:7d:cf:
                    38:8f:bd:95:84:8a:74:3b:1b:02:f7:70:21:80:bd:
                    79:90:20:6f:4b:15:43:a9:ee:8a:16:16:81:12:3b:
                    27:f3:88:35:43:df:65:67:ee:98:33:8c:3c:74:f9:
                    aa:2a:b3:1d:17:c3:b2:4d:10:49:a2:d1:64:29:a9:
                    50:d2:98:89:35:ac:62:57:ce:e0:e3:1b:7d:e6:13:
                    45:1b:e9:dc:ad:a3:6f:75:f7:e0:dc:5a:90:67:87:
                    bb:ca:04:8c:33:22:c0:bd:ea:67:9b:d8:9f:03:ac:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E2:F8:F0:50:09:04:EF:45:2B:CD:CE:DD:0F:8E:AF:5C:1E:B3:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a8d5db4-e57a-43d4-b37b-f75971c4a85c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.251.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:e3:d4:22:35:a0:9f:13:76:c6:a2:2c:67:fa:4b:63:f3:17:
         15:85:da:ee:ec:c9:09:2e:c8:38:b3:87:be:bb:06:5b:3d:c5:
         1b:07:18:08:ef:69:28:57:9d:6f:91:8c:1c:26:7e:37:ca:84:
         e5:bc:9c:1e:6a:65:20:aa:28:68:78:c9:cd:0a:8b:db:7a:76:
         ca:1d:34:fc:8f:2c:f6:99:ad:27:26:7c:b7:a0:ee:9a:50:88:
         71:18:aa:a4:03:23:52:47:11:cd:b7:f0:62:7b:d7:24:3f:8b:
         19:a0:2e:6f:58:0b:f2:b9:e9:a3:e8:4a:81:3b:be:9d:ec:ad:
         5f:67:e7:72:f2:ab:d4:fb:a9:05:d2:37:20:1b:b5:03:26:0c:
         37:9f:ef:40:84:0b:ef:15:de:2b:ab:d8:fb:7b:2d:cb:70:72:
         e3:5f:37:8b:b1:0a:66:43:ca:68:21:e5:53:3c:d5:91:44:0f:
         f8:b7:73:af:62:34:44:10:ad:0c:04:dc:03:0e:96:1f:3a:00:
         91:53:96:9d:42:f2:56:ee:76:c6:c9:e2:1b:a0:90:78:a3:a9:
         60:ac:8f:db:8b:57:b2:bf:b3:fa:e3:0d:e9:4d:0d:d2:30:3d:
         c2:c2:bf:64:bf:49:70:d4:ec:60:12:59:c0:95:cc:62:3e:1a:
         cf:47:28:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:28:02 2024 by rpki-client on console-fra.rpki-client.org