Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b27d396d-85b1-460b-ae33-2f368889c76c.roa
File:                     b27d396d-85b1-460b-ae33-2f368889c76c.roa (raw, json)
Hash identifier:          NK4Cn0pbQ9826P1COKmdgkuDCHDrn8bT1Xyss0ZWfhM=
Subject key identifier:   5D:18:5E:A9:C9:88:20:89:92:80:65:79:D5:7E:D4:63:B0:DC:B7:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05E1A935D8A576D7E10B2342D2CF4281FD051D8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b27d396d-85b1-460b-ae33-2f368889c76c.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        54.7.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e1:a9:35:d8:a5:76:d7:e1:0b:23:42:d2:cf:42:81:fd:05:1d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=a62319bfd3e6b52a9a5832357a4b43d15203a97c261d3b5ec8a49c6ad65b84d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:15:a2:7e:64:55:ba:65:1a:1f:b7:36:ae:8f:
                    24:0a:2d:0f:7d:69:53:97:ac:6d:7b:db:00:cb:40:
                    49:03:d6:a6:2c:15:6e:86:a9:1d:99:fd:7f:42:27:
                    45:5c:c6:38:89:25:dd:a9:75:ac:4f:2e:ae:f1:b6:
                    37:eb:96:56:19:92:58:2a:86:c7:25:1f:90:f2:bd:
                    0d:fd:94:72:91:53:33:af:c8:ff:24:f9:4b:0d:53:
                    9b:c3:2d:8e:1e:ef:08:fa:cf:db:7b:14:21:df:a9:
                    a6:87:b5:2f:b8:99:f2:41:9a:01:d0:2c:91:c3:a4:
                    c0:ae:74:45:f6:09:9f:b2:88:f3:e6:22:30:84:a3:
                    8d:bc:1c:ac:5f:47:6a:98:9a:45:eb:ee:ba:51:2f:
                    ff:4a:f4:82:2e:40:5e:28:6c:04:a6:b7:e1:49:81:
                    8c:9d:cd:d6:62:16:58:ba:b9:43:5b:e9:03:1f:80:
                    ba:fc:8c:9f:74:94:dc:96:34:01:7d:84:bf:aa:fe:
                    50:c2:8e:e0:37:fa:ca:53:d8:8f:9c:e5:97:1e:40:
                    0b:ad:06:75:5f:23:15:45:31:8e:7d:df:14:03:f1:
                    88:8f:79:b1:38:da:80:c4:44:b1:1c:2a:1a:71:da:
                    61:ab:f2:c8:9f:b5:3c:bb:f9:e6:36:7c:18:d6:08:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:18:5E:A9:C9:88:20:89:92:80:65:79:D5:7E:D4:63:B0:DC:B7:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b27d396d-85b1-460b-ae33-2f368889c76c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.7.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:eb:91:b9:35:7a:e7:14:28:2c:74:52:52:74:bc:fd:2f:bd:
         b4:7d:0c:be:9e:b4:aa:9b:ed:05:79:e4:31:00:be:33:fd:5b:
         de:78:6e:ff:33:d1:79:80:a8:16:a0:0e:98:f6:4e:a5:03:f6:
         9b:ce:f4:ca:ce:e2:fd:20:98:4d:0c:d1:fc:e0:7a:23:dc:db:
         5c:9a:b7:87:1b:6c:b3:a8:cf:13:a5:a6:6f:0b:f5:a6:ac:3f:
         06:fb:2e:8b:47:a6:d6:01:d8:3d:ec:c3:76:3d:e3:94:bd:89:
         be:8c:a3:4f:48:7e:27:31:8a:53:47:4c:e0:40:32:ec:94:63:
         46:1f:10:16:78:1e:71:5a:1d:f4:bc:ac:9b:de:dd:cc:a5:dc:
         06:6f:62:16:0c:52:bf:03:8a:6f:40:69:c4:03:99:be:11:de:
         12:b8:e3:6d:05:9e:f4:82:12:f8:f4:95:ed:06:59:98:f3:5f:
         77:9f:25:4b:c9:60:6a:ca:91:38:26:4e:fa:97:cc:84:78:00:
         41:8b:ef:94:a7:32:39:a0:2c:2c:c6:c0:6e:57:52:ef:76:fe:
         3c:65:4d:e4:63:97:c5:61:5a:93:67:91:20:e1:25:0e:df:5f:
         4e:bc:26:c2:49:43:12:73:f8:9e:35:e7:e9:4e:c0:17:3a:cb:
         f9:40:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:06 2024 by rpki-client on console-ams.rpki-client.org