Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b295691e-69d4-4f63-8aeb-d23d6eea96d5.roa
File:                     b295691e-69d4-4f63-8aeb-d23d6eea96d5.roa (raw, json)
Hash identifier:          a2mmK27KzIuSJc6qHLC7Rns0u2/3b+fuxoGXPL7r+4I=
Subject key identifier:   7B:03:C0:B3:98:0B:E6:AC:A5:90:9C:BF:83:D3:38:45:07:B9:AA:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B828FADB3E6F4FE5246874479F0548477123E6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b295691e-69d4-4f63-8aeb-d23d6eea96d5.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f01:4830::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:82:8f:ad:b3:e6:f4:fe:52:46:87:44:79:f0:54:84:77:12:3e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=376441034515ed5c0ea7877168fe604af4936d18101769c441ea31624e8d87ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2f:c8:93:36:3c:f0:26:03:43:a5:b6:10:ca:
                    61:83:02:a8:d9:3e:62:ec:d2:ac:f6:67:06:7f:70:
                    b8:0d:e8:ae:9d:ff:47:23:ab:94:30:d3:da:34:52:
                    e5:44:fc:12:c9:b2:ab:94:49:24:7d:e3:4a:91:47:
                    c6:50:a0:0c:51:1b:db:d1:9a:86:7c:75:fc:85:f8:
                    f5:7e:61:62:d5:95:5e:98:1a:23:d6:9a:04:ab:fc:
                    61:10:1d:f3:bb:42:d2:3d:12:b4:d2:98:da:65:15:
                    4a:f0:5a:dc:e6:58:34:8a:3f:3d:4a:bd:2f:7d:08:
                    83:4f:65:36:b1:f8:ce:cb:68:78:73:d4:06:ce:01:
                    4f:8a:5a:27:42:2f:76:96:03:ea:8a:65:a5:a5:a5:
                    79:2e:b3:0d:10:6b:ad:36:14:8e:12:08:0a:fd:53:
                    c0:1b:55:01:df:0f:8f:13:8f:c0:2b:cc:a6:df:03:
                    10:95:9f:91:b0:31:cf:58:81:47:73:b5:72:83:4a:
                    33:e0:31:9c:33:52:7d:72:6a:6c:2f:e2:f9:f8:f6:
                    ec:15:6e:6e:a7:45:8e:f0:9f:c4:90:c6:5a:b2:0a:
                    65:42:ec:29:9d:71:7e:9f:cb:fd:8b:ad:06:6d:04:
                    73:b4:7d:a4:9e:16:d8:a4:d8:5c:94:18:01:8c:0b:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:03:C0:B3:98:0B:E6:AC:A5:90:9C:BF:83:D3:38:45:07:B9:AA:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b295691e-69d4-4f63-8aeb-d23d6eea96d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4830::/47

    Signature Algorithm: sha256WithRSAEncryption
         1f:72:c1:3e:07:cc:f5:51:c1:45:34:db:80:dd:c7:72:c8:11:
         8f:31:15:f0:97:8f:19:48:d4:48:b5:9c:23:7a:18:b8:44:cc:
         74:53:8f:ae:13:b4:2d:fc:68:b3:e0:ef:0e:1c:3f:4f:12:a9:
         e4:4a:de:65:8e:62:1e:2d:08:90:6a:20:67:63:66:ef:70:b1:
         ab:f7:53:f6:25:5b:7b:30:15:4b:a5:a8:c7:3a:46:ee:65:a8:
         d1:7c:7d:1f:a0:e8:44:e4:f3:19:cf:23:a4:23:ba:df:7d:56:
         8e:8b:25:6f:70:0d:20:6e:c3:9a:af:31:92:8b:58:c0:87:36:
         ab:fe:51:2e:ef:36:13:4a:95:5f:09:e6:78:95:d1:b2:74:4b:
         96:8b:a2:61:9c:73:6b:d0:77:b1:38:00:18:2e:45:f4:2d:db:
         67:17:be:14:82:fe:53:d1:2c:ff:9c:26:5a:3e:07:99:4d:5f:
         2b:22:c8:ee:7e:4a:14:2b:25:6d:9d:e8:b4:e4:4d:51:24:58:
         e8:37:d2:33:b5:d9:25:dd:ac:41:ae:3b:a5:cb:d8:f0:75:0f:
         46:2d:db:1c:ca:1d:64:c4:af:9f:b6:67:c8:44:08:e5:5c:bc:
         61:6f:c5:9c:00:8f:d1:4e:28:b0:0b:5e:82:bf:d6:52:3e:00:
         51:e9:41:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:56:37 2024 by rpki-client on console-fra.rpki-client.org