Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b67d1fcd-ccc2-44b2-8510-6ee8d7e07db7.roa
File:                     b67d1fcd-ccc2-44b2-8510-6ee8d7e07db7.roa (raw, json)
Hash identifier:          YJUfQ+UZlyXT7LcFT73hFpnCd22W1TxhruM16gRR3p4=
Subject key identifier:   B3:BE:69:8C:BE:17:1E:1E:DE:EB:10:41:24:C2:1D:AE:78:2F:64:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5082AF5C646FBFFE0C5852A998D50B162C6E15E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b67d1fcd-ccc2-44b2-8510-6ee8d7e07db7.roa
Signing time:             Tue 19 Mar 2024 00:00:00 +0000
ROA not before:           Tue 19 Mar 2024 00:00:00 +0000
ROA not after:            Tue 23 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        162.213.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:82:af:5c:64:6f:bf:fe:0c:58:52:a9:98:d5:0b:16:2c:6e:15:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 19 00:00:00 2024 GMT
            Not After : Apr 23 23:59:59 2024 GMT
        Subject: serialNumber=0f351d036ef32e5d9ea10c024d8c0638c27d234274411371268bf0ac65bcac6e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:bb:c9:05:d6:a9:ac:51:f2:4e:fc:0f:25:
                    90:0a:6f:2d:e9:bd:f7:ed:1c:51:bf:9e:6f:a8:f0:
                    60:32:58:69:77:24:39:52:70:06:92:77:5f:da:61:
                    8c:2a:2f:df:e0:6c:7c:f5:89:17:2d:68:6d:bc:05:
                    f1:66:5a:7f:6f:76:81:5b:98:68:46:7e:4f:6f:4c:
                    88:33:a0:15:1f:73:3f:33:87:55:25:f3:3c:c8:b3:
                    d5:f4:c4:f0:4f:5b:0c:a0:3a:ba:60:a5:b2:b7:56:
                    24:66:f3:c0:52:e5:3c:68:85:5b:8f:c9:92:3c:87:
                    e5:57:70:36:8e:bb:2a:a7:c4:65:48:ab:65:bf:b2:
                    36:b7:46:51:c1:1d:83:be:f8:5b:b0:c3:c9:9b:08:
                    c0:25:a5:43:95:37:3a:73:6b:94:aa:6f:c5:c4:99:
                    1d:ff:d7:8a:b7:23:90:17:4c:db:4f:1c:8c:5d:d7:
                    8a:38:30:67:fd:34:58:ae:5d:4c:44:30:e0:91:9c:
                    eb:57:e0:79:f3:55:81:77:69:95:09:f6:2e:4d:5e:
                    dc:ed:b6:ea:2c:32:9c:c8:cb:ca:aa:12:e9:95:fe:
                    01:78:68:ad:38:53:ad:b2:cb:95:b3:59:8c:65:f1:
                    69:d9:d7:82:b6:0f:1e:f3:82:f4:17:ce:1c:5d:d3:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BE:69:8C:BE:17:1E:1E:DE:EB:10:41:24:C2:1D:AE:78:2F:64:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b67d1fcd-ccc2-44b2-8510-6ee8d7e07db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:ec:74:86:c6:bb:f4:76:b7:37:b2:c3:f9:f9:3c:8a:06:
         a6:12:2e:09:64:00:bc:64:47:81:f1:8a:ce:55:e8:33:47:ee:
         6e:da:5a:da:70:2d:5a:2b:ce:07:54:f0:f7:1a:41:7a:8d:ce:
         5c:c8:bc:95:d0:9c:99:61:4d:23:96:70:08:49:63:2f:61:af:
         a3:f6:83:8f:e1:6d:68:0c:a5:af:cb:ee:94:81:4a:f8:4b:0b:
         eb:7a:38:72:e7:a6:a9:f9:27:b3:7b:fe:fe:d0:00:63:c5:76:
         ad:67:85:3e:46:a6:fb:4c:e7:03:98:95:cf:de:fe:b2:45:65:
         2c:77:47:8d:61:cc:51:e4:23:cb:c4:67:01:c9:b3:58:f8:ee:
         0f:f5:30:c5:f5:42:1c:ea:94:cd:6e:2c:f3:d8:5f:4c:fe:35:
         73:c4:fb:81:2d:34:46:a0:bf:f0:5f:21:52:b5:b8:f9:8f:4f:
         b5:ee:4d:75:a6:69:f9:14:23:21:ba:18:d2:ee:c2:2e:44:79:
         35:30:72:54:10:7b:93:2f:b3:c4:f4:cd:28:5e:24:07:2c:c6:
         69:50:06:7a:5e:fd:a1:29:1b:31:2e:1e:fc:b5:83:7d:f5:b6:
         b0:db:f2:79:1d:f3:db:77:bb:fe:8b:fd:35:0b:31:01:ef:06:
         80:51:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:05:44 2024 by rpki-client on console-ams.rpki-client.org