Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6ab3625-8983-415d-b4cd-9df051f6a65c.roa
File:                     b6ab3625-8983-415d-b4cd-9df051f6a65c.roa (raw, json)
Hash identifier:          B8ZIFw61AGGaKD43OMRiGeF8cjvQdYeJi8nAUAzdpIU=
Subject key identifier:   BB:5F:92:B7:0B:20:1E:19:08:93:98:9B:DD:C9:6B:19:D5:53:C4:AD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68918B6B1EDE4051282A92A6A5C9F4A15343660E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6ab3625-8983-415d-b4cd-9df051f6a65c.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.109.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:91:8b:6b:1e:de:40:51:28:2a:92:a6:a5:c9:f4:a1:53:43:66:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=5ef7a15cbf1f17dd2a4b10503eb0acee770c171b46402566dd0975c3f85e375e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:c3:a7:23:86:eb:6c:08:dc:d5:0b:14:69:
                    96:42:50:ab:07:7b:43:f8:fa:0b:bc:71:8e:93:cf:
                    45:b5:eb:96:45:00:89:88:e8:20:17:2b:23:41:b4:
                    8a:00:02:3c:fb:f4:d9:da:aa:27:46:77:3d:9a:75:
                    cc:35:16:39:b6:6d:36:00:d6:29:69:00:32:c0:94:
                    98:93:36:d9:29:32:62:ab:77:c7:06:f3:b1:9a:dd:
                    f5:f4:90:54:22:6f:10:c2:44:9d:62:3e:0c:09:f1:
                    8b:89:bf:3a:6d:83:dc:55:1d:1f:82:aa:9c:3e:7d:
                    b0:5e:e9:1c:c3:e7:3f:68:cb:61:bc:54:a2:8f:56:
                    27:0e:e4:ec:9a:21:28:d9:be:ea:90:2c:f8:2c:49:
                    96:38:84:2b:9a:bf:5f:df:5f:bd:45:82:0b:df:ea:
                    a3:9f:91:ce:ab:c5:ec:c6:ed:aa:fa:db:00:0b:77:
                    e8:b8:cc:bd:0e:03:2d:42:be:a7:f5:7f:98:12:c0:
                    0c:03:0c:c8:2b:7e:90:56:d8:ef:7c:fa:2c:5c:e9:
                    51:6d:83:8c:39:2c:f8:4f:75:d0:0e:ca:6e:ed:57:
                    ba:e2:37:a4:b1:55:31:f5:52:26:57:60:76:ec:85:
                    6e:8d:b2:f3:c6:1d:75:65:55:c6:a9:1e:bc:06:57:
                    c6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5F:92:B7:0B:20:1E:19:08:93:98:9B:DD:C9:6B:19:D5:53:C4:AD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6ab3625-8983-415d-b4cd-9df051f6a65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:c4:d5:de:bb:9d:45:ad:56:e2:9c:c8:5d:ed:16:7d:09:a2:
         bb:e5:9c:e2:85:77:d7:20:1f:ca:0f:f0:1b:8a:d6:4d:63:85:
         5b:26:01:84:1d:27:c9:e8:6f:15:12:82:df:49:a9:7e:ce:ac:
         d8:4a:ca:e7:d4:4d:3f:b6:be:f9:99:3d:e9:20:8b:e1:6c:94:
         1c:38:5b:f4:4f:6b:25:91:40:15:fe:0a:6f:b0:6d:5e:6f:50:
         d3:e9:e6:b9:6d:80:f6:44:9d:16:33:cc:28:5e:36:eb:7b:d6:
         b7:4f:8b:d5:4c:dc:21:3d:53:d3:2f:8f:11:cd:9a:95:bb:e6:
         db:81:f2:16:02:e6:3d:f6:b9:d8:66:7c:b8:a7:ec:bd:cd:8c:
         03:d4:12:5f:47:b9:90:c2:20:ec:bf:c4:a5:93:39:6b:8e:b2:
         3b:77:2d:d3:70:c0:46:b7:d1:2f:90:6e:91:06:6d:8b:1a:7f:
         0e:2b:a1:09:c2:2a:85:ae:36:94:34:64:e4:d9:b1:3a:b6:e1:
         b1:b6:7a:32:5f:14:3f:8a:ac:5c:36:cd:15:59:61:14:40:e5:
         34:c1:31:51:be:90:df:6e:5c:26:90:62:ad:0d:af:86:00:4f:
         0f:2b:cd:1c:57:73:9d:93:0b:92:c0:07:9f:76:e3:ea:92:9c:
         9c:64:4a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:05:40 2024 by rpki-client on console-fra.rpki-client.org