Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc0e3b67-3302-4edb-9948-d00d30c28093.roa
File:                     bc0e3b67-3302-4edb-9948-d00d30c28093.roa (raw, json)
Hash identifier:          7PNEmOD6Xtl7lmOQITadtKkoDOIyqGXKFyl74OpOVQg=
Subject key identifier:   35:70:73:1B:E8:1C:34:97:FA:E0:58:1B:D8:CE:A5:C6:0B:40:2C:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14E556F1413E02293646BBAA2DC9360768C60F37
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc0e3b67-3302-4edb-9948-d00d30c28093.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        146.130.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e5:56:f1:41:3e:02:29:36:46:bb:aa:2d:c9:36:07:68:c6:0f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=ff3b403b944895e132f076bbd74b3de04390a5afa55d0c47f46e2ff5d949b2fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:2f:e6:41:cf:4c:c6:e3:84:88:02:1b:1a:
                    0e:77:5b:d7:ce:89:ee:55:a1:91:ee:b4:f7:57:e5:
                    19:3b:2b:e9:70:a7:99:f5:93:cd:4d:f7:b5:3d:73:
                    2c:fd:40:4a:d0:cb:58:36:0c:e4:00:9d:ab:ee:a4:
                    00:6e:26:b4:ad:f2:13:54:77:ac:6d:c1:04:a4:a7:
                    ea:1d:11:8b:ba:77:31:02:48:ff:ed:55:0d:e5:10:
                    01:ad:78:cc:c3:5f:d0:32:2e:d9:2c:e4:0c:11:30:
                    17:89:c2:48:26:f0:6c:9f:cf:f5:4d:bc:4d:20:c9:
                    15:f9:04:c8:08:4f:b3:eb:5f:c7:b4:66:be:be:09:
                    5b:0a:e1:ad:38:86:56:dc:4c:b8:b8:cc:e5:e3:47:
                    49:70:45:25:0e:80:d1:af:43:6a:52:ce:12:39:2a:
                    49:75:b6:d0:b9:d5:5a:94:a5:c4:b7:2b:fc:d8:09:
                    34:52:46:83:2f:aa:70:0b:bf:18:2d:39:9c:ab:0d:
                    a2:c1:28:c5:06:aa:20:6e:94:1d:e8:f4:92:37:fe:
                    99:b2:bb:ab:06:c9:79:af:4d:03:7c:14:ad:d7:a0:
                    09:3b:fd:71:ff:6e:a0:a1:fa:c7:8f:7a:f6:3e:2e:
                    a0:45:b8:f2:5c:f6:5b:41:c0:9c:8d:82:3c:72:7f:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:70:73:1B:E8:1C:34:97:FA:E0:58:1B:D8:CE:A5:C6:0B:40:2C:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc0e3b67-3302-4edb-9948-d00d30c28093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:c2:2e:85:39:03:1e:c5:85:64:7c:db:d6:52:a7:67:59:
         2b:a6:87:43:2e:e9:f7:a4:bf:0c:d2:d4:da:f3:61:af:dc:e0:
         49:43:55:00:45:ea:69:0e:43:27:c7:58:6f:13:a9:07:14:eb:
         a9:66:03:ec:82:1a:a7:b6:c1:22:d8:93:88:1c:1f:2f:08:17:
         b1:0b:10:3e:f6:f3:6f:e2:93:10:ea:71:e6:f1:4e:53:d7:4f:
         49:2b:1e:08:97:e5:23:9b:fc:a6:3f:d0:af:b2:ee:90:6e:9c:
         6a:88:7e:c9:f7:b4:c4:e0:6a:2a:4b:d1:f6:26:bd:4d:32:c4:
         5b:5a:ae:e2:c7:c2:64:99:3d:7e:29:a2:86:3b:58:d9:03:87:
         95:2e:22:ba:9f:b4:e4:aa:db:d3:c3:28:52:34:32:c6:5f:e7:
         2f:64:7d:06:a8:4a:8b:c0:74:18:a0:5b:4d:f9:98:9e:5d:e6:
         52:f3:7a:2a:c6:bb:57:a8:60:16:e8:05:f4:ba:72:78:a4:c7:
         d5:1e:7a:73:5f:bc:26:e9:ee:92:df:f5:53:f1:6b:63:fe:94:
         c7:db:b9:1b:e3:bd:60:67:a4:c7:ff:e2:69:e2:d9:72:b9:cf:
         bf:bf:35:be:db:1d:6a:52:4b:90:c7:1a:f3:f4:16:9a:30:e0:
         7b:d6:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:08 2024 by rpki-client on console-ams.rpki-client.org