Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c157daeb-02b3-4c76-8856-8cd67b712856.roa
File:                     c157daeb-02b3-4c76-8856-8cd67b712856.roa (raw, json)
Hash identifier:          DHe9bErHxSL/8CN13R+YUFGrEWpIsmg6okhYuGeKGCY=
Subject key identifier:   9F:63:06:F4:BC:84:33:57:8B:79:37:D5:38:23:70:82:17:CA:F8:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       363EA16262338D3FAAEEF9CC5BA91D84FA87758A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c157daeb-02b3-4c76-8856-8cd67b712856.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        57.75.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3e:a1:62:62:33:8d:3f:aa:ee:f9:cc:5b:a9:1d:84:fa:87:75:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=6618cda198c2beb5f9a10c53dc22fc20aba775bff0ea1c5a8834a5bb14b9ff66, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:33:6f:21:3d:2a:3b:b6:06:17:40:40:19:4d:
                    7f:43:4e:15:fa:89:56:53:56:74:cc:6a:cf:07:f0:
                    33:1b:ff:66:03:b0:16:1b:35:a2:0b:90:ee:3c:48:
                    a5:17:ab:5e:12:ab:5a:96:77:9f:ec:08:a1:cc:ef:
                    60:aa:0d:f0:69:98:6c:dd:6a:a3:2a:5e:84:c8:f1:
                    29:26:ea:05:5d:7b:95:3a:d8:22:9c:43:fc:2e:8d:
                    ef:20:f0:b0:6b:db:d8:b2:48:48:39:c4:81:2a:ff:
                    51:59:36:bb:11:76:e1:99:75:85:43:fa:aa:da:51:
                    2c:aa:55:05:5f:cf:10:21:9b:7c:84:fc:e3:8b:67:
                    89:fd:cb:7e:e8:ed:e0:bb:e7:ff:eb:4d:e9:a4:df:
                    0d:9c:f2:2f:04:67:0c:8e:e4:97:50:fb:69:70:8f:
                    c2:5f:31:df:9a:aa:cd:4a:94:8f:9b:8a:2b:71:46:
                    b2:5f:00:44:2f:df:7a:67:61:73:cb:f4:59:63:c9:
                    99:a3:ed:d5:e0:39:b9:71:66:78:5d:2b:fc:8c:15:
                    4d:e0:de:e4:24:17:15:44:f5:e9:0a:67:b4:bd:56:
                    e6:ea:b1:92:b0:ae:d3:82:c0:d9:d3:64:48:94:a3:
                    62:a9:05:2b:48:29:b3:97:47:7a:fc:69:97:6e:58:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:63:06:F4:BC:84:33:57:8B:79:37:D5:38:23:70:82:17:CA:F8:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c157daeb-02b3-4c76-8856-8cd67b712856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:3e:99:85:47:f0:b1:3a:7e:df:40:b9:72:f2:a6:eb:f6:c9:
         e2:62:e1:69:ae:8b:8f:bd:e6:21:56:79:6b:69:65:e7:be:8b:
         1b:77:93:7d:7c:32:59:f9:db:ea:97:e6:ae:58:67:f5:09:59:
         5e:f5:6c:07:3e:d2:40:5d:de:76:b6:fd:d4:0d:28:d1:bd:33:
         6f:58:b8:43:9f:16:5b:cc:0e:2d:71:62:fc:7a:fb:a6:55:76:
         37:48:cd:99:e3:6e:8a:21:4e:6c:e3:6b:09:a2:4b:a1:df:cc:
         62:33:f9:83:5b:db:14:cd:70:bc:39:61:84:c2:04:62:b4:84:
         66:96:54:3d:e3:80:2e:3d:0b:06:6a:01:02:41:aa:86:99:4b:
         b5:45:7d:67:d0:2c:a1:fa:99:fe:85:d8:65:e4:25:66:c2:c3:
         68:75:9c:14:16:eb:15:26:bb:2d:65:45:0a:60:9c:7b:7c:76:
         17:42:85:97:ba:06:f4:4d:68:4f:19:14:f7:6c:24:d9:e8:d2:
         2f:22:94:d5:8b:40:a3:e2:29:e3:3b:12:15:5e:9a:22:21:8e:
         e2:ff:19:60:46:ac:1c:40:52:3a:85:7a:d7:8a:a0:a0:b0:bb:
         a8:22:42:c5:78:2e:4d:2b:20:48:c1:3e:b2:8e:25:fa:4d:99:
         0d:34:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:28:09 2024 by rpki-client on console-ams.rpki-client.org