Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2cbf48f-091c-4637-b88f-49c63017d8c8.roa
File:                     c2cbf48f-091c-4637-b88f-49c63017d8c8.roa (raw, json)
Hash identifier:          nctN8MUJzrr5k6GhK1z3T+eLa+huQzHLKfx8FmDwZzk=
Subject key identifier:   9E:69:FA:F8:96:2C:5F:15:81:C1:20:10:4F:5B:03:7A:68:E9:03:60
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C6559D1E12837D830FA95A820A7E83FFF9FC115
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2cbf48f-091c-4637-b88f-49c63017d8c8.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.12.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:65:59:d1:e1:28:37:d8:30:fa:95:a8:20:a7:e8:3f:ff:9f:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=dbe1b1f565673aa08f1778ac1125dbd4717adc9090a2aa62c77f6bc1221d09e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:30:a0:cd:94:97:12:46:c0:b4:4f:82:64:
                    79:77:15:a4:95:e6:e8:cd:af:f8:f5:ce:89:c2:b3:
                    f1:a3:15:90:71:24:02:3a:a1:55:34:05:dc:75:8b:
                    67:58:4f:f4:35:3d:03:bc:25:94:e3:73:a5:ca:4b:
                    22:7d:91:7c:c9:6c:43:00:51:ab:a0:7d:9a:c3:4e:
                    98:df:2b:e3:e1:80:9a:83:88:18:86:97:fa:68:07:
                    75:91:b0:bb:b9:c6:95:c3:e5:86:27:0b:60:4c:6a:
                    4d:84:19:c4:d9:dd:f2:51:e3:f5:86:2b:f9:d0:01:
                    e6:4e:23:a4:c6:f4:f3:68:dd:32:fc:1d:ac:98:03:
                    c5:72:47:8f:d3:a8:a1:66:97:2d:de:e1:e8:47:9e:
                    96:d4:d9:f3:d4:f2:82:12:73:eb:e2:aa:6a:20:68:
                    6d:63:e7:a6:0d:6c:0d:c0:2e:39:5f:e5:02:00:23:
                    42:3a:43:0b:91:51:65:87:52:2e:35:8a:a2:ec:9e:
                    b7:f0:92:ca:c2:57:a7:89:1e:79:a5:05:6d:75:55:
                    d2:8c:b8:9a:3d:62:10:fe:6f:dc:a5:19:9e:ee:1c:
                    61:2e:51:b2:5f:34:01:d3:e8:85:02:fc:49:54:2c:
                    a3:1b:9d:36:6c:73:55:5d:43:73:3c:6b:48:5d:24:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:69:FA:F8:96:2C:5F:15:81:C1:20:10:4F:5B:03:7A:68:E9:03:60
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2cbf48f-091c-4637-b88f-49c63017d8c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.12.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:10:9c:4c:ba:ff:c0:d0:a6:5c:63:51:97:0b:65:0c:c4:
         9f:05:3d:bc:31:b1:d6:14:e0:09:20:5d:32:c1:74:71:37:c3:
         c1:02:ca:b7:e7:5a:c7:a7:54:45:d3:43:b7:ba:eb:3e:51:9b:
         84:6f:67:bd:24:8a:10:46:9a:aa:ce:6f:5e:91:b1:61:fc:e7:
         99:8d:47:1a:4d:b5:28:28:fe:11:22:cd:5d:87:57:79:b8:5f:
         eb:46:2e:ec:af:c8:63:40:b1:73:09:b7:c0:1b:42:35:9c:bc:
         9f:ee:94:3e:a9:02:e8:b4:eb:05:9d:33:09:dd:36:41:80:a0:
         bd:13:20:37:43:9c:ad:5b:c5:65:43:10:c9:cf:05:8a:81:84:
         5d:66:4a:6c:1f:bb:f6:80:f1:fd:10:60:76:38:34:ce:05:00:
         0e:c1:46:c6:4a:9b:33:16:90:dd:80:7b:7f:52:af:7e:47:f3:
         d1:b6:c5:02:da:b9:34:fa:7d:60:b3:cf:e4:b6:59:a5:2a:fb:
         51:9e:6e:7f:23:c5:73:da:ea:74:a9:82:72:63:8d:bc:69:f9:
         53:b7:eb:6f:43:5a:39:2a:52:65:e9:48:a2:13:61:01:f1:fb:
         24:8a:44:d2:6f:d7:54:89:02:fe:83:af:6d:52:7a:cf:47:a9:
         54:07:ce:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:51:15 2024 by rpki-client on console-ams.rpki-client.org