Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa
File:                     c53a0576-1e08-4fba-a734-2cef153c43cb.roa (raw, json)
Hash identifier:          rcJGVKQs3FiAxKKAJRWaMc2RJU4tfOdi4RKBakKFn6Q=
Subject key identifier:   09:DF:B8:20:B7:7C:33:E3:D7:81:B5:4E:DD:4A:53:D7:74:A9:25:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       672D89F03061B59023C160797114847547EB8498
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        206.133.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2d:89:f0:30:61:b5:90:23:c1:60:79:71:14:84:75:47:eb:84:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=c67e47eab1b75b1d1b943f73d034e02e7692a6240a7782b8c72307c62def5326, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:c9:56:81:56:b6:36:90:89:90:1b:b0:4d:
                    62:8c:e5:ca:a1:8e:29:3e:f3:72:0b:91:27:43:17:
                    d6:01:f6:82:86:6c:af:e5:88:89:d8:2e:15:1d:60:
                    35:a2:09:85:d8:cb:d1:0f:e0:7f:7c:b7:bb:10:4b:
                    7c:16:cb:27:b2:e0:f6:91:e1:10:91:8d:2a:90:b8:
                    f1:d8:75:73:fe:91:1a:99:81:c9:8b:30:89:97:62:
                    24:d2:d4:48:1d:be:78:d0:bb:ad:f9:bf:ef:71:b4:
                    19:4b:e0:d3:9c:b2:fb:7a:96:7d:4e:4f:b7:10:8f:
                    d7:8f:4c:c8:c7:0d:bb:12:96:db:a0:51:99:e7:bb:
                    20:f3:73:4a:30:21:68:2d:57:c4:d7:33:b9:8c:0b:
                    51:90:4b:0a:b7:e8:bd:50:5f:c1:6a:2c:a8:a1:28:
                    fc:2e:47:1e:9f:ae:86:a6:75:87:96:44:5d:f6:5c:
                    af:fe:59:15:6b:47:6b:2c:24:db:9a:20:f5:57:86:
                    72:72:e8:e1:f5:37:39:ff:dc:f6:60:ba:5d:71:0d:
                    fd:13:69:ed:19:f0:a6:3f:79:9e:0a:e5:a1:b0:43:
                    c4:ea:e1:7e:bf:e3:cf:fc:ae:a2:9c:f6:f7:59:52:
                    ac:29:94:0b:d4:3b:84:43:9a:e5:40:11:1c:2a:42:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:B8:20:B7:7C:33:E3:D7:81:B5:4E:DD:4A:53:D7:74:A9:25:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:dd:99:02:f4:68:de:bd:e0:d7:f1:fd:03:1f:5c:70:ad:6e:
         56:f2:16:03:e6:fa:ca:ab:9b:8c:94:15:d4:a3:a1:82:40:3a:
         2a:57:85:0e:b3:f5:d5:be:05:f9:10:e9:19:33:26:98:5c:6e:
         cb:fe:ad:0d:f9:0f:ed:47:9f:f8:9d:c4:98:7c:d4:50:49:40:
         5e:50:d0:58:77:79:32:b3:35:9c:39:0b:40:88:59:ff:0e:ba:
         e0:7e:e0:ed:a5:23:6d:66:a1:9e:74:5a:cb:7c:a1:73:ea:90:
         56:1a:e4:78:17:9d:06:7f:9b:f3:ff:55:65:3c:65:73:89:77:
         ff:6b:12:da:b3:99:6e:03:e1:5c:b0:40:66:8e:9f:47:b8:4d:
         ed:24:e5:bd:6b:dd:b8:da:a3:70:c4:2a:39:fd:ab:86:06:c8:
         e0:16:68:b9:42:c2:4d:43:89:b5:0a:55:a8:9c:6d:34:1b:20:
         08:09:ba:f8:01:bd:aa:3e:07:d5:e5:10:ab:d2:d2:81:dc:b0:
         58:15:36:2b:cc:32:49:88:89:a0:73:ee:06:8d:03:7e:42:d2:
         d8:61:db:53:de:59:69:6b:53:dd:81:e3:cc:9d:f7:79:22:45:
         12:b2:1c:2f:16:42:a0:1e:1c:4b:7a:1d:e5:f6:8f:18:b2:3e:
         24:d8:43:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:29 2024 by rpki-client on console-ams.rpki-client.org