Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5bc2704-8cf2-4573-9ad5-88a45c468aac.roa
File:                     c5bc2704-8cf2-4573-9ad5-88a45c468aac.roa (raw, json)
Hash identifier:          b6UM1YglywGOPbOfiAt2xAHormOJAmkFu5Iq5O9bpvI=
Subject key identifier:   1A:D6:EA:FA:99:CC:DF:38:DA:36:78:A3:EC:10:E3:A9:CA:D7:8B:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       150CEEA626518F17A2AEC5C28DB4DD6A2AF91CF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5bc2704-8cf2-4573-9ad5-88a45c468aac.roa
Signing time:             Sat 27 Apr 2024 00:00:00 +0000
ROA not before:           Sat 27 Apr 2024 00:00:00 +0000
ROA not after:            Sat 01 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        173.83.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0c:ee:a6:26:51:8f:17:a2:ae:c5:c2:8d:b4:dd:6a:2a:f9:1c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:00:00 2024 GMT
            Not After : Jun  1 23:59:59 2024 GMT
        Subject: serialNumber=14751c406c51523f0ecc8d2dd1a5f653afcff972364f2934135c748a1967381e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:96:bf:aa:d9:ae:f6:da:8c:74:52:b5:e3:
                    8f:d4:ed:b4:01:79:e1:26:b1:87:f1:60:b4:34:62:
                    21:8a:bc:13:a4:bf:d4:90:f9:33:c6:73:0d:a0:40:
                    c7:01:79:5e:3b:96:7f:2d:e5:aa:a7:14:f9:8f:31:
                    d6:f2:3e:7b:14:f1:01:c5:1a:6a:56:da:2e:db:f3:
                    03:a4:81:3a:ec:c6:d6:65:5d:ee:99:66:0c:46:5a:
                    6b:0b:da:f0:1c:76:d0:a6:e3:66:70:81:d8:9a:86:
                    79:0b:f7:2d:54:54:0d:ca:65:fb:d8:ec:59:11:f3:
                    a1:3f:6b:6e:92:ee:b7:02:89:c2:3d:f8:25:16:24:
                    90:0f:b0:2e:0e:43:5b:cc:d9:56:14:dd:92:29:fa:
                    07:2e:18:97:f3:fb:0a:ef:17:37:f2:80:f3:da:16:
                    8a:29:87:9a:d1:51:5f:ea:20:ea:35:a3:a7:74:0c:
                    11:34:b9:be:90:3d:7b:3a:93:78:5b:43:23:af:46:
                    22:d5:5d:08:7c:c4:16:78:57:42:41:db:e7:e3:f0:
                    59:38:2b:d9:db:b9:3e:a9:9a:3d:c9:e5:d8:60:96:
                    29:69:9f:b0:85:b1:49:15:66:3a:b9:3f:e8:ee:ba:
                    10:4d:d1:0d:c4:c4:48:63:89:0e:19:17:f5:ae:91:
                    60:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D6:EA:FA:99:CC:DF:38:DA:36:78:A3:EC:10:E3:A9:CA:D7:8B:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5bc2704-8cf2-4573-9ad5-88a45c468aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:d5:11:29:24:4e:fd:81:ca:c6:9e:60:e1:c1:4e:8a:de:71:
         70:66:d7:c0:b8:40:d3:0a:ad:da:16:d0:f5:1c:c6:fd:fa:c8:
         91:54:25:9b:f2:16:3a:4d:a7:2d:56:e7:a7:bd:c1:59:55:6d:
         d8:60:0a:ea:b2:f5:aa:00:64:37:e3:49:59:f6:96:4b:12:00:
         74:94:47:36:90:55:6f:02:43:8d:0c:f1:46:60:45:2a:8e:6d:
         d8:06:14:5f:02:dc:8f:bb:8f:6e:51:a7:18:c4:ed:0f:29:bd:
         10:05:ce:d6:89:b0:3f:69:46:d6:3e:35:15:e0:7a:5e:9d:d5:
         af:46:9c:18:1c:66:13:5e:7a:07:c9:2b:ec:0a:ed:c6:29:6a:
         25:81:3d:8e:ae:74:47:7e:b6:a4:ce:ca:5a:99:e4:0e:b7:f2:
         45:42:14:74:ce:cf:68:8f:19:d9:85:5f:02:28:e3:1e:c5:9e:
         7d:f6:d0:72:b4:3d:be:9f:07:e3:c5:50:e8:0b:42:70:78:af:
         c5:5c:99:a9:0a:16:85:c0:e3:a1:ca:c0:9d:7b:f8:25:5e:78:
         23:a9:f5:08:db:76:33:33:4c:c7:15:e4:54:1a:28:cb:93:8e:
         f9:1d:de:da:33:be:74:0b:e4:05:20:9f:5f:96:14:d9:7a:8f:
         b8:16:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:47:30 2024 by rpki-client on console-ams.rpki-client.org