Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cac4ceed-294f-45da-bf58-f8ad6cf91e93.roa
File:                     cac4ceed-294f-45da-bf58-f8ad6cf91e93.roa (raw, json)
Hash identifier:          XuSmdonkdahkXPYkF+qN/RMud7wcZgv7Yb5S6Yb7SYE=
Subject key identifier:   16:9F:E6:83:85:D8:61:27:28:2A:26:73:A3:FF:B9:6F:D3:26:A4:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       336CE01AF80D77C733505B34DB98C969EC8010A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cac4ceed-294f-45da-bf58-f8ad6cf91e93.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        5.60.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6c:e0:1a:f8:0d:77:c7:33:50:5b:34:db:98:c9:69:ec:80:10:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=08ec6c40c63f4859420e4576eda71413a97f2abff10c7422c8b6f82e04222601, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e8:a0:fd:95:47:52:96:c0:48:18:b1:2c:ef:
                    d7:a5:39:73:e4:0a:84:bb:b6:b4:00:e7:ca:3d:7d:
                    f9:dc:a3:f3:4f:02:3b:7d:08:eb:11:9b:09:79:18:
                    82:bf:fe:6b:66:42:47:c5:64:fc:93:ca:23:79:14:
                    b3:49:35:70:23:14:98:bb:83:34:61:40:b6:95:e5:
                    12:20:1c:bd:74:47:7c:67:0c:ab:ba:8b:7a:f4:8a:
                    dd:71:f6:2a:17:71:4f:38:5e:e5:80:2a:e6:fd:06:
                    2f:4f:12:1c:78:ef:4d:68:c3:ad:3f:21:4d:ea:07:
                    5c:8a:36:39:c0:2f:20:a4:64:48:25:08:c8:83:08:
                    51:23:86:47:cc:64:e9:02:70:04:be:56:b2:00:dc:
                    0f:fc:79:75:09:c6:aa:1b:d5:1e:ec:35:28:db:7a:
                    5d:57:91:03:10:4b:5f:2e:be:91:b0:45:0f:6b:f5:
                    f6:28:38:31:f8:a6:b7:70:5f:83:a4:78:18:cb:ea:
                    4f:11:61:43:c4:92:99:5b:fc:b2:22:c9:4a:47:29:
                    e0:0c:72:ec:e1:ba:73:14:be:4d:c8:95:f2:56:6a:
                    38:ca:9f:b6:1d:8a:57:61:f6:9f:7c:47:d7:41:bb:
                    a9:29:44:2a:18:da:36:22:7b:25:a8:85:74:58:43:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9F:E6:83:85:D8:61:27:28:2A:26:73:A3:FF:B9:6F:D3:26:A4:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cac4ceed-294f-45da-bf58-f8ad6cf91e93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.60.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:a5:a3:25:99:9f:b7:0e:17:59:72:27:90:46:3b:e8:64:bc:
         d5:c0:cd:c5:92:7c:65:a3:5c:c3:31:ec:4d:ec:f5:b8:24:17:
         da:82:28:ab:ef:47:56:e6:fb:d7:64:ce:0f:1f:90:37:1c:db:
         83:7f:de:bc:8f:65:ec:7f:34:84:b0:9f:01:f9:06:bf:b8:64:
         2d:46:56:41:ed:cd:94:02:2f:ee:00:40:b9:85:bf:21:c0:f1:
         3b:67:81:c0:86:77:79:f5:b5:ec:74:bd:21:1d:d4:96:63:f6:
         6c:23:39:03:6d:40:6e:c7:24:7a:6f:0d:9b:4e:c5:29:16:ea:
         ad:2d:03:67:f8:e0:bf:38:a3:33:7f:89:3f:d2:23:9c:91:4b:
         24:ac:c7:34:d2:db:c1:b3:ce:18:53:b6:0e:96:b3:6f:19:20:
         65:15:a0:b1:d1:d2:73:1a:82:0e:70:81:5d:00:8f:d7:dd:99:
         89:54:dc:5e:c5:76:b5:6a:be:16:dc:d7:48:cb:4f:54:5f:6e:
         33:5b:88:02:62:9f:ae:6d:ac:8f:25:9c:40:a1:2b:fa:4c:8d:
         2b:ac:72:61:f4:67:29:7f:ab:8f:1d:3d:f7:d4:b4:4b:45:2f:
         de:42:81:e6:36:20:f7:58:a3:ad:d2:fa:1c:60:ec:b9:79:e0:
         60:1b:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:30 2024 by rpki-client on console-fra.rpki-client.org