Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd5e1c4c-6663-4e6f-8aad-07b76a2a6802.roa
File:                     cd5e1c4c-6663-4e6f-8aad-07b76a2a6802.roa (raw, json)
Hash identifier:          1/qsef6jcYrdX1WE+j0zMlJ0GAGN3zHRY/gxGLeslqY=
Subject key identifier:   8D:D0:FA:15:87:5A:1E:20:54:BA:CE:34:56:E4:20:EC:85:58:85:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2107986D69F8C1DFC2B1D4052AA034D23F17444F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd5e1c4c-6663-4e6f-8aad-07b76a2a6802.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        134.127.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:07:98:6d:69:f8:c1:df:c2:b1:d4:05:2a:a0:34:d2:3f:17:44:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=506c9b5c08e13acb0e36052c860918c489c1758e318653198b8362d0f16ead1d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:fe:93:a6:e4:80:4f:39:fc:ac:64:fb:43:
                    80:73:27:51:2f:7d:db:48:b1:81:76:41:3b:bc:5a:
                    f4:f3:90:52:18:e5:59:9f:bc:00:1c:0a:0b:6c:eb:
                    12:6c:ac:cf:5d:ec:20:12:74:60:c2:05:7d:90:68:
                    d5:11:93:7e:13:0d:26:a6:03:6f:2a:64:10:45:36:
                    64:bb:8d:c9:fd:35:9e:ae:17:7f:a9:7b:84:ab:30:
                    90:27:8b:c4:24:9b:ba:10:a1:03:94:69:f0:80:dc:
                    82:de:76:a0:04:a2:b5:6f:c7:fe:f8:c3:b8:08:b7:
                    24:2f:4c:82:b0:16:2c:49:cd:91:cc:93:1b:96:ac:
                    83:ec:43:ac:e9:59:90:ac:4c:06:ef:ef:60:00:ca:
                    04:1d:50:77:d8:2b:54:2c:15:23:39:9a:99:e2:46:
                    8a:69:fa:f5:2f:ea:b1:9d:70:90:62:ee:d0:03:46:
                    a4:1a:70:66:b8:08:87:28:f5:18:f5:45:6e:52:fc:
                    13:ad:67:a6:01:74:02:ca:96:68:24:12:b1:ab:43:
                    01:53:d0:ac:1c:f0:ff:6d:8d:fb:97:0e:f9:63:77:
                    99:2c:c0:13:e0:e6:19:dc:87:f9:9e:50:f1:bf:01:
                    9f:a1:36:30:e9:21:9a:81:4c:10:6c:d9:63:69:87:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:FA:15:87:5A:1E:20:54:BA:CE:34:56:E4:20:EC:85:58:85:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd5e1c4c-6663-4e6f-8aad-07b76a2a6802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.127.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:60:13:f5:fa:b5:04:ef:3c:74:db:b8:1c:47:87:dd:eb:c3:
         06:02:eb:b3:2c:22:51:15:36:2c:ea:11:1f:ad:14:72:4f:46:
         a4:85:4d:09:80:a0:11:c6:54:84:ce:35:6c:88:10:d6:69:42:
         e8:92:0d:49:cb:46:f3:d9:eb:28:d5:8a:f7:7e:44:9d:b5:47:
         e7:93:28:d6:3d:08:0b:67:ad:23:56:d5:f6:73:d4:af:b2:79:
         0e:51:36:e5:5c:44:a5:f7:4c:7d:96:57:91:54:cb:f1:a5:80:
         25:f9:2e:e5:93:c6:b6:bc:05:28:2b:0e:cb:12:5b:33:a4:14:
         24:b1:13:86:04:fa:e3:c0:2a:30:4f:1e:04:cb:51:7c:96:53:
         0d:dc:7f:42:10:e5:f8:a9:72:43:73:31:65:f1:55:93:8a:da:
         27:97:53:be:ee:8a:5a:63:15:9f:fc:87:02:45:ba:81:b5:83:
         9a:a0:e4:e9:6c:37:81:52:62:e0:54:f9:b3:e9:d6:fc:09:9e:
         8b:b2:8c:f2:e3:b1:c9:7b:4d:e2:46:f8:52:a3:a7:af:00:fc:
         d1:c6:43:70:b4:a0:02:92:97:bd:ec:9c:35:95:8c:a5:b4:3c:
         c7:36:10:b4:e9:c0:49:14:f0:b3:25:ee:0f:6a:4d:09:f4:40:
         30:2d:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:12:48 2024 by rpki-client on console-fra.rpki-client.org