Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdad848a-c713-4f1e-bdfd-706b2de4409f.roa
File:                     cdad848a-c713-4f1e-bdfd-706b2de4409f.roa (raw, json)
Hash identifier:          yrLwYF2pKV3sLSsamevLeyH90Jq+b8yQ6Gt0uy6RTWU=
Subject key identifier:   EB:FC:B3:63:40:03:AE:F2:62:A6:E8:AB:B3:9F:A4:3F:2F:68:CA:5F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F6459A3B43D8485A01C6E54A8E2CEF2BBFE679A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdad848a-c713-4f1e-bdfd-706b2de4409f.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        75.3.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:64:59:a3:b4:3d:84:85:a0:1c:6e:54:a8:e2:ce:f2:bb:fe:67:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=3d29139e26fcc88082efc7486b18a326264fc0ff024157a98a00ddfca96f9fd4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1a:36:39:1a:5e:5d:b1:21:93:7b:f6:9a:4f:
                    44:5b:90:01:c1:a9:f8:35:77:4e:aa:ca:c6:29:40:
                    49:c2:49:31:de:ac:ee:24:1e:9f:58:11:f4:00:a6:
                    fc:36:cf:16:10:20:d8:60:3b:a9:a8:09:aa:12:f6:
                    e1:1a:91:37:c1:36:77:4c:bb:06:05:37:a0:6d:9b:
                    e1:b3:cd:97:b8:c4:91:a2:eb:bd:e4:08:7e:dd:8d:
                    a1:84:17:87:eb:52:ea:80:d1:33:40:1f:62:64:67:
                    15:bc:22:11:91:e0:45:8a:0a:f2:9d:da:08:e1:d8:
                    39:81:30:6b:c0:aa:25:00:6a:55:9e:c1:38:36:7a:
                    45:87:9e:18:1d:da:24:bb:f0:29:63:ab:5b:6e:a9:
                    7e:28:3e:e0:5e:49:30:67:9c:af:cf:87:37:0e:a3:
                    ee:dc:95:13:04:17:1a:4b:07:ab:b9:40:a2:8f:42:
                    e2:4c:22:f0:d8:75:e9:76:24:96:e0:6d:11:0d:a1:
                    f5:f8:88:75:34:cd:aa:fe:17:44:7a:68:ec:8e:64:
                    a4:bd:ed:82:fb:b8:82:77:04:64:db:1b:0e:83:ea:
                    43:08:6c:44:b1:3e:7b:2b:fd:e1:53:4f:12:eb:a3:
                    68:0f:50:47:ec:4a:fc:19:71:86:2f:0b:62:cf:8a:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FC:B3:63:40:03:AE:F2:62:A6:E8:AB:B3:9F:A4:3F:2F:68:CA:5F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdad848a-c713-4f1e-bdfd-706b2de4409f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         24:8a:c3:58:52:8a:69:0f:b2:89:17:76:3e:2d:47:f2:2d:b1:
         0a:b1:f4:fb:5e:e6:6b:a2:51:d8:0c:36:98:33:af:82:c5:f5:
         c2:2d:e5:69:cb:9a:0b:85:9f:41:0b:86:e9:02:6a:bb:e5:60:
         3d:43:dc:b7:2a:11:74:c9:6d:81:0a:b4:ee:1c:a6:7b:65:de:
         62:7c:93:d6:59:06:64:22:bd:18:1f:31:2d:48:be:e6:b6:f6:
         d9:8e:c2:37:5d:3f:3e:c7:1c:7e:42:64:30:ba:d3:d2:eb:3b:
         76:e2:f3:cc:65:35:cf:db:5b:a6:1a:03:9c:8d:0d:f6:b4:da:
         35:9a:e2:80:79:78:38:97:5e:c4:4f:cb:39:36:55:d5:40:8f:
         ee:d1:85:86:2d:24:bf:1c:bc:40:e6:01:da:17:3d:88:30:3d:
         37:cb:65:df:fc:75:b9:65:ab:35:a7:e3:5d:92:a3:b0:5f:c5:
         3b:43:00:97:e6:9e:41:54:a0:d7:7f:a3:13:09:9c:25:f7:77:
         69:b8:61:66:0b:74:b7:6d:99:75:ef:b2:d7:f5:57:14:64:7f:
         2f:7e:cf:2e:df:be:68:0d:c1:9c:11:97:e6:3e:c0:35:ae:19:
         cc:8f:4d:3f:7b:0c:6a:b9:93:d5:b1:41:a3:e2:d6:c0:44:db:
         51:d8:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:14 2024 by rpki-client on console-ams.rpki-client.org