Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce1fb8ae-b11f-4d53-9264-87bf8f24c78a.roa
File:                     ce1fb8ae-b11f-4d53-9264-87bf8f24c78a.roa (raw, json)
Hash identifier:          BkbKhw7dBi+TNU4/2lkYT7l9gDkt6ziK2ksm7jKLQEY=
Subject key identifier:   24:33:0B:29:70:73:8F:FE:23:FA:0C:3E:44:33:67:53:3B:92:A4:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A4138534FAE0BCA0D6098BE77C55DC6C28179B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce1fb8ae-b11f-4d53-9264-87bf8f24c78a.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        67.202.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:41:38:53:4f:ae:0b:ca:0d:60:98:be:77:c5:5d:c6:c2:81:79:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=522728144dd1d4834652dc23be02cad65af82ed62ffd6d16b417cda61614bf00, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:77:9f:43:7d:b2:15:2d:94:da:e7:17:a4:
                    84:a6:d2:02:fb:45:28:2c:54:38:60:00:33:42:fb:
                    a7:be:96:09:a8:44:1c:44:c3:3f:2b:ae:e4:ca:61:
                    68:60:a4:7b:69:d5:23:36:65:93:c8:1a:f6:36:84:
                    88:12:6e:d7:a7:65:e9:9a:8e:d5:ac:8b:22:cd:cc:
                    00:06:78:7f:ba:66:ca:c0:25:02:25:f4:93:1f:34:
                    58:c8:0b:1e:27:25:c6:ba:08:ad:9e:d0:13:45:7d:
                    c9:b0:e9:54:e3:c0:7b:e0:a4:35:8b:d0:99:df:65:
                    a9:a6:33:73:5e:0b:df:0c:90:9a:55:31:f1:04:14:
                    f8:76:37:4e:05:4c:0b:7a:06:53:c8:b9:4c:97:4f:
                    31:5b:4d:00:45:5a:9e:f0:73:1b:06:18:6f:6e:55:
                    0c:d0:56:cd:1a:b5:15:35:7a:1e:d5:ad:3d:1b:1b:
                    c7:76:42:73:16:d5:22:31:ae:7b:3d:27:8a:41:62:
                    d1:76:35:a6:7b:0d:57:85:65:0b:a0:84:29:fb:d3:
                    91:d4:98:ee:51:06:9d:95:02:da:4c:5a:f4:23:f8:
                    ed:3a:82:71:08:07:d7:0f:69:58:50:3c:7f:91:f9:
                    a7:af:89:40:77:37:48:f9:79:12:13:3d:f5:18:b1:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:33:0B:29:70:73:8F:FE:23:FA:0C:3E:44:33:67:53:3B:92:A4:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce1fb8ae-b11f-4d53-9264-87bf8f24c78a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         83:69:01:b6:b3:5f:35:ad:4c:84:ec:42:f9:b0:0f:1b:0a:1b:
         07:df:a4:9e:30:24:82:f6:f9:e8:fb:0f:7e:97:f3:19:76:b3:
         d7:d5:0a:b8:e1:68:bb:d3:62:69:56:ae:09:6c:4a:88:6c:9e:
         0d:15:3c:02:96:aa:ea:6d:f5:5a:90:c9:fb:7d:91:3c:bd:30:
         f9:08:2f:31:8b:27:b7:d7:8b:59:95:67:82:aa:54:f4:2f:77:
         fa:cd:b2:0e:45:75:60:62:e6:b0:03:a1:e1:8b:a8:8d:5d:f5:
         e4:0e:51:64:6d:64:fa:7e:78:31:03:fa:ac:b9:9a:ca:85:17:
         71:f3:d2:e0:b9:f0:61:1d:7e:5f:53:92:5d:66:f4:9e:12:94:
         3d:6c:09:e3:95:23:2b:fe:f3:67:7b:fe:7a:2e:5c:1c:4d:7e:
         64:89:b3:f6:cb:a0:99:54:bc:59:c3:ce:d1:77:1c:08:b5:2d:
         88:fb:09:dd:1d:5d:b1:3f:be:74:b0:bb:59:5e:fe:eb:2e:9d:
         dc:4c:17:9f:33:77:c1:40:e9:78:5b:42:33:19:bd:04:0a:30:
         39:da:9a:d6:3e:07:85:1a:48:2c:a8:5d:89:aa:f2:2e:d5:3b:
         75:1a:cf:f7:c4:eb:e4:fe:e4:8d:21:29:00:8c:68:76:16:f5:
         4e:46:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:14 2024 by rpki-client on console-ams.rpki-client.org