Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0043467-91d9-4b55-9360-0bde422e9c36.roa
File:                     d0043467-91d9-4b55-9360-0bde422e9c36.roa (raw, json)
Hash identifier:          3Rw+l8lvrJ6gVDcwCtGAFuwQWIzgm6gyZrec+66Pulo=
Subject key identifier:   8B:CA:99:D3:64:ED:AA:47:67:56:6D:07:5F:EF:74:E8:07:94:58:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6BCBECB57B993498304FB89797D82B678E29546E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0043467-91d9-4b55-9360-0bde422e9c36.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.43.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cb:ec:b5:7b:99:34:98:30:4f:b8:97:97:d8:2b:67:8e:29:54:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=9fb442b91678c8880b452ab4c2acfa3d47ee02d19d61a2cf98519e75675661ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:2a:d7:bb:b6:a7:22:7c:a7:8f:25:7d:ba:
                    6c:e9:ca:ed:dd:72:58:f2:03:7f:53:da:bf:27:76:
                    96:aa:a2:c3:a6:ac:a8:28:43:43:77:79:f7:fd:8f:
                    8d:30:7e:26:0c:84:a4:1d:15:08:28:42:68:e2:a0:
                    a8:d8:bb:0c:95:ad:38:e2:11:17:19:68:34:b6:79:
                    25:4e:ad:3d:89:a6:4f:e7:d9:7b:9c:ec:49:ee:72:
                    3f:c9:21:2f:1a:e8:b9:b0:e8:b8:b7:f3:08:eb:f5:
                    58:ee:3e:63:f0:b0:28:58:24:ed:6d:d4:c5:12:de:
                    f0:71:7e:63:d3:1e:d1:80:f0:5d:42:1e:5a:cd:7b:
                    24:30:35:f5:f9:89:3f:2a:bc:47:5f:fd:9f:a9:3d:
                    3e:cb:85:98:d8:fb:d3:6d:60:81:16:ac:eb:fa:25:
                    a5:60:f9:af:25:98:07:c0:52:21:94:5e:8e:98:5f:
                    42:56:4a:21:df:c4:4d:87:22:12:37:31:21:c7:89:
                    b0:40:51:bd:bb:35:07:c7:73:10:83:0e:71:12:b6:
                    a3:e5:58:85:b5:74:09:39:ac:81:bd:a8:ff:20:28:
                    8a:9d:93:9e:f3:27:71:64:cd:da:9c:3d:53:49:6c:
                    5d:2a:1c:b2:a9:31:83:89:99:99:2d:bb:ef:00:8a:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CA:99:D3:64:ED:AA:47:67:56:6D:07:5F:EF:74:E8:07:94:58:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0043467-91d9-4b55-9360-0bde422e9c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d6:62:3a:6f:14:86:99:8e:21:b8:a9:fa:93:ef:4b:12:34:db:
         2b:92:11:33:69:f4:0f:ca:e7:36:7c:6f:f6:8f:35:a5:f6:23:
         6b:2c:83:0c:b9:5a:be:ab:ef:ab:0d:a6:09:6d:03:2b:b6:28:
         d8:c2:e3:22:1d:82:7d:46:71:9c:a7:1e:7e:3f:3f:db:c3:46:
         58:1d:dd:01:1f:8b:eb:14:3c:11:4f:be:5d:05:45:39:e7:a1:
         57:9f:d3:04:3c:19:d1:49:fc:cb:d0:66:c4:ba:bd:d9:ec:33:
         92:52:3b:94:20:89:46:ce:1f:f4:6d:7f:33:f2:0c:3b:e4:87:
         79:2e:42:98:14:b3:69:c8:a8:56:ed:22:e4:79:4b:58:91:f3:
         59:54:d7:7f:f7:4c:c0:d3:6c:5c:24:2d:15:b9:eb:9c:52:67:
         df:80:ef:72:e0:6e:4c:9d:7c:17:a6:25:0f:00:17:28:3b:40:
         a4:4d:ca:d0:2e:d9:89:9e:5b:86:19:3b:3f:fb:ad:c1:dc:2d:
         93:fe:e0:c6:c6:a7:16:77:2c:12:e3:79:23:28:1e:a5:b8:76:
         ec:f4:a7:60:af:95:e0:04:76:81:7e:64:3a:84:6a:78:70:7b:
         66:19:71:9c:4c:8a:59:f6:82:86:16:87:ed:db:10:0f:6c:1b:
         88:64:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:33:25 2024 by rpki-client on console-fra.rpki-client.org