Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2526c3a-77ad-4669-af27-f2171d468d2d.roa
File:                     d2526c3a-77ad-4669-af27-f2171d468d2d.roa (raw, json)
Hash identifier:          lWtqSIGPSHLFLlkPqjCRKAF313Z9m5EYIoT8FuUKXok=
Subject key identifier:   FD:D0:EA:8B:E2:06:16:78:F7:66:6D:3F:C3:6E:2F:D9:6A:AD:A4:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F07E3711AF43A93EA6B2412CC938332DC6FA7B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2526c3a-77ad-4669-af27-f2171d468d2d.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        63.246.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:07:e3:71:1a:f4:3a:93:ea:6b:24:12:cc:93:83:32:dc:6f:a7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=116f94efc9c1d4574dad9a7fbee1e22b8ceb1fc5e2e197b8a13cfaa7086b4b54, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:4f:43:ae:ea:7d:e5:ab:5f:b8:51:be:6e:
                    31:ef:2c:72:ed:d3:77:e0:65:1f:c8:26:68:9f:9f:
                    58:fd:65:25:0e:66:96:ab:0c:3b:aa:94:c3:1d:3e:
                    63:18:19:b7:69:ee:00:50:4e:75:b3:37:d2:b0:66:
                    3a:7d:53:c8:a9:25:44:2b:27:ac:94:ee:ad:95:9f:
                    f1:46:37:44:38:d4:dd:21:6a:c4:cc:20:5a:e4:5f:
                    85:c0:a7:d0:6c:a8:ce:9d:d0:f9:bb:ad:00:26:5c:
                    37:39:d4:6f:a9:9b:2e:a7:56:7f:40:d7:f8:f3:3f:
                    da:10:d0:02:c6:6f:94:f5:f4:41:af:06:72:da:46:
                    8e:b1:6e:24:88:25:46:d5:e6:61:f4:63:06:a7:01:
                    e0:1e:f9:96:8d:fa:d1:0d:e9:81:7c:b3:a2:81:06:
                    35:a9:54:eb:48:1e:e4:7d:0d:9c:37:df:16:5e:fd:
                    8a:37:92:d4:ff:a2:f7:83:c9:c3:8f:7c:ce:b7:9c:
                    f0:6c:92:98:81:30:66:b4:37:94:46:0c:8c:77:1e:
                    22:9f:63:9b:ab:b8:b5:f6:35:0f:50:c2:10:83:87:
                    dc:86:2d:71:08:22:e7:83:48:3e:8f:4e:6c:0b:e4:
                    fb:39:28:42:0e:bf:24:7f:2e:9b:7a:7a:b2:08:be:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D0:EA:8B:E2:06:16:78:F7:66:6D:3F:C3:6E:2F:D9:6A:AD:A4:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2526c3a-77ad-4669-af27-f2171d468d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:48:a6:1d:38:a6:29:a2:52:01:a3:21:f5:2e:4a:77:35:
         79:9a:55:26:a0:3a:91:2b:bb:c6:1a:ba:18:6a:5c:3b:30:2d:
         68:0c:9b:1a:45:4b:d4:1b:dd:81:98:4f:2b:5a:90:88:7e:69:
         5a:70:b4:a4:3c:7d:6e:5b:de:75:40:fb:6e:c4:fc:0f:ed:0c:
         76:af:01:44:5d:d0:46:e7:17:98:1b:8b:7c:d8:37:60:f3:9b:
         48:94:6c:ed:17:24:7d:7a:18:5e:dc:a7:67:93:06:7f:e8:26:
         a1:a6:ea:50:d0:d7:08:67:e4:71:a3:eb:fd:97:17:16:49:8c:
         ef:8d:7d:93:0d:dc:0b:be:4e:78:97:d4:fe:80:38:a7:87:0e:
         2b:a3:31:e7:1a:61:ce:18:1f:6f:d1:a4:aa:06:27:13:b5:dc:
         e0:2e:7f:b3:04:88:90:b2:cb:68:27:c2:27:6f:e8:c5:93:46:
         18:4e:5c:f8:95:cd:f8:2a:0d:0c:8a:f9:37:06:7a:8e:a5:37:
         89:8b:9c:cd:c5:09:e6:68:ab:cd:84:b7:42:bd:10:ed:61:58:
         3b:7a:38:12:d9:a1:58:08:d8:40:f1:88:ec:ad:80:8b:e5:da:
         61:b4:ca:7c:0b:75:2e:b0:cd:c2:6c:ee:ee:b1:39:a9:b9:ef:
         bc:41:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:54:51 2024 by rpki-client on console-ams.rpki-client.org