Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e8571-dd75-4fa7-8974-4183693302fd.roa
File:                     d39e8571-dd75-4fa7-8974-4183693302fd.roa (raw, json)
Hash identifier:          KntGaM6PAQNZhMAa1th+Ej1FV5I1ERkbDPEbbnBAP7o=
Subject key identifier:   0B:A0:90:5E:53:B7:AF:06:6A:D3:72:CF:8C:4A:0B:71:9C:97:99:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       648AB1F6511F87CEAC70407D77B0939766537DB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e8571-dd75-4fa7-8974-4183693302fd.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        40.210.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8a:b1:f6:51:1f:87:ce:ac:70:40:7d:77:b0:93:97:66:53:7d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=177e276c1e91433a452bcd117eeff45b5852471bb0b36b30a399fef399a21d12, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:b0:ae:03:dc:9a:aa:d0:f6:f5:e2:24:f5:
                    86:60:86:80:af:93:5e:c2:44:2e:ff:1f:29:ed:71:
                    ba:15:3c:51:66:2e:9d:b4:21:fc:37:38:c7:b5:72:
                    52:ba:ae:11:a3:6c:a8:74:af:00:6c:bd:ca:b5:3e:
                    25:f1:64:c6:8d:a8:e4:33:25:76:4d:7e:06:5a:a6:
                    a2:e3:51:df:f1:78:e0:3a:99:ba:ed:30:7a:f4:7d:
                    06:eb:01:51:2d:10:97:7a:23:63:b4:e4:22:ed:fd:
                    b0:c4:97:58:2a:ca:59:3c:0f:20:4d:1d:ac:6b:a4:
                    f1:9d:65:40:77:ff:0e:ec:d0:6e:be:48:f9:64:2b:
                    2d:09:34:ee:22:9e:1e:0f:60:d8:d1:d1:af:af:38:
                    69:d7:a7:e0:46:1d:f4:cf:98:a5:03:d6:5c:4f:4d:
                    10:fb:00:3c:3a:93:f6:cf:64:5d:11:c4:00:65:5d:
                    6f:9d:ea:9d:24:2c:72:ba:8a:1f:e7:13:18:c3:77:
                    11:b3:05:b1:02:85:89:2a:d6:9d:da:33:c0:a7:6d:
                    fc:d4:e4:29:de:c0:15:67:84:0d:50:fa:5b:a5:92:
                    b2:f4:44:e9:10:0d:0c:94:5f:3a:6c:c2:03:c8:74:
                    a6:eb:d6:48:0a:5c:32:aa:f2:24:71:24:61:e8:d6:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A0:90:5E:53:B7:AF:06:6A:D3:72:CF:8C:4A:0B:71:9C:97:99:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e8571-dd75-4fa7-8974-4183693302fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:07:12:95:fd:80:4b:bf:c3:3c:4b:92:83:3b:82:be:33:3d:
         61:85:c1:ac:4e:0d:fd:62:48:68:08:ec:c4:1b:ff:82:88:62:
         fc:c4:88:85:02:4c:cd:d0:8d:18:64:23:73:bf:aa:24:92:1e:
         2c:d1:1e:1e:09:4c:45:70:c9:c4:6c:d5:7d:41:5f:f9:2a:85:
         68:3b:44:0d:fc:6b:d9:b2:26:55:44:08:66:e4:92:52:67:51:
         4b:2d:fc:2b:20:f9:ff:b9:cc:22:e7:54:51:4e:91:7e:ca:9f:
         8d:ef:32:42:68:9a:03:fa:5b:8b:e5:c3:96:ca:10:2d:f7:d5:
         ed:b7:b4:f9:27:d1:78:79:11:29:5b:ba:b8:04:d4:fd:c3:b7:
         3b:a4:0c:c5:28:1f:c4:1b:16:8a:55:c7:82:19:e0:56:dd:bd:
         0d:70:b1:67:af:5c:b4:3b:96:00:ad:98:75:61:6f:31:44:47:
         75:22:a9:09:01:0b:48:52:0a:c6:78:ac:8f:cb:1d:db:09:c7:
         bb:8c:01:9e:55:97:e4:c9:4f:14:88:46:b9:0c:1e:4c:14:c4:
         7b:93:95:cd:34:b3:57:81:a1:8e:8e:65:d7:00:31:b6:6e:93:
         b0:17:42:af:31:bf:55:c7:78:d3:5e:6f:53:99:04:ac:7d:c6:
         9e:f8:81:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:34 2024 by rpki-client on console-ams.rpki-client.org