Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4f42ea8-9012-42ce-bfc6-b12359765626.roa
File:                     d4f42ea8-9012-42ce-bfc6-b12359765626.roa (raw, json)
Hash identifier:          P8Ch6sihPsrzOSof/g5nyp5RXEkHe6J8vzEdBXc801Y=
Subject key identifier:   1A:0F:79:7D:0D:76:35:F4:9E:2F:9A:0C:7B:A8:65:2D:18:3F:E1:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AFA17F3E6325E24D7BDA2C9BC6F84E69509309F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4f42ea8-9012-42ce-bfc6-b12359765626.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        208.124.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fa:17:f3:e6:32:5e:24:d7:bd:a2:c9:bc:6f:84:e6:95:09:30:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=50352f5f2dbecfe6ea28caf3ccb7c1297cb6ca7bae5c3c88de57c34e38cf633e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:61:24:47:97:3b:6d:ed:0f:f7:c5:93:91:
                    b6:13:3f:5b:7b:b9:83:c2:e0:36:b2:01:94:eb:b1:
                    0c:f6:28:51:0b:f3:b4:ec:b3:23:a3:57:3d:bd:c5:
                    dd:5f:03:b5:26:5f:31:94:51:0d:e8:13:a8:47:d9:
                    05:24:21:1c:2c:04:18:ae:74:1e:c5:4f:bd:31:e1:
                    09:8a:27:47:b6:1b:ef:8c:76:e0:ce:b6:c9:5a:40:
                    8e:0b:5c:92:2d:fb:03:44:f9:03:e7:5b:ed:7c:73:
                    1f:25:9f:af:2b:49:18:80:23:64:ba:ae:f1:74:44:
                    b0:5b:e3:c6:d2:74:09:31:72:c6:b2:7e:3b:ed:eb:
                    b1:f8:b5:36:0d:49:33:5a:73:45:88:0b:60:dd:15:
                    1a:30:b7:9d:bb:e2:38:c9:4e:18:1f:77:e7:b3:c2:
                    1b:37:7d:03:9e:da:0f:74:7a:78:78:9e:b5:e9:aa:
                    8e:27:ef:d8:b9:75:5f:e8:94:d4:eb:1c:98:ff:1b:
                    cd:27:ec:44:a6:b1:9c:9e:52:32:ce:6f:22:47:3b:
                    be:34:35:33:cb:ba:c2:47:a1:2a:3d:d4:cc:93:7a:
                    76:5c:83:28:d7:f4:3a:84:fa:49:ed:8a:65:4b:6a:
                    b3:07:18:d4:16:05:6f:8e:c5:12:36:84:8e:a8:b8:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0F:79:7D:0D:76:35:F4:9E:2F:9A:0C:7B:A8:65:2D:18:3F:E1:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4f42ea8-9012-42ce-bfc6-b12359765626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.124.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:6b:f8:80:6b:75:78:e7:7f:a0:73:a2:d1:68:e4:50:57:cd:
         52:66:90:dd:a6:30:f7:51:6c:cd:25:28:65:ee:9c:c2:0b:7f:
         ef:6d:b1:17:ab:72:b4:48:6d:5c:37:74:5a:38:31:43:e2:e7:
         4b:2f:4b:2d:fc:cf:62:e4:7e:60:47:1e:c6:bc:f6:d0:af:b0:
         ac:4f:04:16:0d:ec:4b:82:91:86:1a:50:1f:ac:50:38:33:45:
         3f:34:16:33:15:92:53:c2:9e:13:0d:d1:e1:4a:63:19:29:45:
         2a:cd:26:81:f3:f4:05:95:9d:77:9c:10:3e:34:9b:c4:d9:ce:
         5a:4f:3f:10:38:b8:b7:56:ab:28:48:ea:f9:83:aa:7f:49:72:
         db:1c:3b:b5:ef:ae:d8:98:5c:77:76:69:3f:95:06:65:ec:bc:
         62:86:ef:27:e8:98:9c:bf:44:25:6d:1b:61:d6:a3:28:f4:5c:
         3a:3f:71:d9:fe:a1:97:34:06:d6:42:ec:8d:9a:73:ce:9f:d4:
         b5:01:58:b5:42:81:96:9f:1c:ba:38:91:5f:e7:fe:b2:4b:5a:
         29:ad:11:39:51:32:b8:d8:7e:a4:04:6f:ce:c0:29:c2:f5:d9:
         a8:e2:70:f4:76:49:ce:52:dd:88:11:d7:33:33:cf:42:6c:97:
         39:7e:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:16 2024 by rpki-client on console-ams.rpki-client.org