Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d772ee04-9f5a-4fc0-a6b2-631998b42c81.roa
File:                     d772ee04-9f5a-4fc0-a6b2-631998b42c81.roa (raw, json)
Hash identifier:          pbrJd4LK18MCXx5g9eVSa+UZqCYAaVTSPHtCY2PKtkE=
Subject key identifier:   B8:95:38:5F:17:ED:ED:33:A3:8B:F4:68:12:5B:7F:4D:12:ED:3F:A3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DA7056239CD98E397556B928FD71E75A35ECB90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d772ee04-9f5a-4fc0-a6b2-631998b42c81.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        160.221.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a7:05:62:39:cd:98:e3:97:55:6b:92:8f:d7:1e:75:a3:5e:cb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=55c713482578ad8fa490a88c433d1411f2c35b9c8c922f029866a7b6de86e546, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:53:c9:e3:78:f8:9d:7c:c6:1e:73:44:b0:
                    b4:79:6c:e6:50:34:41:16:d4:33:c7:7d:71:1b:0a:
                    5b:ee:3b:bf:3d:3f:7a:3a:25:0b:a0:9b:96:4d:e2:
                    a5:1a:6a:d5:eb:d7:fa:9d:4f:1f:88:86:8a:00:4e:
                    10:eb:77:6a:30:a7:dd:56:d3:b8:90:9e:7e:0f:f9:
                    59:2a:27:ff:b3:7b:a9:6e:9a:b5:a6:da:89:f9:d8:
                    54:b0:c7:89:19:8b:d5:4c:c8:01:89:c5:1f:5d:48:
                    6e:7c:12:d1:5e:99:35:97:04:59:6b:aa:ed:49:5b:
                    a6:2f:29:9e:db:9a:15:6b:c1:3d:34:e2:63:14:44:
                    15:3c:e2:00:59:cc:02:ee:19:a1:6b:78:b1:92:cd:
                    22:8a:b5:af:f3:bb:9f:56:da:10:45:ef:8b:5c:e9:
                    61:aa:2d:ac:dc:57:65:bc:4b:77:57:a5:d9:7f:bb:
                    4e:5e:2e:3f:38:e7:84:27:5a:26:ac:44:97:ee:70:
                    f3:b3:b5:f0:ac:52:4e:9d:c8:10:98:34:39:28:a2:
                    9b:ab:ad:b4:4f:69:c5:1b:88:68:28:3c:f9:5b:67:
                    65:74:a5:25:b7:ce:0c:0d:5c:bb:8b:f0:18:9e:e8:
                    33:5d:27:8e:34:b2:65:69:8f:70:3e:87:b8:aa:d5:
                    04:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:95:38:5F:17:ED:ED:33:A3:8B:F4:68:12:5B:7F:4D:12:ED:3F:A3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d772ee04-9f5a-4fc0-a6b2-631998b42c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:c4:c2:ee:6d:76:5d:59:e2:b7:3a:da:e9:c3:fb:5b:6b:
         3f:90:46:74:e3:ce:1a:0c:51:59:34:6a:47:e4:83:51:70:17:
         2e:d2:ff:7d:ca:a7:fe:92:19:64:05:e7:11:5c:5f:7e:de:74:
         fd:51:2a:3d:f4:2a:6b:06:1c:a3:80:d7:09:db:da:82:d8:e8:
         c4:aa:55:d0:f3:38:e5:09:e6:9c:64:d3:01:40:6e:73:93:1b:
         6e:01:e0:c4:bc:97:31:c1:56:fa:4a:d9:05:e0:e6:fe:cd:89:
         3a:68:00:c2:5e:80:cf:56:97:bb:bc:05:5b:43:53:d0:fe:ea:
         8e:b7:1d:df:2c:7a:44:0d:1f:3d:67:9d:06:fb:96:b3:c6:88:
         ae:e8:38:ce:c3:cb:5e:dd:00:b7:1b:37:06:e2:25:0f:cf:e6:
         de:98:ce:0a:d4:53:ea:6f:20:67:25:e5:f0:95:11:b8:7f:31:
         bc:22:43:87:39:42:63:b0:da:34:94:69:ee:f7:a5:83:84:08:
         9b:79:19:dd:52:9d:88:5a:d8:db:00:85:28:ec:e2:12:6c:1f:
         84:ca:fa:57:75:1f:18:c9:1c:1b:12:3c:1d:b0:4f:be:ee:57:
         de:09:ee:a7:02:7f:ff:67:9e:7e:ac:73:63:ca:df:82:d5:cb:
         78:e4:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:49 2024 by rpki-client on console-fra.rpki-client.org