Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de7b8e0a-a109-43f5-8ea8-973c8c0c5cee.roa
File:                     de7b8e0a-a109-43f5-8ea8-973c8c0c5cee.roa (raw, json)
Hash identifier:          xZiI5NM1A45z9B2n9E7RzRHUazgL3QQVaQxjWTIvlqk=
Subject key identifier:   5E:1D:87:4A:56:17:FC:21:A6:F6:2A:AF:7E:71:CC:1B:3F:36:FA:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11E2FC744F4D8941C4D7B6C4F2ED12BECAD210AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de7b8e0a-a109-43f5-8ea8-973c8c0c5cee.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        209.128.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e2:fc:74:4f:4d:89:41:c4:d7:b6:c4:f2:ed:12:be:ca:d2:10:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=0c7226079084eb1777f5e7efd4a1a5e82d67f3fca9855b04238af2fab8c53e43, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:e4:e8:bf:0b:38:e0:2e:9b:6b:db:d6:21:
                    85:dd:b8:f5:b8:15:23:bd:3e:5d:89:7d:aa:7d:c6:
                    58:7c:ab:63:f5:b8:27:c1:6d:b6:60:ff:38:8c:bc:
                    85:9c:dd:59:47:23:6f:e6:8a:9a:b0:07:c1:18:9f:
                    42:4a:94:bf:1b:cb:d7:cc:9b:77:5e:62:32:f2:ed:
                    c1:d7:35:3e:e9:27:76:44:83:d0:6a:52:f5:87:50:
                    5f:d4:af:68:6f:2e:07:7b:3b:71:4d:c2:80:e0:6e:
                    8f:15:3b:c5:ae:97:b1:ea:5e:75:15:f5:75:3b:8e:
                    22:e1:81:ca:ba:92:7f:48:ee:df:55:77:e1:9c:50:
                    4c:ba:53:08:44:0c:47:89:4b:81:13:08:82:4b:c2:
                    85:6c:18:d9:e3:70:98:75:27:98:6c:ba:29:dc:2d:
                    e3:6b:57:38:57:10:4f:69:f6:51:7e:03:92:bc:d2:
                    0b:df:af:44:ed:b3:a5:ad:fd:f5:f2:ac:62:b0:fc:
                    ce:39:cc:99:12:39:59:63:da:ad:d3:5e:aa:3a:8a:
                    af:c1:82:29:59:48:db:b3:7e:39:cd:92:2a:67:b5:
                    72:3d:58:7f:2d:60:a7:14:30:87:e5:11:67:d7:d2:
                    1c:77:19:7c:91:4e:22:6d:d2:f6:9c:1d:d6:4e:93:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1D:87:4A:56:17:FC:21:A6:F6:2A:AF:7E:71:CC:1B:3F:36:FA:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de7b8e0a-a109-43f5-8ea8-973c8c0c5cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.128.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bc:73:49:4d:40:31:14:c9:0e:62:9a:d1:12:43:41:4f:c6:3c:
         d3:44:41:46:7c:8f:aa:7e:42:6b:fc:14:41:8b:b8:25:a4:3b:
         7e:75:46:8f:ca:7d:8f:1c:46:6d:78:56:22:48:85:bb:e7:93:
         d8:da:57:d3:e5:96:03:f7:00:3c:71:96:63:27:e2:54:74:76:
         d8:e6:a7:63:dc:10:02:ee:49:9d:ac:b5:79:f3:31:4e:74:3c:
         2a:92:ab:8b:c3:8a:16:47:6e:3b:1b:62:58:0f:d1:55:89:1c:
         b1:b2:ab:0a:52:9b:2a:3e:e3:e5:64:05:c0:9b:46:60:19:ea:
         54:46:9a:a8:82:f7:73:ad:bf:e3:19:28:c6:10:13:c8:91:15:
         32:2c:cb:88:ec:7a:2b:a2:a5:27:9d:81:e7:05:1c:b8:93:33:
         49:7f:6b:8a:d0:fd:1f:4d:67:73:9e:ca:bc:8e:e2:fd:5c:ed:
         9c:3b:40:82:63:e4:bb:83:3d:68:67:c8:3a:c4:51:67:aa:40:
         23:1e:28:af:f6:98:89:2e:36:f7:3b:c6:4f:af:df:6a:a2:cc:
         b5:94:80:a8:49:57:e4:cf:1f:60:f3:3e:08:ad:85:00:15:48:
         63:62:1e:d6:53:2d:09:d8:1c:d6:41:48:66:58:0c:ae:58:96:
         6b:fd:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:05 2024 by rpki-client on console-ams.rpki-client.org