Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0f1ad81-abfe-432e-b45d-859ac90ece6c.roa
File:                     e0f1ad81-abfe-432e-b45d-859ac90ece6c.roa (raw, json)
Hash identifier:          tR9JOfOuSDEs6WEQh3HHP0lCNhEh++iByPGKgjb9PeA=
Subject key identifier:   90:1C:06:99:9B:CC:46:60:75:7F:FB:65:D3:79:AA:FF:E8:4C:1B:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F3770FC400177EF5C5CBD5E7CBFD413807734C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0f1ad81-abfe-432e-b45d-859ac90ece6c.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        161.46.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:37:70:fc:40:01:77:ef:5c:5c:bd:5e:7c:bf:d4:13:80:77:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=803f2f880d2a1110b706093b6499d7c2cbe1c5caf416f156274c6e72e4ca04a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:d7:18:ff:a0:5f:cd:5b:50:f5:8c:18:06:
                    96:15:4d:ef:da:a9:a6:86:2a:cd:e3:d6:12:e0:f1:
                    5a:b6:63:bf:00:25:8f:bf:12:f9:2b:7a:b0:c1:85:
                    05:aa:99:a6:f3:1c:c2:23:53:50:a1:20:b4:fe:b2:
                    e4:38:8d:9c:eb:ae:86:f3:cd:bb:a2:46:b3:b1:e5:
                    8a:cf:66:65:90:41:34:3f:9f:72:ac:41:64:5a:f8:
                    e0:18:fe:9a:aa:8a:f9:57:34:3a:0d:c5:9e:a1:ac:
                    e9:20:69:76:93:bc:81:da:d7:51:36:82:2a:60:63:
                    6e:90:9e:63:8c:77:80:b1:e6:4f:25:b3:48:d5:3e:
                    a2:6b:cb:fd:6a:08:76:df:1e:f3:8e:ce:2c:04:5b:
                    35:55:8f:bb:70:a5:e1:e5:90:62:10:c0:95:7c:b6:
                    bd:eb:cf:bc:01:11:75:a5:a7:56:05:1e:a9:6d:09:
                    34:01:b3:fc:fd:f3:c4:ce:2f:37:d1:95:80:46:b5:
                    f7:bd:d6:00:1d:7c:89:c8:00:69:77:f8:95:fc:9b:
                    4b:f7:42:10:12:6f:38:62:73:79:f7:cd:a7:a5:aa:
                    c4:0c:73:e7:9f:e7:39:f7:83:2e:e8:77:2b:aa:8c:
                    fa:71:0c:8a:fb:d0:a4:22:e8:e8:1f:f0:b8:10:77:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1C:06:99:9B:CC:46:60:75:7F:FB:65:D3:79:AA:FF:E8:4C:1B:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0f1ad81-abfe-432e-b45d-859ac90ece6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c3:65:7d:60:6b:39:c0:db:e5:c3:9c:ac:83:77:38:60:1f:3e:
         29:fe:c8:3c:76:a7:7e:f6:42:a1:ea:0b:af:90:97:d7:54:9c:
         04:84:d1:9e:50:83:e8:35:3b:f3:a1:d4:03:85:a5:4a:6e:92:
         71:5b:cf:66:f1:8d:e6:83:3a:8d:10:64:d8:50:1a:e7:bc:a7:
         95:e9:a2:f7:23:f2:22:f8:35:e2:e9:ef:0f:ca:5b:d9:ba:6b:
         19:bc:87:0c:a9:ef:cc:34:be:16:14:79:07:54:0c:e9:3f:8a:
         be:c1:af:15:1f:7c:5d:be:75:34:8c:32:8c:af:53:85:fa:87:
         9b:e1:c9:1b:c0:bc:ee:8f:4e:fd:bf:27:35:d1:18:9a:7c:37:
         e8:0a:8e:d6:c9:83:af:38:a7:ce:87:5a:79:2d:b2:85:39:60:
         3a:42:a2:b1:c3:22:9c:72:a5:81:4b:1a:26:6f:a0:32:c8:e2:
         33:d6:c5:cc:94:21:c0:04:86:8a:6e:cc:0d:30:8c:8e:42:34:
         f6:ed:3b:f2:23:45:ad:96:f3:db:45:ad:e4:6e:b7:90:c6:19:
         2a:dd:72:d5:19:97:b6:49:d9:29:75:89:9e:98:51:92:ab:43:
         ee:79:25:b8:a7:26:ed:c5:de:ab:06:10:4e:71:4e:fe:12:74:
         b0:74:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:36 2024 by rpki-client on console-fra.rpki-client.org