Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2fe5762-4cf1-443f-adef-629a57e6582b.roa
File:                     e2fe5762-4cf1-443f-adef-629a57e6582b.roa (raw, json)
Hash identifier:          vdvqxMz3nxBACDLblXg9bEjjZw1absCQgGihme+f9GI=
Subject key identifier:   A6:9D:60:A5:4D:CD:85:98:8C:DA:CF:07:63:87:45:1C:03:EB:F7:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A4507EE97938BD1F603EE9FBA91B9615207A463
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2fe5762-4cf1-443f-adef-629a57e6582b.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.113.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:45:07:ee:97:93:8b:d1:f6:03:ee:9f:ba:91:b9:61:52:07:a4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=c71277d5a1f4b299158691cc1e8d1100c3d57c2b1a5f9dbf6a260080ddd189c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:d3:4f:f6:fd:d7:94:a7:e4:87:7d:0e:62:
                    ed:26:ee:bc:b8:ce:24:32:6a:3d:41:f8:a3:62:ff:
                    29:8d:74:89:a4:55:eb:8a:2b:a8:69:36:a6:16:5c:
                    87:c0:11:62:fa:4c:93:86:60:76:7e:5b:71:d3:29:
                    dc:47:57:1b:08:c3:5f:5d:ea:0d:7f:47:9c:f8:b8:
                    c9:0e:32:14:57:d9:72:57:8f:ad:e1:bf:4f:5d:97:
                    e8:56:45:5d:03:82:40:95:0c:7d:4a:1d:23:3b:18:
                    6d:f7:a9:a1:c3:8b:e9:e8:ca:75:85:bd:41:d8:91:
                    e5:8b:6f:87:ad:9e:d9:0b:34:e0:3c:05:24:02:0e:
                    bd:20:42:0a:8c:7d:12:80:94:44:41:52:70:ea:4e:
                    98:ef:1d:c6:37:6b:32:25:7c:36:61:4d:a6:69:2d:
                    9c:00:fa:34:3f:f9:d4:9d:c3:95:a3:6c:f8:a4:54:
                    8c:c2:88:1c:30:7b:14:d5:38:8f:1e:37:0b:ca:8e:
                    ae:d1:d7:f7:17:33:75:09:a7:b1:a0:b0:c0:38:d9:
                    cc:61:55:9f:8f:2f:32:31:63:d3:7d:ca:fb:9c:9b:
                    c5:a7:aa:9e:ab:15:b5:c9:74:f5:88:4a:c2:5d:3c:
                    02:f1:a2:6f:5a:63:ad:4f:9d:d0:87:17:32:31:71:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9D:60:A5:4D:CD:85:98:8C:DA:CF:07:63:87:45:1C:03:EB:F7:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2fe5762-4cf1-443f-adef-629a57e6582b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:11:c5:4d:f1:30:45:f2:b7:61:d3:f3:f6:7f:e1:92:14:
         6d:5e:08:99:07:a2:91:0c:b4:a5:45:ba:00:f5:07:0e:74:8a:
         3b:74:ef:18:87:0b:ce:fa:1c:f2:ea:f1:53:22:72:7e:7e:e0:
         1e:96:3e:c9:16:5a:4c:ce:79:05:ba:40:fc:3c:93:cd:f7:f6:
         bc:8f:95:00:8e:f3:8e:4c:0e:e8:c1:a2:84:e6:fd:a1:3a:9d:
         91:91:da:f9:72:7d:07:e1:a6:21:ee:44:ef:89:58:f9:34:f7:
         6e:c8:37:73:76:4e:24:a1:f1:fe:49:e6:e7:9c:98:05:fb:8a:
         1b:c0:00:44:37:55:4c:8e:c9:37:2b:9d:76:3e:71:29:27:60:
         97:ca:bf:7d:af:fb:c3:c6:ea:30:d7:97:63:4e:f6:9d:aa:fe:
         0f:27:fc:01:38:29:89:e0:0d:46:3e:16:29:cc:c1:6c:53:5c:
         56:86:34:02:2e:d0:ea:71:b4:44:35:c3:96:1a:09:2c:97:ee:
         14:8f:71:a9:c5:7a:32:16:d7:90:5d:6f:db:09:fa:95:a7:af:
         df:71:92:b9:b6:28:9e:35:66:9a:8b:d7:f2:88:89:f3:00:c6:
         08:7c:f6:08:9c:b6:2c:e7:4f:29:8d:07:46:66:75:e3:0f:21:
         4c:0c:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:12:50 2024 by rpki-client on console-fra.rpki-client.org