Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e32e9d70-77da-4d7f-838c-cace7dac9464.roa
File:                     e32e9d70-77da-4d7f-838c-cace7dac9464.roa (raw, json)
Hash identifier:          0C2OIzq3esM/nqxjlI1zfRv+iznkGy6gq8AEo640ilY=
Subject key identifier:   79:84:AB:6C:BD:DD:FB:8B:02:C3:2D:E7:43:C0:F6:A7:41:2F:27:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       066FA079AD94E45FC0E422BFB4674EBC1567A4E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e32e9d70-77da-4d7f-838c-cace7dac9464.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        216.231.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6f:a0:79:ad:94:e4:5f:c0:e4:22:bf:b4:67:4e:bc:15:67:a4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=f2d4515ce26eead4edb8c5c2879ef40f80f196cbc8b5f24caeaf439957f45b0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:36:0a:04:f0:fa:09:00:e6:0b:90:c7:f8:
                    df:36:e1:e2:3e:f4:22:0f:e8:c1:f7:62:5e:37:6c:
                    03:45:43:ce:95:cf:91:f5:fd:ee:69:2a:92:5a:22:
                    be:fb:76:84:83:ee:d0:e3:15:12:9f:7a:88:24:3d:
                    a3:7f:7a:aa:6f:46:31:2e:c9:8a:b4:02:10:47:27:
                    38:bd:67:7a:71:fe:2d:2a:dd:95:aa:d1:ea:8e:02:
                    7d:da:c1:24:e4:42:ac:13:43:78:e3:d0:1e:2c:78:
                    92:63:2f:cb:b2:e1:5c:2d:a8:18:77:a0:61:01:ec:
                    f4:c6:3b:58:f0:95:68:75:22:41:1c:f2:ad:53:68:
                    75:02:22:e6:b0:ca:81:d5:9c:03:67:ce:eb:5c:da:
                    b6:21:d3:c4:fd:d9:d1:84:f1:c0:89:5a:0e:94:20:
                    df:90:e2:66:f4:15:c6:ed:88:d3:c2:ab:9b:9d:4d:
                    e6:ac:a4:4a:f2:d8:76:44:ec:b3:87:2e:bc:5a:0b:
                    c7:95:7c:18:72:2a:18:86:c8:23:01:c2:96:d2:c6:
                    01:95:92:6d:86:06:85:7b:92:b4:64:a0:ed:9e:d6:
                    3c:b6:84:5f:5f:22:82:09:7d:6e:b1:86:67:e2:bb:
                    da:e3:17:9b:d8:ab:80:28:ab:5f:38:d2:c1:50:f0:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:84:AB:6C:BD:DD:FB:8B:02:C3:2D:E7:43:C0:F6:A7:41:2F:27:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e32e9d70-77da-4d7f-838c-cace7dac9464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.231.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:7c:38:8f:a8:a0:ce:e9:62:c4:fe:d2:d9:28:df:be:c0:6c:
         70:af:bc:80:92:e2:49:b5:1f:4a:96:92:63:18:4c:5c:41:9b:
         8a:4f:5e:97:08:8e:0b:b8:67:3c:e8:39:15:70:cb:bf:eb:ee:
         1f:3a:47:eb:c0:8c:59:55:cc:cf:ca:97:09:8a:5b:83:c8:74:
         62:b0:d3:78:54:9d:95:3b:6e:4f:4a:4a:0a:5f:b8:6a:8e:8b:
         6a:bb:8a:6f:a9:a7:24:16:b7:40:03:5a:a2:fe:24:c8:4d:2f:
         34:91:af:20:ee:92:bb:38:4b:80:09:ce:09:2a:bd:4e:cf:a7:
         e1:36:8d:98:19:fb:3d:08:f5:a5:b3:43:56:a8:1a:55:6b:b7:
         2a:e8:03:fb:11:35:9b:a5:95:ee:13:38:25:8e:0d:2e:d0:cd:
         3d:da:04:db:53:72:75:97:86:f4:72:33:d4:9a:68:1d:90:0c:
         a4:53:27:b4:f1:f3:b4:07:c2:67:c6:5b:20:f8:28:1d:ef:86:
         31:9e:e3:9f:59:39:82:77:e1:56:d2:ad:6b:44:2b:e6:08:01:
         69:81:a9:02:bb:82:64:85:8c:fa:d1:a9:d0:74:07:05:4c:3e:
         73:3f:94:7a:6f:15:5b:56:c9:3b:a4:d0:68:bd:e8:40:70:38:
         1d:05:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:18 2024 by rpki-client on console-ams.rpki-client.org