Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6f05e5e-d718-4b35-b2ab-8730f8e4e950.roa
File:                     e6f05e5e-d718-4b35-b2ab-8730f8e4e950.roa (raw, json)
Hash identifier:          Id68zVbMB/78FruSSX7Cd75wjPiloTbiCkk8B6gxMyo=
Subject key identifier:   95:DF:FD:44:2E:11:A0:C2:2C:7A:08:3A:F5:DD:34:6F:1D:E2:06:15
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       490A97B11C2DE9672913D9231A291E699DDB91CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6f05e5e-d718-4b35-b2ab-8730f8e4e950.roa
Signing time:             Tue 19 Nov 2024 00:00:00 +0000
ROA not before:           Tue 19 Nov 2024 00:00:00 +0000
ROA not after:            Tue 24 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        216.252.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0a:97:b1:1c:2d:e9:67:29:13:d9:23:1a:29:1e:69:9d:db:91:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:00:00 2024 GMT
            Not After : Dec 24 23:59:59 2024 GMT
        Subject: serialNumber=494e27663d52805905ce2f8aab22aee9a5a938b41e5a002b489934844d3e7cfa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:81:2e:b9:a5:dd:ee:ab:92:c2:1a:45:f2:
                    63:4f:b3:7c:76:72:e9:7c:09:55:60:0b:9e:45:d9:
                    f1:ac:53:1d:29:f8:c9:9e:92:05:48:27:f0:60:e4:
                    8e:ae:6e:3c:b8:b5:c6:12:58:af:60:1d:17:90:f0:
                    38:f9:60:cb:33:5a:ca:03:a6:b1:fa:41:47:f5:35:
                    d7:f8:79:3c:45:d5:85:4e:da:32:94:c5:1f:04:31:
                    70:9e:6a:af:8b:27:47:f8:18:46:cf:56:55:92:97:
                    e9:2c:15:39:b9:ef:1c:a9:6c:21:ef:a3:61:3e:09:
                    d1:62:0c:53:9f:bd:05:41:d4:6b:96:82:cc:bb:58:
                    93:ee:d7:06:24:5c:a9:13:a2:db:bd:7a:46:b7:f7:
                    d3:97:19:79:14:3c:85:1d:c5:4c:4c:ce:32:59:35:
                    29:ac:2c:74:c3:e1:f0:1c:b1:df:a8:90:b2:cc:e0:
                    03:9b:15:bd:e0:bc:6a:28:56:5f:90:98:26:ba:8e:
                    5e:17:16:0a:07:10:0a:87:66:24:37:a8:24:6e:17:
                    48:25:39:28:0f:19:4f:bf:7e:19:72:9a:8e:e6:5e:
                    6e:a4:0d:50:65:89:52:d1:bc:71:35:01:c8:c6:e2:
                    39:7c:a5:d5:c6:57:2e:b1:00:82:93:a3:5a:f4:0c:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DF:FD:44:2E:11:A0:C2:2C:7A:08:3A:F5:DD:34:6F:1D:E2:06:15
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6f05e5e-d718-4b35-b2ab-8730f8e4e950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:f6:91:32:47:43:e5:10:99:1e:31:b6:b4:eb:df:ce:78:
         12:e2:0a:6a:c9:21:68:f4:c9:23:fb:24:dd:a5:fa:57:39:06:
         5a:3f:3e:ed:b6:e2:a8:26:0b:5e:d0:0a:7b:7b:8f:7e:82:b1:
         30:cf:45:91:16:75:ca:c5:d7:39:3b:e9:4c:9c:07:2d:62:74:
         97:e7:29:5a:64:d8:b0:5b:7e:8c:94:1f:f6:31:2a:f7:84:d9:
         f0:31:ed:6f:83:a3:4d:fa:16:3a:f4:22:78:c0:eb:df:b8:13:
         a8:78:50:cf:c3:f2:d2:15:bd:e3:5f:84:ba:52:5d:0c:c0:31:
         1f:c9:23:64:b1:0b:5a:0d:71:b4:9c:4d:25:ee:69:b6:19:52:
         dd:56:e8:20:35:57:52:58:6a:53:4c:6c:b6:ea:b1:a6:73:2f:
         f3:a4:fb:df:5b:e7:8f:f9:5e:59:fa:66:11:c9:3e:dd:4a:57:
         1a:cf:0d:53:93:4e:84:90:b4:b1:09:43:af:2f:ac:9a:44:7e:
         93:30:14:bf:48:d5:e0:30:78:2c:82:90:b8:92:d0:9d:a9:96:
         87:32:0c:25:34:13:ca:99:c2:38:59:7b:85:15:95:6e:6d:d6:
         86:d9:9a:c1:3a:2c:4e:25:d7:dc:a8:5a:9f:3a:b1:56:92:9f:
         f4:49:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:39 2024 by rpki-client on console-ams.rpki-client.org