Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a53505-4c1d-4b62-a854-99ae3e6964ed.roa
File:                     e9a53505-4c1d-4b62-a854-99ae3e6964ed.roa (raw, json)
Hash identifier:          cLMkEQMcGmmHk19zuNS7zrpCzI2afLlBCtCcbBRewSs=
Subject key identifier:   8F:3A:C7:26:A5:63:23:4F:11:51:26:00:1B:BA:AF:72:19:9A:0B:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       456DEA2C882E0BEC6A7D730F69E83AD4B76EA3F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a53505-4c1d-4b62-a854-99ae3e6964ed.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        135.159.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6d:ea:2c:88:2e:0b:ec:6a:7d:73:0f:69:e8:3a:d4:b7:6e:a3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=dd4fa3e7fdd1aae65f59ee73f0478bdd876cd3e1795e9b00f256816534432f89, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:13:0e:69:07:cb:72:ab:79:64:06:9a:60:
                    fc:9f:c7:0f:c1:9b:84:69:e7:70:96:ce:6f:38:6c:
                    9e:1f:34:99:89:cf:a7:f0:48:83:12:89:a6:24:6e:
                    c0:2a:6f:e7:b0:9e:1b:37:0b:de:a2:3c:45:6b:fe:
                    72:aa:bf:7d:13:4a:1d:7b:54:d6:43:20:43:05:f9:
                    1e:58:b4:22:dc:07:79:ab:2a:d7:e6:0d:db:77:a3:
                    32:66:49:7b:2a:b6:6f:bb:7d:57:90:88:3d:c5:05:
                    0f:b7:2d:19:34:55:e3:ee:f5:5c:ac:01:a9:e3:b7:
                    5a:bc:1e:3f:3b:b3:83:0a:af:d9:d9:1a:bd:1c:9c:
                    8f:03:36:d5:c2:f2:14:8d:df:d3:0b:07:2f:c2:12:
                    14:cf:f3:24:0f:f1:fa:0c:ee:92:ea:20:0c:c8:4a:
                    3b:7a:42:94:a5:9d:d0:42:a0:f8:eb:0e:6e:cf:47:
                    e3:1d:ab:82:8e:5e:2d:31:73:e9:06:dc:ea:80:a1:
                    12:a0:3d:fc:a0:32:32:6a:82:65:c1:be:b9:04:a6:
                    72:60:47:72:70:97:36:dc:4c:e7:47:83:46:1b:d9:
                    2b:21:e3:84:78:7f:57:9f:0d:eb:15:c7:5c:35:04:
                    13:29:2d:0c:3d:d1:62:c7:a1:28:f5:d8:31:1d:63:
                    d9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3A:C7:26:A5:63:23:4F:11:51:26:00:1B:BA:AF:72:19:9A:0B:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a53505-4c1d-4b62-a854-99ae3e6964ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:93:3b:1b:3d:e6:49:06:7e:e3:1d:3d:bd:88:dc:5f:30:ec:
         ea:4d:a7:c9:b7:da:d5:ef:6c:de:d7:c8:36:1e:ca:b8:b3:ae:
         99:e7:bc:31:b2:20:23:25:19:f7:b8:8c:4f:15:98:a8:e0:fb:
         1f:6a:9c:78:c8:d8:f1:5f:d1:e5:e2:78:51:f9:45:b7:b1:f0:
         15:c7:ae:cc:9e:5c:d1:f7:7e:42:3c:0f:3e:66:ec:3c:58:7b:
         6c:52:32:43:17:d3:1f:93:44:e8:7d:69:76:87:ff:ae:e2:ec:
         9f:27:a0:37:bc:d9:cd:ff:63:1b:e8:34:06:66:4d:3e:0e:9d:
         24:50:d3:6d:de:fc:ae:b1:ee:55:97:a2:9f:5d:f5:bd:cd:05:
         67:bf:b0:96:9b:3f:0f:d7:a1:59:12:92:46:00:1b:53:75:35:
         b8:03:66:bc:d3:c9:81:cd:b8:ce:b0:80:57:07:62:71:07:4e:
         b5:df:54:40:99:e3:2a:d4:9a:5a:0c:92:9a:0d:0b:12:e8:47:
         fc:99:27:73:3a:4e:fb:4b:43:59:07:91:0f:66:09:f6:de:ea:
         e5:57:7c:d8:c7:f3:fb:0c:a6:f2:7b:58:35:aa:41:03:ee:e0:
         4e:97:de:a9:51:8a:33:ad:5a:55:b6:1e:a0:30:5d:c2:65:72:
         a8:13:0c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 19:21:58 2023 by rpki-client on console-ams.rpki-client.org