Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb88fe8d-5b32-4129-8f8e-765f02905354.roa
File:                     eb88fe8d-5b32-4129-8f8e-765f02905354.roa (raw, json)
Hash identifier:          E8LtAZJWgeWSplXL/WDByaiOZ7+vLKBupeiZTghsFHw=
Subject key identifier:   9E:81:92:CD:AA:C3:22:15:F6:5C:4F:01:9A:91:59:7F:42:C3:57:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D5A1661A1352360291253D5E7BFC828607E82D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb88fe8d-5b32-4129-8f8e-765f02905354.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        40.229.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5a:16:61:a1:35:23:60:29:12:53:d5:e7:bf:c8:28:60:7e:82:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=110a8a0df2bf32caa3b806d2564671ecd4366da1aa8ddd8dcdd3b3d8a9e9b8dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:2b:81:47:0e:99:a2:6d:09:d1:28:40:d1:
                    5c:0d:2d:c3:9a:41:84:b2:cd:53:a0:e8:38:f5:73:
                    a1:57:87:b7:a4:29:9f:d4:b9:38:6d:8c:03:c9:7a:
                    20:52:0c:15:00:29:8a:c9:77:b2:6a:7e:ea:4d:98:
                    de:32:51:3f:21:57:ef:60:9f:4d:1b:d7:44:d5:df:
                    5e:e0:10:8a:fd:4c:86:d4:93:1f:73:2f:52:fb:66:
                    dc:c2:9d:9c:cf:ac:5a:4f:92:89:d9:b6:2c:b2:d3:
                    78:24:71:79:f4:7a:d6:e2:ef:b2:f7:11:dc:fe:2d:
                    04:9c:67:4b:e4:70:e8:be:71:b2:59:7c:61:67:ea:
                    2a:a7:f1:48:0f:7c:01:27:15:97:34:b4:a0:93:3a:
                    fa:a6:4a:0a:9c:5b:72:c3:d4:c1:5b:9f:89:5a:eb:
                    2a:af:d3:17:02:38:1a:ac:19:2b:92:35:3e:88:22:
                    8d:8b:70:62:5b:7c:62:43:ce:41:10:46:a1:c9:7b:
                    40:16:8e:be:70:9b:e9:80:fd:4f:6f:de:6d:45:fd:
                    cf:be:3a:2b:4d:4d:63:1d:db:56:93:c3:2f:56:a1:
                    cd:fa:7d:08:32:2f:fd:da:7f:ec:fc:9a:6b:fb:b0:
                    1a:da:cf:5a:ed:e9:46:68:78:04:71:96:06:02:28:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:81:92:CD:AA:C3:22:15:F6:5C:4F:01:9A:91:59:7F:42:C3:57:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb88fe8d-5b32-4129-8f8e-765f02905354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.229.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:dd:5d:5d:58:25:8a:50:e1:57:fb:c2:1d:2f:ed:0a:f5:
         b4:eb:d2:62:42:27:e5:8a:79:72:42:b9:ef:1d:ff:60:3b:54:
         43:93:90:d2:9c:bc:a1:6e:da:d5:b5:54:01:5f:03:5c:0b:61:
         93:49:1d:aa:6e:37:86:0a:dd:bb:18:f2:42:58:9f:bd:fb:84:
         9b:47:be:50:30:01:31:42:77:7f:6f:94:77:a0:66:7c:7e:54:
         61:fa:12:da:9a:bb:e7:1e:ab:f8:5b:bc:6d:17:3c:89:55:37:
         c0:78:30:3d:52:db:8c:9a:f4:cb:86:2c:ac:ec:63:4e:b9:57:
         56:f9:ab:b8:96:85:c1:58:05:c7:e2:35:92:80:e9:35:fa:6e:
         28:47:d5:eb:0f:45:4e:f4:65:d7:3e:f2:c1:b0:42:f6:c9:1e:
         a7:8e:95:62:1c:f9:ce:56:d4:a7:50:19:23:10:0a:eb:6e:ff:
         53:69:34:db:1c:00:8d:36:b1:b1:1f:9d:a1:d5:ef:7b:f5:7c:
         ed:de:aa:9c:6c:fe:b2:c2:3e:b6:fa:09:db:a3:70:1b:08:2c:
         f7:51:2e:a1:8c:a2:e6:3e:d0:bf:67:9d:93:56:44:6d:85:08:
         91:9f:66:9d:41:f2:bd:78:70:7a:1c:d6:02:17:16:29:90:79:
         ef:87:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:22 2024 by rpki-client on console-ams.rpki-client.org