Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec2a25c7-03d3-41ca-9778-621ae3af6930.roa
File:                     ec2a25c7-03d3-41ca-9778-621ae3af6930.roa (raw, json)
Hash identifier:          DcA9qc5KrevloPbs3ImKTfk+SDzKt57XCE2jQaAlirU=
Subject key identifier:   13:4D:BC:31:F1:FA:96:B6:F9:FD:71:50:0B:60:62:8D:EF:18:DB:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       030F1816B19B97AC1A037F7956096F0E588D6FE8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec2a25c7-03d3-41ca-9778-621ae3af6930.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     6167
IP address blocks:        162.208.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0f:18:16:b1:9b:97:ac:1a:03:7f:79:56:09:6f:0e:58:8d:6f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=d1439245f77254cc77381065a66d4abbabee2d286b4611e56f885cf5b4c03789, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:c2:b7:1a:79:4e:d0:93:7c:10:e2:25:19:
                    fb:d0:6a:93:21:e7:6b:d8:09:54:1c:7e:1e:19:69:
                    87:14:a2:a7:0d:e1:94:3e:8e:fc:a4:ba:89:6d:44:
                    61:84:eb:8a:e3:e8:06:df:8f:05:11:79:0e:47:4a:
                    ab:f4:12:b8:3a:01:e4:4e:57:f2:35:de:bc:46:17:
                    e8:94:3a:d0:8f:98:85:70:b5:28:9d:25:15:7e:37:
                    62:2e:26:8b:fc:d8:a7:2c:40:4b:9d:3c:8d:2c:79:
                    fb:c9:d2:48:8d:74:f8:66:b6:6f:76:07:36:35:31:
                    b5:ce:5a:96:38:ab:29:e4:78:47:a5:42:bb:db:6d:
                    2b:65:c6:ad:44:15:9e:e2:20:54:89:9d:f9:30:0f:
                    d3:5a:da:44:34:e2:78:26:7a:0d:a1:e8:79:e3:53:
                    db:7c:35:f0:26:0a:ca:75:66:4e:51:67:4a:98:66:
                    4f:a1:b5:dd:d7:67:b8:05:97:cd:80:3d:80:66:bf:
                    f3:a9:82:7c:fe:e4:3a:2e:70:97:30:78:68:bc:b9:
                    df:18:49:ba:8d:8f:75:cb:80:30:83:b2:0e:08:86:
                    ce:4c:e1:92:6c:aa:5b:c7:b2:fc:f7:99:1c:ce:b7:
                    7d:9a:d0:2a:3b:9b:09:c6:e2:58:3c:09:9b:20:d8:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4D:BC:31:F1:FA:96:B6:F9:FD:71:50:0B:60:62:8D:EF:18:DB:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec2a25c7-03d3-41ca-9778-621ae3af6930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:71:ee:62:f6:37:0e:dc:e6:8e:f5:bb:8c:af:ae:1d:0e:8e:
         56:87:2d:f8:bd:4b:7c:4a:c1:d6:77:0a:f9:0c:8f:f6:2b:b1:
         4f:3f:67:79:d5:dd:dc:7c:5b:81:e5:7b:a3:00:f9:c2:11:4e:
         bb:e0:99:a3:84:c8:f0:2c:56:c6:71:1a:6e:bf:8f:a3:1e:62:
         e7:bb:35:8d:a2:b4:12:9e:77:b3:bd:ac:9e:28:59:a9:91:a4:
         20:58:fc:3a:6d:44:fe:b2:12:b7:b6:b8:49:c6:d9:e4:8c:2c:
         5d:54:ff:fc:96:48:8d:7a:f5:85:b3:88:db:c6:87:49:6e:dd:
         57:81:80:19:c1:ff:50:13:2a:70:99:6d:ae:82:95:13:1f:09:
         3c:52:30:b3:1c:07:0e:65:97:57:3d:4d:4a:cc:07:8c:c1:5e:
         87:8d:7b:21:c4:68:e9:44:36:fe:17:8f:b2:6a:dc:b7:cf:d5:
         aa:8a:53:19:fd:37:2c:7e:db:4d:5f:9a:06:f6:20:36:c3:f6:
         76:ae:e0:b7:9a:d2:fd:8b:dd:7c:0a:4b:d6:6b:73:75:19:c5:
         c8:2d:18:f9:5f:90:dc:c6:bc:78:3d:f1:d9:ed:d7:79:8f:50:
         97:4d:ab:d1:3b:7e:b1:79:cb:a4:c8:d9:16:29:cd:7c:ab:7e:
         a9:33:97:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:28:41 2024 by rpki-client on console-ams.rpki-client.org