Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f15ca992-c3bc-475b-b0e3-d4bcb678df5f.roa
File:                     f15ca992-c3bc-475b-b0e3-d4bcb678df5f.roa (raw, json)
Hash identifier:          nY7CJvDxlJJjsajO9VG8fPeLtkRCRoW0NIC2V359xlc=
Subject key identifier:   84:28:E8:FE:EB:82:4A:D7:77:66:E6:CC:6D:59:E5:7B:90:6C:44:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       363B7136974CC55E48D13F2FA689EB21A874B9EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f15ca992-c3bc-475b-b0e3-d4bcb678df5f.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        182.29.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3b:71:36:97:4c:c5:5e:48:d1:3f:2f:a6:89:eb:21:a8:74:b9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=82f67708e624f57710d5d5417f6bf103dd826e7773832da3b72b059db97e55c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:c9:0e:c2:25:40:50:59:33:d0:a3:43:87:
                    36:b9:8f:a8:34:52:dc:82:21:ad:4e:2d:bb:39:43:
                    48:4f:a8:bc:e5:e5:7c:bb:45:39:53:dd:29:34:7b:
                    d4:23:f8:f3:b7:53:fb:fa:a9:58:ad:d8:14:ab:6d:
                    8c:aa:5b:72:91:06:d0:79:11:0f:3f:50:cf:e8:eb:
                    27:5a:7f:17:4c:26:ad:84:fc:ee:44:e1:0a:58:5e:
                    8e:9d:fd:17:f8:0f:ea:85:07:2c:35:a2:0e:3b:5f:
                    68:a0:00:a6:9e:52:ca:04:e3:6b:dc:99:b1:1c:23:
                    01:53:7d:a6:91:a5:72:54:fb:f7:36:4a:8d:34:0a:
                    87:a9:ab:c6:87:fe:9a:43:13:18:3f:55:97:de:13:
                    f1:e4:c9:e3:fd:22:29:e0:12:b1:6f:bd:e0:f9:a5:
                    40:f6:9b:5f:d8:45:6e:ea:35:04:61:21:f0:ba:06:
                    f8:bd:54:ae:9b:c2:94:fc:10:53:aa:25:ac:49:cd:
                    ca:de:33:d9:68:32:29:b0:ea:1e:be:5f:a0:56:d9:
                    f1:a6:78:05:eb:0d:00:2c:6d:2e:bc:ce:6f:f8:b0:
                    9a:b5:b1:5a:06:60:29:4f:d5:ad:d8:e4:94:82:15:
                    b6:69:ea:5e:7a:ef:60:eb:04:6f:51:b9:9b:43:2c:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:28:E8:FE:EB:82:4A:D7:77:66:E6:CC:6D:59:E5:7B:90:6C:44:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f15ca992-c3bc-475b-b0e3-d4bcb678df5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.29.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:1f:df:10:21:94:e0:63:3c:fc:3a:3a:7b:e4:6b:76:c2:74:
         7b:16:c4:81:cb:88:9e:07:d6:e2:e2:02:00:0f:c8:44:9c:a6:
         40:0f:cd:92:b5:97:0d:23:c7:c2:53:11:8b:6c:b5:0b:47:fb:
         be:a5:14:50:0d:93:3d:84:77:9d:35:d3:0c:af:1f:cb:37:73:
         2f:bc:7c:b4:be:f5:d3:80:5d:d7:67:3c:79:e0:9c:d2:39:5e:
         8a:4a:a5:76:ca:5b:4f:33:a5:58:ac:2d:0d:77:72:53:ea:26:
         1c:0d:1c:11:e5:db:b4:8c:77:29:81:e4:08:33:5e:69:58:f9:
         e5:ad:3b:08:1a:43:d3:a6:11:14:dd:8f:a9:5e:35:cf:47:66:
         80:85:81:c7:73:3a:0f:52:67:38:3c:4e:27:80:b0:83:b0:f2:
         15:d4:2f:c1:4a:b1:56:57:86:5d:bb:c8:b7:cb:8e:99:9a:83:
         69:eb:de:5c:c2:cb:08:46:be:86:57:30:d2:d8:03:85:1d:20:
         94:ea:8d:25:da:96:e5:fe:61:db:99:04:66:29:54:92:9b:c6:
         ba:9b:9c:c8:46:c9:f1:01:e6:cd:02:ac:5b:57:b7:47:43:aa:
         01:df:6c:a5:7c:ca:c1:f3:43:ef:93:e7:15:22:6f:20:38:5b:
         8e:a8:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:26:34 2024 by rpki-client on console-fra.rpki-client.org