Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8085f81-a4ec-4915-ab79-d097d76b60bb.roa
File:                     f8085f81-a4ec-4915-ab79-d097d76b60bb.roa (raw, json)
Hash identifier:          bkERGzGT/UU6R4fdAteiu7LA0Alw1KIHnCcxdx79RhE=
Subject key identifier:   44:48:95:77:43:48:85:BD:70:9E:60:68:73:C2:DF:F6:7B:92:B7:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       136F2203104C6F3059DCE9B6E42A91F75CDB0D4D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8085f81-a4ec-4915-ab79-d097d76b60bb.roa
Signing time:             Tue 19 Nov 2024 00:00:00 +0000
ROA not before:           Tue 19 Nov 2024 00:00:00 +0000
ROA not after:            Tue 24 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        117.18.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6f:22:03:10:4c:6f:30:59:dc:e9:b6:e4:2a:91:f7:5c:db:0d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:00:00 2024 GMT
            Not After : Dec 24 23:59:59 2024 GMT
        Subject: serialNumber=dd533a79c867b84f84882bb15b0bd02ca8fcc40fa0ad246b59847ddbdc82fb4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:bc:10:e4:f4:2a:5e:ef:ea:ee:44:56:77:
                    37:6b:1e:36:52:66:f9:21:46:1e:10:7f:a9:c2:0c:
                    d9:e9:ca:c0:55:5c:b2:ad:40:6c:d7:ea:12:f1:7e:
                    91:c0:c8:37:c0:2d:ed:a8:51:58:df:f1:a1:4e:0c:
                    fa:b8:ca:20:8c:76:2b:42:78:a7:39:29:12:65:c5:
                    a5:db:0e:59:1d:61:d6:b6:fd:50:f5:65:6d:37:42:
                    4e:ca:b8:1a:96:86:f6:78:99:d5:0f:0b:7d:cf:41:
                    b4:fb:35:9c:93:5c:64:fe:49:20:74:c2:0d:e8:7b:
                    dd:32:2a:d0:55:92:4f:fe:44:3e:b3:6c:68:0d:51:
                    f6:e7:0e:38:8a:70:2e:10:64:e3:3d:ef:95:c0:36:
                    73:93:84:0c:5b:47:a8:d1:32:35:69:e7:36:71:2e:
                    e0:ff:28:60:d2:2b:ff:36:37:2e:93:80:24:f8:49:
                    05:c1:41:15:9c:d7:a3:cc:97:48:e5:80:99:0d:7b:
                    2a:bc:3b:b4:13:ee:d4:7e:33:11:c2:6d:27:ed:a5:
                    db:ff:79:fa:28:97:66:e6:ea:0e:de:b1:42:39:29:
                    b6:c9:f9:f2:03:ed:1e:68:b7:eb:fc:0c:22:44:af:
                    6c:86:f7:30:64:9f:2a:41:89:e8:d0:a6:cd:65:21:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:48:95:77:43:48:85:BD:70:9E:60:68:73:C2:DF:F6:7B:92:B7:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8085f81-a4ec-4915-ab79-d097d76b60bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:d2:55:1a:90:6a:19:cb:5d:89:90:80:f2:14:66:2c:57:87:
         1c:62:07:fa:bb:47:2e:0d:c7:e3:84:07:68:1f:54:e5:ac:1b:
         a0:e9:d2:25:fa:39:87:44:87:20:8d:3d:9c:0e:ff:37:30:be:
         ee:b9:f7:40:b7:1e:ff:f2:df:53:e8:f3:7d:7e:eb:42:f7:ef:
         c0:06:f3:83:f4:c9:4a:2d:ba:4d:0d:7c:50:c5:5d:bd:c7:f1:
         4a:c5:a8:65:46:80:48:99:25:a6:45:51:a6:fd:9c:d6:a7:87:
         42:8d:e1:c4:26:5d:c2:e7:a3:24:ac:cc:fe:9e:9c:d3:a9:9a:
         65:45:6d:28:81:3f:21:98:c0:3b:c2:5b:53:dd:c9:b7:1c:40:
         fd:ce:8d:f4:4a:2b:2e:6a:2f:fb:5e:9a:99:74:f6:b2:93:2b:
         63:dd:a7:4e:a7:5c:47:89:85:0b:7e:b7:3b:bf:92:d9:1b:c1:
         ea:fa:01:06:00:89:3f:7c:61:25:d3:a9:b7:ab:05:e8:a7:b1:
         76:03:91:08:2b:d7:3d:92:5f:8b:da:9f:87:be:42:c1:81:79:
         10:fa:77:9e:47:69:a0:19:54:49:7f:15:8a:55:37:f3:c7:49:
         77:7f:1f:89:71:30:b0:02:f7:ad:0b:9c:ff:80:26:8f:de:0a:
         0b:92:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:11 2024 by rpki-client on console-ams.rpki-client.org