Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fabe41e0-da56-423e-bc4e-5300b28e5d64.roa
File:                     fabe41e0-da56-423e-bc4e-5300b28e5d64.roa (raw, json)
Hash identifier:          uW390Yz3U3RMkydy1IL8R4VOauZ/utAaWup3Bq3HLAA=
Subject key identifier:   BE:8B:6E:84:B8:35:B8:55:12:FE:5C:32:63:A8:6E:43:7D:66:6F:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22DDE48F07A74777718CE23A616B12D54BDE6BBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fabe41e0-da56-423e-bc4e-5300b28e5d64.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        57.196.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:dd:e4:8f:07:a7:47:77:71:8c:e2:3a:61:6b:12:d5:4b:de:6b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=a06b131d00ca70641c6fb1d5a86a564dbbcb5176054068716fe0f89112faa8cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:67:48:ed:78:07:e0:09:dd:8c:51:06:19:
                    8c:9e:01:89:43:af:40:7c:00:0b:79:cc:1f:18:dc:
                    1c:f3:e0:93:2a:c1:35:97:b6:82:82:91:46:f1:fb:
                    82:57:8b:61:90:c4:ff:2b:d3:9e:a9:95:05:9e:1d:
                    c7:b3:d8:1a:56:4b:bb:e5:49:fb:12:3b:a7:8b:33:
                    4d:bd:b2:d6:39:89:ad:3d:9c:60:96:11:ed:74:94:
                    4d:63:aa:a8:10:cc:9d:d5:3b:21:7e:8c:2e:4d:c1:
                    a1:f2:22:bf:26:0a:24:53:a2:1b:cc:3a:de:fb:7c:
                    f5:c0:03:e2:8e:0a:c7:b1:f2:59:9f:58:f7:58:e8:
                    ee:0b:68:89:90:21:00:7c:94:dc:13:b8:fc:ec:86:
                    c1:48:9b:4e:29:19:ca:a1:44:21:51:64:91:33:0a:
                    14:ea:f0:bf:21:f5:0c:dd:2e:61:bb:4b:7c:0d:0d:
                    21:d9:e8:c9:b5:74:27:47:51:df:0b:fd:a9:50:ea:
                    55:75:fb:e0:e1:87:43:a7:90:f3:68:a3:eb:a7:90:
                    fe:b8:14:c1:40:22:a0:41:96:3f:ae:82:46:26:e1:
                    96:c6:07:43:9e:b8:60:fe:c4:7d:42:d6:c6:a1:c7:
                    21:ff:0a:50:33:2b:32:66:21:b4:88:06:8f:28:c3:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8B:6E:84:B8:35:B8:55:12:FE:5C:32:63:A8:6E:43:7D:66:6F:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fabe41e0-da56-423e-bc4e-5300b28e5d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.196.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:32:b1:df:00:9e:b6:12:0f:7a:a4:bf:7a:ae:00:3a:a7:a6:
         57:a1:b9:08:b7:e7:47:bf:51:57:dd:71:1b:c3:09:81:40:9e:
         3b:16:5b:ad:d0:56:3b:fc:48:c9:e3:a1:69:c5:18:71:ef:ff:
         d6:e5:79:40:a8:a6:60:b0:1c:7b:9e:2e:4d:f9:1e:35:fc:38:
         9d:14:1e:da:76:03:a7:a7:58:08:f2:5f:84:dd:6e:15:74:20:
         ef:fb:3a:33:70:76:73:e2:57:5a:aa:da:be:e7:37:17:6d:fd:
         2f:9d:b5:02:0a:40:ed:ee:f5:11:4a:b9:82:92:4c:f1:52:ea:
         90:54:91:96:46:fe:54:4f:bb:c3:18:64:f6:0a:a7:ad:48:7f:
         df:66:e0:2a:04:53:db:2c:8d:44:89:11:8f:db:14:33:e2:67:
         01:d7:3e:1a:2e:bd:20:d4:21:6d:9a:33:6a:1b:8d:56:19:8e:
         cb:e4:98:b6:c0:84:c1:e9:62:ce:67:31:be:6d:70:65:1f:e4:
         8e:3e:e5:cd:ec:b8:48:f8:fb:65:1b:ff:05:e6:61:bd:5c:22:
         d6:02:5e:1f:f4:f3:12:bc:69:71:71:2f:67:93:2a:93:82:3b:
         2c:b5:f5:58:dc:fa:0d:da:35:96:42:b1:e0:d6:73:b3:2e:b9:
         3c:7e:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:27 2024 by rpki-client on console-ams.rpki-client.org