Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe3b2250-6416-4bd0-8836-136078e6dbdb.roa
File:                     fe3b2250-6416-4bd0-8836-136078e6dbdb.roa (raw, json)
Hash identifier:          hTPxfgoMtgsdqjc98CZC57vGQgjnfQTt7Cbug4+RneU=
Subject key identifier:   11:16:8D:D3:10:84:8A:A5:C8:20:38:35:7C:E7:DF:83:C7:8E:FC:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B0F1BF88853358E59FC2019898E654E3466A195
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe3b2250-6416-4bd0-8836-136078e6dbdb.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        216.198.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0f:1b:f8:88:53:35:8e:59:fc:20:19:89:8e:65:4e:34:66:a1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=4289e5ed23d2caac5fc77abb1d8939ecb28f4df92e3aed97ccba4c6badcbe25e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:5f:c0:7c:bf:d9:d9:8e:a1:e4:d3:81:b0:
                    b3:f7:02:d7:ce:92:9d:ea:20:64:af:2f:0a:6f:57:
                    32:68:fa:82:11:d3:68:70:d7:fa:f6:2f:ca:8c:d2:
                    c8:0e:02:d1:3a:0b:ee:85:1f:df:9b:d9:bb:99:3c:
                    af:02:cb:49:05:73:6d:0c:44:9d:35:8a:48:d5:a2:
                    0a:44:fc:b5:e8:f5:0e:5b:3c:d2:30:b7:44:72:8b:
                    f3:72:a4:04:63:51:f9:ba:23:9d:d9:a8:5c:0b:c2:
                    23:ae:97:1f:a3:ed:d4:b8:38:b9:80:9b:d3:1c:a6:
                    11:92:a3:11:d0:9a:76:18:36:e4:b0:4e:c7:f5:e8:
                    b5:f2:13:ee:7e:3b:79:5b:9b:e9:f7:8d:68:93:cf:
                    cf:1c:1e:47:46:27:47:fb:d7:c4:44:04:82:63:1c:
                    7b:55:52:3a:ac:b4:21:71:43:2f:38:f1:a3:dd:c6:
                    44:e1:37:f0:ac:e1:1f:25:56:e5:a5:69:3e:75:27:
                    a0:79:49:48:0c:16:cf:b8:99:68:97:ec:95:d7:4e:
                    1f:89:74:6d:82:96:69:fd:7f:a5:d2:f5:4f:7d:a8:
                    95:22:1d:c6:bb:62:10:c6:cf:68:bf:b3:2f:51:8b:
                    60:cc:e3:4e:5f:cc:5c:99:61:d0:a7:29:77:08:8e:
                    5f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:16:8D:D3:10:84:8A:A5:C8:20:38:35:7C:E7:DF:83:C7:8E:FC:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe3b2250-6416-4bd0-8836-136078e6dbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:af:70:3b:50:df:03:f4:85:56:ed:1e:69:6f:a8:09:92:d4:
         bf:ec:76:7d:f9:8f:68:43:6b:db:8e:15:43:46:02:1b:0c:0c:
         c2:5c:86:46:1b:bc:6d:36:71:49:e5:c0:b8:51:66:a3:7c:7a:
         fc:f4:5b:1f:14:85:01:57:8a:5f:5f:1d:26:1f:7c:21:1c:9c:
         d6:59:ee:7b:e6:c3:07:81:aa:41:f1:12:a3:5b:65:08:3c:7f:
         10:f9:79:e2:2a:24:47:3e:e6:65:45:4d:34:42:3b:8c:fb:0e:
         82:46:16:c7:1d:02:af:47:72:0c:11:fa:21:78:99:e8:f3:9f:
         06:82:76:0a:0d:fb:98:05:80:e0:18:e3:3f:f9:7f:24:08:fc:
         18:15:66:b6:6d:a4:8c:61:44:f3:a3:a0:9f:7e:a7:8a:10:96:
         43:b4:b2:3d:fc:ec:cc:64:98:a8:1c:40:2d:b9:d5:fe:e2:16:
         78:c9:6b:9f:b3:1e:8e:3b:39:d1:5c:a4:b8:0d:57:bf:ae:ce:
         34:a2:63:97:ee:16:2f:37:68:55:f9:73:62:20:fd:94:e3:a8:
         7b:a2:41:28:38:eb:4b:4b:fc:12:9d:73:6d:62:70:55:3b:95:
         db:d9:f4:4d:fd:61:37:07:0a:79:b5:ab:28:31:d5:6e:5b:77:
         4a:ba:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:11:40 2024 by rpki-client on console-ams.rpki-client.org