Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10c5897d-0a1d-4280-ab6b-bc9175ad6835.roa
File:                     10c5897d-0a1d-4280-ab6b-bc9175ad6835.roa (raw, json)
Hash identifier:          MdiHsswOX1DpjXcA0ClndLWMFsHQry1/ALngxGRRFDc=
Subject key identifier:   C8:BB:3B:18:31:C1:5C:5D:CF:2B:AC:F0:38:59:4D:B3:83:0F:9D:73
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       62B15358A159F62EF2FD8B803EB6F157FB711D6F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10c5897d-0a1d-4280-ab6b-bc9175ad6835.roa
Signing time:             Fri 30 Aug 2024 00:00:00 +0000
ROA not before:           Fri 30 Aug 2024 00:00:00 +0000
ROA not after:            Fri 04 Oct 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        13.248.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b1:53:58:a1:59:f6:2e:f2:fd:8b:80:3e:b6:f1:57:fb:71:1d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 30 00:00:00 2024 GMT
            Not After : Oct  4 23:59:59 2024 GMT
        Subject: serialNumber=9fb9857baf3faaec14c8f61963a914f0f14cb0c029ef2ed2f253e8e6bcc98b8a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:c7:a0:62:87:1f:38:78:34:6c:41:60:3e:
                    a2:ba:9a:44:5a:33:5d:95:96:6e:60:ea:16:69:d6:
                    5d:9c:64:42:32:cd:b2:d1:a7:ae:51:00:a4:f0:a6:
                    ee:77:5f:95:65:b7:ab:4b:c7:de:fd:09:52:f9:06:
                    ea:25:73:b3:b5:9d:d3:bd:48:ae:27:98:b1:39:00:
                    a7:56:93:66:2b:f0:7a:49:02:37:6f:b2:c3:79:a9:
                    d9:7a:e9:44:f7:f5:6f:a6:5a:44:4f:31:60:95:a2:
                    b9:47:50:fa:3b:4b:91:1a:4c:71:b2:23:a6:b8:8f:
                    13:f8:57:fb:53:aa:de:84:93:cd:3f:f5:0c:4d:5b:
                    f1:9f:fd:ca:7b:b0:70:ee:47:d8:0d:77:7a:52:1a:
                    43:19:9c:49:44:ec:8a:e9:d0:21:60:91:e8:79:b4:
                    ec:45:1c:db:ee:99:76:79:e5:35:96:dc:ca:a7:ad:
                    54:4d:f1:df:55:e0:e0:97:18:65:db:29:76:66:36:
                    92:47:cc:66:72:2f:fd:35:8f:1f:9c:4f:c9:48:30:
                    ca:45:db:eb:94:38:b7:35:40:9b:0a:09:97:ad:04:
                    08:ba:15:b2:75:93:13:9e:9b:35:74:3d:9a:33:58:
                    a9:5f:dc:7e:68:97:52:5c:36:b9:72:a3:87:13:1b:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BB:3B:18:31:C1:5C:5D:CF:2B:AC:F0:38:59:4D:B3:83:0F:9D:73
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10c5897d-0a1d-4280-ab6b-bc9175ad6835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:5d:5d:2c:3e:26:b9:94:d0:aa:f0:45:d9:80:ab:ba:4b:23:
         f0:94:1a:6d:7f:02:96:f5:cc:96:42:7f:84:27:77:2b:95:21:
         1c:90:5a:92:5a:98:f7:c2:f7:01:7e:f4:49:60:82:8e:ca:cd:
         7e:32:61:8e:12:97:17:a1:68:6e:d1:e3:2b:58:ab:1f:1d:cc:
         a0:57:e8:9b:cc:c2:df:0a:30:b4:a6:f3:ad:9d:fc:c5:cb:ed:
         bd:02:cb:09:83:69:3e:57:e7:9c:76:6f:cf:c2:66:d9:59:30:
         41:d4:4f:7d:ca:6d:da:ac:8c:0a:92:90:b7:b8:5e:c7:e9:a2:
         6c:ca:89:bb:ea:ed:f1:d6:06:89:4d:9b:b7:b0:fd:ef:1a:88:
         6c:0a:48:6d:fa:69:87:5d:5a:92:15:1a:48:93:13:a7:d2:56:
         45:49:6a:d1:3c:ad:eb:25:84:e8:08:54:f5:cb:e4:1e:2c:0c:
         9d:6c:e0:90:61:50:43:65:9a:67:eb:d6:e4:8f:7d:60:10:fe:
         5b:23:b2:a3:7a:02:1a:f2:ec:26:29:62:dd:59:55:11:c4:c7:
         52:68:e8:ce:45:87:1d:1b:46:48:41:87:f0:fe:fc:11:57:1b:
         12:46:41:0c:55:cf:99:49:a7:2a:b0:f7:a9:a8:2c:88:98:22:
         f1:2e:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 00:39:58 2024 by rpki-client on console-fra.rpki-client.org