Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020877c1-b52c-4a94-8da6-3757617e3251.roa
File:                     020877c1-b52c-4a94-8da6-3757617e3251.roa (raw, json)
Hash identifier:          bgHF+TZkCrYlMpedKYl7Trj4N+B9+dA94asl5uzW/3A=
Subject key identifier:   32:F7:5B:57:E1:BA:59:DB:E0:F2:CC:08:CF:9B:99:42:5E:EF:F4:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F46802DD21F36EF7948C79901E4C4BFED80FAA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020877c1-b52c-4a94-8da6-3757617e3251.roa
Signing time:             Fri 07 Jun 2024 00:00:00 +0000
ROA not before:           Fri 07 Jun 2024 00:00:00 +0000
ROA not after:            Fri 12 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.83.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:46:80:2d:d2:1f:36:ef:79:48:c7:99:01:e4:c4:bf:ed:80:fa:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  7 00:00:00 2024 GMT
            Not After : Jul 12 23:59:59 2024 GMT
        Subject: serialNumber=8cfcc5fe272a611f5f97fa10ba2ce86e72b1dbd19ff6bbf40630e878355f6877, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:fd:c4:e3:11:01:5f:7e:32:31:b7:d1:07:
                    c5:b4:a4:2b:c2:a3:e3:f5:c3:b3:68:cd:48:c0:27:
                    e8:33:a9:be:3f:06:d8:d2:ad:d6:04:87:42:65:77:
                    5d:96:9a:61:d1:b5:b9:6d:7a:c1:b6:1d:66:e0:1a:
                    10:0a:43:7c:6c:c0:ea:d5:bf:4b:76:5a:e0:d2:77:
                    d3:0b:7a:e3:13:12:bc:39:b3:ce:a4:f9:af:bf:dc:
                    4b:af:d9:f1:23:3a:44:3a:c5:c7:cb:16:1f:99:5f:
                    a6:79:b1:5e:5d:25:91:75:3e:f7:db:f7:50:c4:6f:
                    56:96:bc:46:9a:24:65:e3:e3:9f:d0:03:b2:ea:e5:
                    d1:10:be:78:3e:7f:e5:8d:f7:06:df:e0:69:7b:76:
                    40:77:62:9b:6e:2f:0c:78:29:4b:4b:f4:29:97:f1:
                    54:d3:d2:00:fd:c5:29:1d:cf:ec:f1:38:dd:ac:0d:
                    99:b3:68:f0:4c:d3:41:0d:85:04:c9:24:8c:22:20:
                    e3:1a:c0:54:f3:db:86:fb:29:48:1b:f5:44:d0:b7:
                    b8:8c:35:b5:19:e1:fd:85:70:59:cb:cf:e2:87:08:
                    63:fe:ff:70:bf:ef:4d:ea:5c:e7:eb:79:88:ff:c1:
                    98:db:ad:1b:e2:ef:14:96:ee:67:08:b9:c8:57:a4:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F7:5B:57:E1:BA:59:DB:E0:F2:CC:08:CF:9B:99:42:5E:EF:F4:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020877c1-b52c-4a94-8da6-3757617e3251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:1f:73:42:3f:8a:92:88:34:3e:fd:63:c3:ab:a5:32:9b:eb:
         c4:26:8b:b1:d4:7d:ae:e8:28:fe:00:be:84:3b:44:4a:e8:b7:
         b3:30:2f:74:3e:b1:96:e1:14:1f:45:2a:a4:f2:10:26:2a:80:
         e1:7b:70:69:31:48:f6:c5:33:34:e0:de:94:2c:53:60:5f:5d:
         f2:f9:63:1b:c5:d4:72:76:8f:e4:13:93:af:e1:ff:cb:2c:ae:
         32:fd:b3:bb:3d:a4:06:64:1e:bb:7c:70:ee:7b:46:c6:99:6d:
         d0:f7:95:23:cc:16:03:84:63:86:f3:12:92:5e:71:71:78:a0:
         68:60:65:d9:ce:73:6c:eb:b6:81:a5:c6:e2:2c:a5:8c:f9:a9:
         72:58:d9:a7:9a:6e:71:36:3e:8b:ed:9d:0b:37:fd:af:6e:9c:
         be:52:d7:54:6a:33:de:62:5d:55:cd:25:fb:bd:a3:5b:38:5e:
         ca:a7:b5:f7:f0:d9:31:d2:f2:29:19:41:5e:5c:88:9b:7c:58:
         28:d4:ee:94:2d:30:d2:e8:3b:87:86:97:1d:f1:9e:46:34:8f:
         bb:99:75:47:df:fd:62:72:4a:6f:b1:cc:8c:8c:d8:cd:87:2a:
         62:e8:f9:49:63:c3:d3:2e:a7:9d:f9:54:08:17:ac:5f:33:47:
         cc:a0:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:09 2024 by rpki-client on console-ams.rpki-client.org