Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa
File:                     1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa (raw, json)
Hash identifier:          fDJ0Vc01zWvNuLttiiy0XSFiYydnY8TMuBhcE+QYhiI=
Subject key identifier:   93:00:F4:25:39:29:61:59:EA:14:A8:0C:8E:3E:06:20:0E:78:23:8E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       352AEBD734EE4C798FFE2F63E2B81F519637095A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2a:eb:d7:34:ee:4c:79:8f:fe:2f:63:e2:b8:1f:51:96:37:09:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=c729b07680d7dace87ebf5255ae1f25c4a9c0be97539817174c5314ff0a5391d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:68:5d:e6:b2:c3:71:57:d3:a0:4b:8a:89:
                    ad:f4:54:97:74:21:fa:86:b4:2b:9f:45:88:32:75:
                    b2:4f:1f:80:20:8a:47:1f:b5:aa:ab:94:22:35:71:
                    de:55:0e:b5:df:f9:75:b6:ec:4f:52:01:5d:22:c3:
                    23:a5:73:aa:df:a0:cb:29:66:23:cb:a1:72:03:15:
                    de:39:e0:90:b9:27:95:16:6d:f2:33:af:80:f6:44:
                    30:0a:20:3d:0d:eb:b3:e7:78:ad:96:63:c1:1d:90:
                    56:2c:73:04:95:7b:22:aa:96:45:8c:79:0b:06:62:
                    12:5f:bd:7e:69:a3:a1:3a:b2:8d:69:b4:de:0a:30:
                    fc:5a:06:77:b1:56:d6:9b:85:a6:6d:49:94:18:cf:
                    9e:9a:2d:dd:8d:ba:36:22:05:05:6c:87:9a:ab:dd:
                    55:86:d0:9a:d6:78:63:88:50:78:bc:b8:fc:16:68:
                    5c:d3:1e:6e:36:38:f3:ef:f1:dc:4f:77:cf:d5:32:
                    ab:57:86:e3:d7:82:6b:ce:4a:36:b9:5f:8e:68:66:
                    6f:bb:ea:39:22:d1:1a:58:0a:3c:20:b9:59:5e:5d:
                    58:b1:14:7d:1f:9b:44:a0:ba:5c:7d:1e:37:72:79:
                    e4:80:9b:8d:78:db:26:25:44:a6:92:cd:9e:5a:ab:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:00:F4:25:39:29:61:59:EA:14:A8:0C:8E:3E:06:20:0E:78:23:8E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:f3:5e:f7:c4:7c:bf:7e:bc:d9:6d:dc:ea:26:61:d9:57:cc:
         2a:52:5a:ad:a4:0b:63:cf:94:09:7c:3c:f3:16:ec:58:61:4e:
         1d:05:0c:fc:e9:fd:db:25:fd:fd:b0:d8:08:10:0f:6e:15:3d:
         f3:2f:39:4e:0a:7f:36:d3:32:de:5a:f0:f4:e1:2c:af:cb:b3:
         56:25:44:da:af:e0:a8:f8:99:7f:95:cd:c2:de:0a:07:6a:bb:
         88:a2:42:6d:8a:4b:1b:97:9b:d4:08:d4:9f:dd:4f:aa:f2:e1:
         70:66:27:4b:5e:9e:a7:f7:2e:46:b8:67:91:43:6d:76:61:ea:
         0f:69:68:6c:74:23:6b:d5:bc:ca:c8:27:70:8c:f1:a3:8b:7d:
         18:91:e1:da:e5:ae:88:b6:c4:df:3d:10:c1:e5:c8:eb:6b:d0:
         c0:7c:8a:98:d0:5c:4f:24:36:70:15:ad:a8:87:cf:73:98:bb:
         61:b9:a7:4a:10:ba:be:07:89:c0:cb:d2:aa:37:20:40:a9:5c:
         39:cd:19:b9:27:04:26:a7:9c:78:13:ec:d0:67:bf:5d:bc:cf:
         53:25:35:c9:74:6e:db:aa:63:fe:16:81:f9:5f:bb:b8:93:34:
         22:19:fe:d5:30:1b:e8:b1:78:e5:0e:5e:78:50:59:73:9c:77:
         0a:db:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:07 2024 by rpki-client on console-ams.rpki-client.org