Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15b9a390-e9e8-47a9-81ab-71973336f411.roa
File:                     15b9a390-e9e8-47a9-81ab-71973336f411.roa (raw, json)
Hash identifier:          veaOSWikQX7OiM05tPxpJB8COccDtRt4Ha90K3WPLfg=
Subject key identifier:   47:00:2B:CC:25:E8:35:18:9D:85:2A:F4:8A:78:E2:96:67:A4:BE:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       315D194AEFCE602DFE191FFA7BC4281D9EBC061E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15b9a390-e9e8-47a9-81ab-71973336f411.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        77.122.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5d:19:4a:ef:ce:60:2d:fe:19:1f:fa:7b:c4:28:1d:9e:bc:06:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=498c8488f6941258d74856b79a4ddc5c696b6a988f8c63b9c53245f8af7fc029, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:5c:ff:e3:90:f4:34:19:c5:d9:6d:05:36:
                    f4:67:cc:1c:f6:7d:55:50:50:8a:41:7a:6e:20:7f:
                    64:22:6d:0a:95:31:9b:7e:8b:d0:1d:c3:ce:6a:07:
                    ee:2b:2c:ed:7d:d5:56:3d:a2:f9:93:09:68:62:6f:
                    0b:53:f4:78:45:6a:ed:3c:07:96:8e:11:41:82:b3:
                    7c:2b:34:fe:f4:fd:79:b8:1a:0e:7f:bc:be:b3:13:
                    a9:59:a7:75:5f:c7:e9:46:bf:7e:50:30:e5:2c:02:
                    1d:34:84:49:81:97:59:5a:73:c5:17:56:9d:47:eb:
                    14:ba:52:19:fa:6c:cd:32:ab:5f:79:0d:70:86:32:
                    b9:56:70:13:0e:14:72:03:c9:7b:38:c3:b8:dd:39:
                    14:69:d3:06:11:1f:f0:fc:a7:c2:69:5c:ee:56:c1:
                    86:97:9e:32:50:6d:7e:00:86:6d:8a:cc:5c:70:28:
                    50:38:1b:dd:00:c9:a1:43:7e:8b:fe:e3:bb:81:bd:
                    f2:ea:10:c7:9f:59:2a:1a:24:c6:e8:ac:4a:f9:cd:
                    92:f5:22:b2:7e:47:6f:e9:d5:56:4b:af:89:d9:03:
                    12:bb:6f:47:5f:94:72:b7:07:a6:61:24:ec:52:30:
                    c9:b2:f8:d4:66:82:07:80:a1:15:84:5a:4c:29:a3:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:00:2B:CC:25:E8:35:18:9D:85:2A:F4:8A:78:E2:96:67:A4:BE:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15b9a390-e9e8-47a9-81ab-71973336f411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.122.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c9:74:f9:c0:47:2f:99:87:db:71:14:8a:bf:af:3c:04:37:31:
         fd:34:c2:59:cd:ff:29:b7:2e:77:64:ca:37:c1:e3:70:76:9b:
         82:cf:95:4f:b1:ce:be:51:e4:0a:c4:8d:74:ce:7a:89:40:ef:
         2e:1e:96:8b:80:76:71:f8:10:32:f6:b6:f7:33:aa:00:02:03:
         22:05:71:c2:de:28:e9:02:11:ea:a9:62:c0:79:54:94:b8:df:
         9a:09:39:33:8a:22:50:25:cf:c5:be:df:84:ff:77:ae:5f:4a:
         47:2d:a6:ae:29:25:65:ab:17:8c:98:22:f6:07:21:38:d7:86:
         ce:24:3b:76:c6:8f:26:e5:54:fb:a7:ff:1b:aa:eb:79:99:b6:
         97:63:03:90:bb:96:45:c1:95:83:14:c5:95:60:d5:fc:fd:ad:
         09:b4:b9:97:6e:32:08:f1:57:0c:d4:36:ef:2f:26:2b:89:b5:
         18:8f:95:20:7e:70:cf:e9:08:d8:b4:c0:90:ec:ff:19:b1:ce:
         be:ef:ee:70:dd:b4:b8:b9:50:46:d2:cc:61:1b:8b:9c:67:c4:
         81:ed:c0:f0:69:1d:dd:86:83:1b:1b:19:83:a1:b8:ff:7e:58:
         fb:16:17:dc:0c:62:51:6f:e9:af:6b:ee:23:a7:f6:be:2b:23:
         bc:cc:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:19 2024 by rpki-client on console-ams.rpki-client.org