Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa
File:                     15dd7280-6c64-4c5f-9920-b8e295ae5383.roa (raw, json)
Hash identifier:          jnMxmKknlwJbw/nocigB1SYXNaln8Ut64o+GzO6VaYg=
Subject key identifier:   87:8D:00:1F:D5:E1:5E:FD:CA:03:B0:06:F3:2E:31:C7:47:99:28:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       799F41D40D8C52ED482FEFE60CDBEDA42BD9B812
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9f:41:d4:0d:8c:52:ed:48:2f:ef:e6:0c:db:ed:a4:2b:d9:b8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=d9679af7788571d1f3256b1af67016883230c97a242e8f873e4b75536bab6f1e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:90:ef:b1:c3:e0:45:93:e6:c8:c4:2b:17:
                    e8:da:09:e1:10:6e:c3:68:9b:97:44:c2:5a:d4:ab:
                    01:d1:c6:10:18:5a:3c:ee:76:71:75:15:34:a3:f1:
                    42:e9:7a:70:c9:4f:ab:fc:19:69:36:96:2a:00:f6:
                    43:3f:0a:c4:61:68:12:9f:f3:3a:da:a2:d9:a5:40:
                    51:1d:1a:8e:f3:a3:f5:7d:59:04:cf:16:52:71:30:
                    f7:31:55:22:6a:82:14:a5:f3:99:83:5b:00:97:c5:
                    17:6b:b3:c1:b7:78:b1:1c:15:b0:2c:53:e6:5d:2f:
                    ac:b9:a6:16:9b:19:1f:bd:b0:7b:87:9d:f6:b7:d9:
                    3f:29:de:cd:26:43:59:9d:9b:a1:d2:7b:10:ee:ab:
                    89:16:9d:3a:18:f6:54:7b:13:1c:72:3d:c5:63:b6:
                    d3:84:32:73:1c:6a:cf:6c:21:1c:99:49:f7:0f:62:
                    bf:91:a8:c1:f9:81:6d:ad:aa:3f:47:7f:5c:4e:96:
                    0f:9d:38:d7:a3:f7:89:fc:e0:07:20:5e:02:4c:6f:
                    66:07:93:39:ec:ac:b4:0c:5f:e8:29:b2:36:58:51:
                    4b:29:f6:67:66:0c:20:68:ad:d7:75:68:bf:be:78:
                    9d:1b:1e:f6:b8:aa:cd:78:79:56:1e:01:dc:e9:df:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8D:00:1F:D5:E1:5E:FD:CA:03:B0:06:F3:2E:31:C7:47:99:28:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:e2:cb:da:77:0e:40:4b:18:0f:ad:a3:65:ca:07:39:9e:
         e5:ba:06:be:2e:6b:10:60:fa:7a:38:d1:2d:28:db:2e:28:a7:
         fd:72:3d:84:e8:a8:68:31:51:7e:a0:51:38:e8:5c:bb:95:0c:
         ef:6e:8e:0f:88:7f:99:4d:7c:b3:1c:b0:55:52:42:30:5c:5c:
         26:3d:01:d0:7f:93:d7:42:aa:d8:8c:0b:e7:18:a6:25:25:6b:
         0a:e1:b6:77:f0:5b:d8:43:e0:02:1a:62:08:51:13:ec:b4:c6:
         68:18:9d:c3:9b:12:02:92:94:17:46:f7:38:6f:2a:d7:4c:c8:
         a3:54:83:9a:ac:70:6c:a4:34:f8:c4:80:5f:b4:1d:52:f3:97:
         07:1a:46:87:6c:d5:0d:5f:0a:4f:76:bc:b7:71:07:82:f2:ef:
         11:92:36:8e:96:76:7a:40:9f:ba:56:83:90:89:d5:c6:c3:5a:
         97:91:7f:ab:4b:1b:37:94:21:f8:4d:17:e7:31:c9:ef:f5:6c:
         45:88:e9:93:39:d8:b5:ab:f9:e5:a8:a9:c5:e3:72:6f:60:08:
         c8:34:e8:16:cd:96:5f:66:a0:e3:da:4b:83:95:e2:2e:2f:39:
         e3:0f:93:d8:cf:54:b8:2f:60:6c:36:63:c4:56:e0:ab:13:53:
         7c:79:1a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:50:28 2024 by rpki-client on console-ams.rpki-client.org