Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18709896-04b2-4b4b-9539-f3fc250ae339.roa
File:                     18709896-04b2-4b4b-9539-f3fc250ae339.roa (raw, json)
Hash identifier:          qNb9d84rw4TisnY1LgtfNBi406zKU48QX+cFJnSP7hc=
Subject key identifier:   CE:6C:EF:E3:74:0B:02:0E:C7:EE:2E:22:79:0C:10:C6:04:3F:B6:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69B469BBDCDCB9DD5E501B350AF1665CEEB8CFC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18709896-04b2-4b4b-9539-f3fc250ae339.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b4:69:bb:dc:dc:b9:dd:5e:50:1b:35:0a:f1:66:5c:ee:b8:cf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=88e1b435f8465a2ceb6c3b2838ce262e8c5a42cfcd89307886ba0bb68578e6de, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:e4:f1:4d:35:36:15:44:96:e8:4c:0e:eb:
                    ff:4d:73:20:7e:c5:56:ff:0f:33:35:8e:af:72:c6:
                    bb:db:df:12:b7:92:0a:93:35:24:ac:90:d1:3d:c2:
                    81:9c:74:2e:0f:d0:fa:67:b0:9c:96:e4:e4:31:97:
                    ec:7b:e3:76:83:a4:f2:ab:e0:d0:45:0b:e2:aa:0a:
                    80:19:9f:4c:f0:b5:0e:24:66:d4:c9:ee:68:30:78:
                    9e:ae:0b:71:97:49:05:9f:d9:03:98:1a:eb:a9:0b:
                    10:61:b2:07:ea:e0:3c:4a:c6:cb:81:dd:9a:f3:f5:
                    51:10:94:86:30:6f:90:ab:c5:82:fe:e8:98:01:78:
                    be:d9:2e:6e:77:67:7c:02:8f:42:89:a8:c6:ef:aa:
                    eb:3b:0c:e9:40:00:8d:1a:27:66:8b:d3:30:c2:10:
                    4e:20:d4:98:94:c0:ec:2f:a9:41:ac:13:b4:fd:8c:
                    63:07:52:01:e6:c9:f8:c5:36:25:7f:95:15:ad:65:
                    6d:a2:cf:84:b8:1f:b2:95:93:9e:95:a7:f8:55:d2:
                    f2:99:3d:da:04:eb:6b:e9:7c:30:18:0f:88:74:ad:
                    9b:17:e2:bd:64:ac:3c:82:db:1f:6a:2f:10:fa:d3:
                    e4:09:7b:2b:4c:0a:f3:fb:f6:a1:31:ec:ed:98:cb:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6C:EF:E3:74:0B:02:0E:C7:EE:2E:22:79:0C:10:C6:04:3F:B6:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18709896-04b2-4b4b-9539-f3fc250ae339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:89:52:cf:ab:20:7d:a3:41:bd:85:90:ff:2e:bb:2b:f0:37:
         d7:1b:fb:c3:2e:8d:2f:be:d4:33:3c:30:e6:ab:18:14:a6:53:
         c9:5f:4d:b8:f0:9d:53:02:0f:51:99:e8:c9:20:5f:94:ae:8c:
         2a:89:52:f1:b2:48:eb:c6:18:e8:53:5b:f9:54:56:4e:85:68:
         ea:f6:90:16:22:e1:7a:53:c9:43:30:07:b2:89:d7:22:46:1c:
         ed:e1:15:af:18:45:29:13:6d:9e:24:58:c0:fa:c9:54:e3:9b:
         09:13:40:9f:1b:ab:90:29:b0:e6:85:d9:bd:8b:b6:e2:fa:39:
         a4:07:ee:ca:b0:a4:e2:54:d5:7a:69:0f:d1:35:38:a6:6f:4e:
         ff:84:0b:61:d2:f8:34:89:48:06:9b:7e:a7:32:8e:5c:48:c4:
         ba:8d:23:d5:5c:23:bd:8d:a2:3d:c8:d8:f6:05:87:86:5f:39:
         3d:85:04:c4:ab:4a:a4:6d:55:bc:ab:44:c6:74:c8:91:59:4f:
         ce:97:33:0f:47:03:07:e8:f4:f7:d5:f1:d8:b9:54:13:91:e8:
         4e:54:1f:ec:f5:3b:3d:c6:1a:73:29:ee:67:52:ff:fd:aa:6a:
         e9:2e:20:25:1c:75:f0:d6:6c:e2:5b:ad:21:ab:95:3a:18:6f:
         fc:e2:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:14 2024 by rpki-client on console-fra.rpki-client.org