Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a80fd0-1d05-40ef-96b9-bc2d39948a88.roa
File:                     34a80fd0-1d05-40ef-96b9-bc2d39948a88.roa (raw, json)
Hash identifier:          Ip7Kj7vO+xvNSH9rYGqmgBdLQ6ZgjZnduXc7X1O8KCY=
Subject key identifier:   13:43:A2:4D:E0:F8:00:0E:46:E1:F3:35:0E:78:B8:FF:A5:10:73:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FBD6E890D4329C536C931DDA1BEB9F8A2C29365
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a80fd0-1d05-40ef-96b9-bc2d39948a88.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bd:6e:89:0d:43:29:c5:36:c9:31:dd:a1:be:b9:f8:a2:c2:93:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=517bbbb6338782c8d66971b5117b6ba3b6edf849fb8f8858dcc16cd1386f3889, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:3b:09:00:bd:92:8c:ba:b8:05:3b:c1:82:
                    e8:37:cd:b4:56:11:49:a9:b7:a1:cc:d7:e1:aa:17:
                    b5:43:ef:1c:f1:ff:c2:79:ae:fa:70:31:35:da:f0:
                    0d:e6:06:de:f1:f3:d4:3a:91:6a:35:fe:02:6f:7a:
                    c0:96:89:0a:19:d7:2b:a7:a8:62:4f:32:ee:70:ed:
                    ad:00:fb:db:96:38:19:67:39:bd:bd:21:e5:73:e2:
                    62:c1:e7:a2:31:3e:75:08:e6:da:03:5d:1f:6b:f7:
                    23:b2:83:52:22:d7:af:fd:da:76:65:e3:4c:bb:91:
                    78:5d:db:05:4b:38:19:e5:f5:cf:61:e5:aa:42:19:
                    a5:f4:5d:69:46:c0:d2:53:b7:c8:3b:c7:61:b0:b8:
                    7b:98:c8:6d:39:60:55:85:d5:bc:44:3b:71:fa:51:
                    f8:3d:db:81:4b:a4:83:3d:48:e1:9c:08:dc:c9:84:
                    3f:45:b7:ca:9c:c3:c5:e8:fd:b2:2c:26:79:14:87:
                    bc:16:20:b4:1a:64:53:93:c8:f2:b9:73:e9:25:58:
                    3a:3c:d4:55:a9:e2:4d:3a:2e:05:6c:a5:4a:25:96:
                    49:1c:92:aa:90:af:12:2e:0a:10:29:47:49:97:95:
                    46:5d:02:ce:33:2e:21:12:50:70:f8:de:1b:9c:bc:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:43:A2:4D:E0:F8:00:0E:46:E1:F3:35:0E:78:B8:FF:A5:10:73:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a80fd0-1d05-40ef-96b9-bc2d39948a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:bf:f2:68:41:b9:85:ea:9e:0d:09:0f:a3:b0:b3:99:99:49:
         68:ec:f9:92:1b:74:86:4a:2d:ec:47:1f:c1:28:eb:c8:0c:3f:
         bf:d7:3f:21:5b:e1:7d:54:7c:03:8c:6b:80:1e:ba:1a:31:a2:
         85:22:74:76:07:59:d9:76:cc:9f:4e:89:51:99:35:7d:44:7a:
         d2:66:94:f8:51:5f:92:1e:c2:1a:08:e6:46:ab:dc:4d:5b:96:
         49:c9:ca:54:00:17:68:1a:59:64:ec:cb:15:26:b3:f7:84:06:
         01:c8:f9:ad:2d:ce:83:35:b3:cb:ee:52:54:53:0d:6e:64:24:
         d4:36:f5:2c:49:56:5a:15:b1:55:c1:a1:bb:74:74:90:73:6d:
         fd:e5:c6:06:d8:18:6b:fc:4f:ca:ca:81:14:6d:d0:fc:fa:64:
         22:45:14:a9:47:65:56:16:96:15:8e:3e:be:8a:25:a7:8a:ce:
         0a:a6:a9:a3:87:fd:8d:6c:e1:2e:00:9f:37:ce:f9:e5:cf:4d:
         a1:93:68:db:1e:32:36:5e:f6:07:c7:15:47:ae:f0:e9:a6:2a:
         c4:28:9a:c6:d3:c7:77:47:71:ac:3f:80:77:3f:dd:b1:ad:0b:
         76:cf:76:6f:dd:93:f5:f8:15:e4:e8:ad:c7:93:15:6d:ea:5f:
         ed:b8:32:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:54 2024 by rpki-client on console-ams.rpki-client.org