Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cfc8fd1-392f-4d21-8287-39a89857e982.roa
File:                     5cfc8fd1-392f-4d21-8287-39a89857e982.roa (raw, json)
Hash identifier:          9dJ7iZsf/qj+233H0aXcsRAIIPaYSqzaD9AGVhIwAZE=
Subject key identifier:   63:01:F0:70:D7:80:D3:E4:A5:F2:BC:0B:09:02:28:3E:44:4C:0C:2D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55401DA49A6525E7611CF99FACF1666AE9075D28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cfc8fd1-392f-4d21-8287-39a89857e982.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        99.82.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:40:1d:a4:9a:65:25:e7:61:1c:f9:9f:ac:f1:66:6a:e9:07:5d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=9a0d452a5e60f4cc560a94728fd6f4712f4d46045a7ff06b63bf72a707e997d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a7:39:82:b6:37:0d:2d:7d:74:34:07:ba:f0:
                    2f:50:c2:38:cc:c6:1c:9e:8c:b3:f4:f9:cc:25:78:
                    6b:7a:4f:b3:35:84:d7:b3:db:53:5b:05:e6:dc:db:
                    31:15:e0:18:ac:9c:0f:53:46:a4:fc:aa:50:a2:6e:
                    f8:a7:dd:3b:25:ea:e4:0e:0a:88:4b:77:5c:5c:cf:
                    e1:de:1a:64:ab:8f:6e:d6:a3:b5:80:46:34:e4:3c:
                    73:a6:d5:cf:83:09:a0:6f:27:0a:33:39:55:84:25:
                    d7:8e:d8:a4:56:8a:ca:ff:a1:05:54:28:c5:38:05:
                    2d:7c:96:1d:b6:74:b2:c3:32:35:62:0a:85:41:f9:
                    4e:6b:17:07:ff:20:44:96:25:b5:9f:26:7e:e9:a1:
                    ea:a7:8b:a4:7d:32:5f:f5:58:a5:35:10:7c:10:ea:
                    ce:2c:d6:54:0d:7a:f5:d0:87:d7:fe:8b:02:ed:26:
                    6f:6e:85:95:9e:71:d2:95:3c:a2:a0:78:56:72:a5:
                    db:2a:07:4c:d5:41:21:f7:97:59:82:17:10:ac:1d:
                    77:a2:ac:8b:a2:05:bf:1d:cb:83:a0:87:0f:e7:6d:
                    cc:1d:1f:69:74:1a:ea:14:01:c0:31:b3:ab:cc:73:
                    93:ee:5c:e3:25:a0:28:d9:09:7a:9c:9d:bb:13:22:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:01:F0:70:D7:80:D3:E4:A5:F2:BC:0B:09:02:28:3E:44:4C:0C:2D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cfc8fd1-392f-4d21-8287-39a89857e982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d7:c8:7a:4c:1e:78:65:03:63:ce:57:84:80:b6:60:a4:27:37:
         03:69:16:1e:c8:1e:eb:cb:59:70:17:2a:54:b4:91:0c:ef:5f:
         f0:e5:7c:e1:d1:76:7e:ff:c5:cf:47:22:2d:d8:fb:be:d8:a6:
         10:ca:20:28:af:0c:49:5c:4c:d2:55:01:e6:7e:29:a3:8f:e8:
         8d:29:e1:c8:52:1a:f6:53:d9:7d:8c:b7:c3:30:33:e7:e4:f1:
         8a:09:23:e7:b2:dc:4c:da:71:cb:5b:7b:a4:99:9e:3c:ae:64:
         28:8e:7d:e6:70:f0:8d:76:2c:85:c5:97:70:3b:2d:de:bd:c4:
         49:c7:62:40:90:04:c8:78:1b:52:5b:9d:f8:84:5e:0d:7c:78:
         00:db:a8:aa:8d:54:6a:10:53:f5:cc:18:ae:e6:02:10:5a:eb:
         2d:d2:3e:8b:e8:da:55:87:b1:a6:b0:67:d0:38:6f:ae:ce:e6:
         8f:f2:d0:2c:9d:4a:ba:d5:2c:fe:af:5a:c8:65:de:46:79:75:
         25:52:ad:0d:78:51:4d:bd:b5:02:22:c9:2c:0b:be:30:bf:fd:
         b1:39:2a:2d:b8:4b:00:11:0e:f0:9a:89:f6:18:2e:e6:9a:e8:
         a8:79:08:5e:90:07:93:4d:6e:02:21:e7:cf:c3:f8:fd:da:93:
         be:50:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:39 2024 by rpki-client on console-ams.rpki-client.org