Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7151ce18-5dcc-40bd-b324-fff7ffa24c7f.roa
File:                     7151ce18-5dcc-40bd-b324-fff7ffa24c7f.roa (raw, json)
Hash identifier:          fdcY8TATZVAeBuhvem5AAv0Uvbu2MIX4vIpDFkbn47k=
Subject key identifier:   F9:03:00:84:76:41:F4:DA:30:E2:F2:B0:4E:0C:57:0F:CB:E0:40:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4309999FEFED82616E7C442DA6D62EC7D8B6507E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7151ce18-5dcc-40bd-b324-fff7ffa24c7f.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        136.17.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:09:99:9f:ef:ed:82:61:6e:7c:44:2d:a6:d6:2e:c7:d8:b6:50:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=09e450465cd189cc0e846edbb4dadf7d51e2361baea9f5cd207a5a8ea104617b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:2b:25:b3:a1:56:e6:55:e2:6f:0d:fa:f0:
                    64:33:f7:c6:ad:4e:60:8d:3d:2d:38:48:45:78:82:
                    0d:9b:f9:1a:2d:34:5b:e5:e5:e4:37:de:88:06:ad:
                    28:99:2d:31:e1:c9:57:45:73:91:00:f2:7e:5c:2f:
                    49:0c:3a:9a:b1:df:de:a2:71:66:83:74:05:57:bb:
                    4c:ef:7a:6f:cf:0f:a6:07:81:ba:5d:9d:72:3d:8e:
                    e7:72:3f:22:29:9c:d9:74:10:a1:ec:fc:fd:bf:63:
                    f6:d4:b0:99:0d:88:3c:b2:7d:ac:ed:9a:56:f6:cf:
                    39:0c:77:38:9b:72:cb:80:6a:c0:bb:68:da:9f:f4:
                    0c:80:f9:3b:73:54:f2:0d:84:db:e4:fc:73:09:b3:
                    8e:70:ba:c7:4a:7f:72:3e:4e:57:d1:b8:95:89:7f:
                    27:70:70:32:91:4f:2d:f5:45:07:22:24:c5:86:e9:
                    18:f1:38:7f:29:0b:e6:39:ae:46:79:d6:28:61:9f:
                    19:67:ca:cb:e1:83:ca:a8:b5:eb:33:79:f3:d9:fa:
                    a2:31:5d:51:8c:a0:a6:ad:e7:29:9b:d3:2b:88:e4:
                    23:41:b5:cf:d1:68:79:16:b6:43:66:f2:05:fc:c0:
                    3e:af:7b:78:04:ae:1a:01:13:17:a6:27:a5:81:16:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:03:00:84:76:41:F4:DA:30:E2:F2:B0:4E:0C:57:0F:CB:E0:40:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7151ce18-5dcc-40bd-b324-fff7ffa24c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:f6:14:48:49:80:45:85:3c:bc:e9:7f:2b:06:c0:46:40:7a:
         05:82:59:ef:1b:14:42:e4:18:5d:7c:ab:94:6d:a9:bf:32:f4:
         10:e7:d9:ae:37:75:cd:17:dc:92:a7:99:b9:38:7e:1b:78:c4:
         b5:62:87:47:b0:6d:06:cb:2a:86:7f:83:c4:dc:47:09:7c:cf:
         57:fc:8d:c5:c7:5f:22:47:47:c7:47:3c:bb:9b:64:4c:b6:3c:
         77:05:05:9f:86:ac:75:a1:44:53:2c:a4:c0:4f:88:ca:34:76:
         c4:f8:99:b2:db:ab:59:7b:9a:a7:20:d8:2e:e7:e1:c1:4b:6a:
         db:ce:e3:eb:6f:e1:82:f4:5c:00:b5:c4:25:4a:e1:eb:96:a4:
         4d:d7:a9:a7:c2:63:b2:a3:c6:5b:0f:55:d6:25:56:c1:0f:69:
         d4:6a:c5:0f:8f:9a:c0:9e:97:63:da:46:63:8b:1a:28:bf:31:
         c8:27:03:bc:49:55:55:d4:a3:99:ea:48:bf:34:5d:e5:1d:14:
         bb:48:b8:c3:03:de:84:6e:64:6c:bf:91:f1:14:a0:a6:25:b1:
         16:17:9c:b4:a1:16:0e:e3:f6:39:5e:3e:58:52:99:28:20:fe:
         bf:87:e2:c2:79:9a:ad:5f:86:b1:2c:e8:b5:64:6b:52:06:b9:
         89:d4:f1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:08 2024 by rpki-client on console-fra.rpki-client.org