Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74962409-6390-4719-b400-863e07472b6c.roa
File:                     74962409-6390-4719-b400-863e07472b6c.roa (raw, json)
Hash identifier:          omGh0QgYWizeU66OgQmeLO2u5h73vaA/6oyGoMMy020=
Subject key identifier:   D8:17:51:49:64:3C:9F:31:E9:3F:C0:1F:A8:76:FB:10:08:57:6B:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7152A891036827EE6C4CF50A5B33833B5908DB7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74962409-6390-4719-b400-863e07472b6c.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.11.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:52:a8:91:03:68:27:ee:6c:4c:f5:0a:5b:33:83:3b:59:08:db:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=5246d98e67d456db2784b7925fd2bb899326f636a74ffd45e8a7e97d308c8618, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:b6:22:6b:7a:c3:e5:79:fd:f4:e0:0a:df:
                    25:ee:46:ff:9f:e6:c5:7e:26:70:c2:72:cb:74:5a:
                    ea:78:af:a7:80:90:f3:99:0d:37:27:df:99:9e:f3:
                    61:06:7b:78:23:2d:aa:a8:23:f4:66:5f:2f:43:1d:
                    b4:ab:23:c6:30:13:49:cd:91:10:b0:cd:71:6c:5a:
                    c0:db:9f:66:ae:17:7c:a9:16:8b:a2:b0:f5:01:8f:
                    c6:c4:53:da:26:65:2a:05:93:51:04:28:a5:c4:1c:
                    8a:14:e3:b2:68:a9:29:c8:23:24:68:97:1f:a5:94:
                    1f:6c:d1:54:a8:e3:c4:c8:60:ed:99:a1:c3:d4:69:
                    7b:fa:b7:fe:2e:be:be:a9:ec:4a:c7:83:c5:20:0a:
                    b9:7f:60:09:07:1c:7b:b8:de:ed:9a:37:82:9e:68:
                    18:7a:e3:80:25:4c:1b:db:e4:7b:65:8a:fb:99:b9:
                    2e:85:1d:a1:37:79:c9:42:0e:6c:2e:86:3c:76:8e:
                    b2:3a:72:34:d0:9f:a7:5d:6a:f2:1e:71:2d:86:5b:
                    50:f3:be:ed:91:f8:9a:96:cd:a5:f4:98:eb:be:f1:
                    ab:93:d0:9c:a8:58:71:e7:ee:66:be:b7:3c:a1:9d:
                    80:ee:1f:f9:94:2e:cc:cb:af:cf:88:46:27:9a:84:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:17:51:49:64:3C:9F:31:E9:3F:C0:1F:A8:76:FB:10:08:57:6B:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74962409-6390-4719-b400-863e07472b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.11.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:4d:80:80:0b:ef:d9:43:a3:1f:6c:ef:24:bc:bb:03:11:ac:
         03:54:c8:3c:d5:1f:3d:67:d7:55:b2:f4:34:44:1a:d0:bf:ed:
         3a:b7:84:ad:22:99:be:b0:d9:fe:fc:aa:c3:aa:d4:9e:fc:37:
         1b:ed:32:59:5a:fe:eb:50:32:8a:3b:7a:37:04:7a:15:eb:30:
         b2:31:2c:88:7c:d1:b9:52:d9:51:fe:ea:46:95:2d:0a:83:5b:
         48:fc:0b:78:38:84:98:1d:e2:31:7b:94:e1:ce:30:18:2c:d7:
         41:17:d5:fb:a4:71:85:20:90:1d:bd:ff:0d:fb:d0:23:5c:01:
         54:15:55:c4:4e:02:7c:2d:2e:3a:03:ae:0c:14:53:fd:fc:69:
         e5:ad:27:e9:f3:83:40:0a:0e:3f:4e:d8:55:62:af:c5:e4:25:
         c4:df:f5:e2:74:ee:5e:5b:fd:ea:57:11:e3:06:d3:22:e2:ef:
         57:25:31:28:14:e1:b7:1e:83:68:04:dc:77:a7:c0:60:27:7d:
         72:2c:af:69:8e:29:2a:07:61:a6:2e:3d:c7:02:c4:fe:b9:d1:
         e1:03:c7:9a:e7:5c:f5:27:b9:93:c1:ad:76:3c:56:62:81:4a:
         ef:8f:18:d8:71:6b:0e:1b:68:ee:f3:98:fc:f9:df:74:a0:5d:
         f5:36:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:09 2024 by rpki-client on console-fra.rpki-client.org