Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f06fe7-cc02-419a-9cf2-d7f2a8c6474e.roa
File:                     76f06fe7-cc02-419a-9cf2-d7f2a8c6474e.roa (raw, json)
Hash identifier:          Vzw14cY3pcYptXtj4FcL2AAdmVeWveeX21vmkTXGlBo=
Subject key identifier:   0E:03:88:87:E2:F8:65:9D:65:1B:61:20:0D:F9:34:69:AD:D7:5E:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62D34B0963DB55664C917EB0D8C7BB010B97B126
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f06fe7-cc02-419a-9cf2-d7f2a8c6474e.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        99.87.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d3:4b:09:63:db:55:66:4c:91:7e:b0:d8:c7:bb:01:0b:97:b1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=39689be332362311c0b19ee9cef6b00b67478f08469d2eee553e4c69f09fdb5a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:a3:a7:6b:b5:b5:9d:f7:1e:14:a4:02:7d:
                    45:ff:72:c6:a5:c3:bd:38:51:21:47:92:e6:c1:cb:
                    ab:f6:5c:61:c2:16:fa:75:ca:30:8f:58:12:36:63:
                    fa:f2:f8:3a:46:fd:37:5c:2b:58:e8:d2:88:b9:85:
                    d1:a0:98:75:12:69:68:59:2a:fd:47:28:de:02:6b:
                    c0:e7:9e:73:9e:16:ea:38:0f:99:ab:42:06:df:37:
                    6c:8f:14:f3:8b:af:98:6f:32:96:08:22:17:ea:f4:
                    f0:89:b1:c0:bb:63:bb:38:6d:44:a1:6c:da:4e:a6:
                    57:8c:29:57:f8:67:63:55:52:8a:0c:aa:f8:fa:64:
                    5f:6b:42:0f:16:b2:0c:61:95:43:92:c1:df:ee:12:
                    6b:6f:92:c1:72:6a:cc:dc:03:11:14:52:73:2e:bf:
                    95:b7:b4:23:c8:3d:75:d5:a0:81:c1:08:a5:e1:13:
                    43:b2:18:25:fc:dd:99:c1:c9:c2:b9:c3:ed:7a:bd:
                    d7:9f:34:1f:58:f6:92:3e:6c:74:c0:0c:82:40:e7:
                    c1:c6:96:13:63:a6:f3:9e:5f:43:d7:8d:67:de:03:
                    90:cd:26:6b:dc:b6:19:90:fc:da:bb:e0:47:d8:b0:
                    bb:ad:10:b2:14:7b:f0:b2:d2:2e:62:90:52:21:c9:
                    c2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:03:88:87:E2:F8:65:9D:65:1B:61:20:0D:F9:34:69:AD:D7:5E:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f06fe7-cc02-419a-9cf2-d7f2a8c6474e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.87.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c1:39:d1:1d:40:a3:9a:22:a5:2a:8f:10:be:57:d0:a6:31:79:
         66:d7:8c:1e:08:89:8b:5a:75:99:b4:cb:28:8c:f2:9f:a2:4f:
         c6:2a:2c:2c:44:2c:87:e4:27:3f:96:1d:77:38:24:e5:5e:03:
         95:13:53:d5:62:8f:72:35:a4:5f:8e:06:35:aa:dd:87:c1:f5:
         40:d6:5b:3a:c7:61:94:da:dc:1a:25:3c:c2:22:d6:5f:33:c2:
         9f:aa:0d:00:e9:5f:a9:ed:66:7a:0f:9f:d7:5d:41:d8:91:3f:
         0a:23:d0:dc:6b:cb:99:87:ab:a1:bb:9d:d6:24:f0:41:a4:68:
         fe:ef:3f:1c:2f:90:d3:51:61:fc:78:64:1f:8f:84:ac:fc:cb:
         7d:ec:80:e4:76:79:bc:8f:a7:a6:1a:34:92:03:8a:fa:9d:88:
         f6:89:3b:0e:de:59:af:99:9d:b6:04:e7:d8:e7:c6:43:7e:7e:
         f5:d6:2f:ee:d8:96:5d:4e:d4:95:8e:1a:25:90:df:82:a7:c5:
         e2:e6:12:81:1f:99:45:15:9a:cc:15:5a:3f:99:b1:7e:46:f7:
         bd:fd:5e:7c:72:93:cf:d3:e0:b7:50:dc:ec:b0:a8:fa:1f:51:
         e2:d0:42:af:fb:48:f5:bd:be:44:ba:70:b6:2b:fe:d4:1c:2b:
         d9:a6:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:17 2024 by rpki-client on console-ams.rpki-client.org