Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78616860-25e5-41cb-accb-43f936935a0c.roa
File:                     78616860-25e5-41cb-accb-43f936935a0c.roa (raw, json)
Hash identifier:          0XblYorElhr5SI8VtDyAxVYshL1ECffiHPXhUZ1sQt0=
Subject key identifier:   F6:75:E8:9C:5F:F6:FC:F5:B3:B0:6B:FB:02:CD:B9:09:43:6B:3A:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       615388B913CC5A0169281E61F2E32ABD3A2107
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78616860-25e5-41cb-accb-43f936935a0c.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        135.133.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:53:88:b9:13:cc:5a:01:69:28:1e:61:f2:e3:2a:bd:3a:21:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=b3281f137f29097f4552ff719d57e9dcd59a680ff8b78c1892314057bd734757, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5f:71:ce:35:7e:de:42:f9:92:ab:1c:50:66:
                    7c:cf:ec:53:78:21:0d:e6:e2:63:49:c2:86:14:c9:
                    e5:4c:32:15:21:03:39:54:4e:0b:bb:25:66:fc:23:
                    55:bb:42:b0:a5:fc:3b:bc:0c:2f:49:69:e7:8d:fe:
                    5d:ce:bf:24:23:b1:1c:b2:9e:6b:fb:b7:9e:2b:b0:
                    6a:8c:c8:ae:77:88:e8:4c:85:e9:41:84:2e:69:1c:
                    43:12:89:80:e1:b4:6d:fa:ad:63:ab:5e:04:63:ed:
                    a0:2e:0d:43:94:54:d6:a8:32:fc:17:bb:45:10:cf:
                    1b:10:30:7e:f8:44:5d:26:58:3f:af:52:a6:6e:74:
                    fd:2c:f9:2e:5f:e5:cc:4c:be:db:84:14:fa:72:93:
                    2d:f8:d6:41:ea:23:2a:1d:41:37:59:be:47:2f:a3:
                    b7:d0:be:3e:9a:9c:82:7a:85:0a:ae:d0:d2:fd:53:
                    11:a3:6a:12:78:2e:99:e8:21:da:ea:44:f8:c4:00:
                    b7:ba:e2:ba:33:e1:1e:87:5f:46:ec:fa:6f:1a:02:
                    5a:04:e3:e9:3d:90:68:88:f6:6d:a1:c9:85:7b:62:
                    17:a6:8d:bc:f6:04:ef:7e:18:3f:d1:70:1b:29:72:
                    ae:8e:cd:a1:c9:74:4b:fb:a9:21:58:00:5b:f3:f1:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:E8:9C:5F:F6:FC:F5:B3:B0:6B:FB:02:CD:B9:09:43:6B:3A:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78616860-25e5-41cb-accb-43f936935a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:4d:c4:14:3f:05:46:e9:04:a7:76:2b:c8:66:49:ac:01:bc:
         c2:9e:b5:50:ce:8a:30:13:3a:c6:70:68:29:7f:36:39:77:45:
         c0:ce:fe:61:f1:05:44:9f:80:4d:63:12:fb:60:49:d4:4a:bd:
         6f:59:9a:b2:e8:55:12:d8:28:4e:27:3d:47:20:de:54:db:23:
         20:e4:03:99:74:58:34:4e:68:e2:1d:af:79:52:13:c2:d7:7b:
         43:ff:bb:67:43:4c:6c:34:42:df:01:70:30:04:1a:52:23:bb:
         be:2f:1f:66:ae:fc:0f:40:ca:3a:c2:9c:63:78:a3:1a:66:50:
         7f:4b:45:4e:59:37:a6:aa:7a:57:e8:3b:4e:36:02:72:c3:ef:
         76:8a:b8:b9:19:86:10:ad:f7:66:51:af:43:3b:30:0d:55:28:
         9b:20:ff:89:fc:28:81:97:bb:dd:cf:5c:f1:e0:93:1a:31:44:
         57:30:0e:cc:3d:09:6d:fc:15:bb:3c:2b:57:1d:c4:56:2c:d8:
         10:25:58:3c:fb:b3:b6:b8:7f:f7:73:e6:d0:ad:c4:be:1b:4e:
         6b:7c:5f:04:d8:67:43:14:79:f6:9e:16:c8:02:7d:c1:c5:3b:
         f6:22:8c:39:bd:b9:77:94:8d:ba:e2:44:20:61:61:7f:d8:06:
         7a:7d:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:45 2024 by rpki-client on console-ams.rpki-client.org