Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa
File:                     78823995-1ea3-458b-919e-48e1b3b2cfc4.roa (raw, json)
Hash identifier:          rOUe1ikaPtuOrQngRYD1lhHvrPxKUCgfNKcHlBr1ATI=
Subject key identifier:   A2:26:02:C0:7B:48:80:1F:F3:DF:A3:F5:26:78:BC:DF:29:CF:8B:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2387B797F6C25E7DBB6A946AC3E09EE8D0D86EE9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa
Signing time:             Sat 15 Feb 2025 00:50:47 +0000
ROA not before:           Sat 15 Feb 2025 00:50:47 +0000
ROA not after:            Sat 22 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        129.30.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:87:b7:97:f6:c2:5e:7d:bb:6a:94:6a:c3:e0:9e:e8:d0:d8:6e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 15 00:50:47 2025 GMT
            Not After : Mar 22 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:f6:02:99:af:9a:e1:dd:00:78:b8:fa:7f:
                    99:68:e5:5e:b2:3c:a6:75:90:71:e5:2b:e6:e3:1f:
                    72:c4:a3:be:8f:bf:dd:17:a4:71:4b:69:71:75:e2:
                    e0:bb:eb:ab:63:4f:22:b1:0a:95:f3:bb:05:e7:3e:
                    e1:72:83:e0:31:5c:c9:d3:81:28:8b:b7:07:6f:f1:
                    e9:e9:e9:cf:8a:b2:f9:5e:a1:20:1f:af:e9:85:30:
                    66:37:a9:4e:aa:1a:16:09:54:49:b2:64:4d:9b:30:
                    5b:97:1c:49:eb:fc:17:20:37:c4:7b:74:47:13:9f:
                    03:80:b7:d4:3e:78:f8:01:68:e2:cb:ab:69:da:dc:
                    1f:f9:ab:49:40:72:12:11:54:13:a3:b5:ea:3f:01:
                    2f:33:51:6a:9f:75:c1:fd:84:22:32:bf:8d:0b:47:
                    50:05:57:09:29:3f:34:16:4d:b4:19:05:1d:8b:9b:
                    ed:d3:1e:d0:c8:83:a0:97:e6:c4:72:c1:2d:6c:dd:
                    2d:ef:ae:87:26:24:40:20:4b:ee:0d:8a:f6:49:b3:
                    8a:ba:45:37:03:33:2a:d7:0f:44:dc:6e:28:5f:76:
                    c1:b0:10:1e:a8:9c:4c:87:34:98:de:e3:68:b7:4f:
                    f2:9e:fa:f4:09:73:f1:b2:9a:5b:09:7d:c4:da:5a:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:26:02:C0:7B:48:80:1F:F3:DF:A3:F5:26:78:BC:DF:29:CF:8B:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78823995-1ea3-458b-919e-48e1b3b2cfc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c7:96:fc:81:73:03:23:3d:ad:2f:2a:56:3c:b8:89:cd:82:f6:
         56:65:b6:91:43:9c:13:2b:ff:1d:69:c6:70:f6:ac:d3:ea:d6:
         8d:5b:30:a1:f5:2c:ca:58:93:d3:20:a1:86:b2:ed:2a:31:55:
         c8:5f:b1:3f:01:69:d8:bb:e6:41:52:ed:a3:ce:e2:d2:c4:18:
         86:2a:c6:47:d4:00:e6:02:c3:c6:39:e3:2d:ef:c4:80:a9:50:
         a2:c6:d5:73:12:23:1d:78:13:d6:18:29:d2:f2:3b:19:0d:ba:
         5e:b8:3e:4c:a9:41:b0:fd:78:1f:9f:26:99:cf:83:64:8e:4c:
         5e:8e:f4:98:6d:28:9b:7b:c1:4a:45:1d:38:30:0d:5e:bf:e1:
         05:5d:a4:87:30:ff:f2:08:4c:09:42:3d:f6:05:87:72:40:f9:
         81:7c:fb:cf:b7:40:5b:f7:2c:20:a3:f7:a4:f8:94:03:f7:bc:
         8c:75:c2:fb:f5:e6:a0:4d:2d:75:80:f3:d2:30:93:d7:d2:28:
         45:a6:39:74:57:f7:c4:3d:09:da:96:06:71:c9:3d:a4:4b:d0:
         bf:3a:ef:4e:36:7d:c7:91:15:df:cb:38:d7:55:44:59:44:3c:
         76:9d:40:0f:e0:b4:2d:cb:46:8e:61:3b:5c:ec:e8:88:46:82:
         58:85:14:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:29 2025 by rpki-client