Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790acf16-ed18-4049-99fe-fe5d7b719385.roa
File:                     790acf16-ed18-4049-99fe-fe5d7b719385.roa (raw, json)
Hash identifier:          rD79gsrqlQNU5CondEQiRACn1IoxYbVcFZsxxIxhf8I=
Subject key identifier:   8F:FB:DE:10:B0:24:06:F6:73:5E:67:60:E3:E4:02:43:5D:98:9E:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A1A454ACE67995FEF89243E75C472F80E549D79
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790acf16-ed18-4049-99fe-fe5d7b719385.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.179.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1a:45:4a:ce:67:99:5f:ef:89:24:3e:75:c4:72:f8:0e:54:9d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=899221df917702b508729d323a7c8623b9af4ffd09d8aee62e0b79947ae17ffa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:c4:9a:56:54:25:d5:05:48:fe:27:7e:2e:
                    b0:5f:fe:e4:9c:51:ef:da:5a:10:05:b3:7c:db:96:
                    b8:47:66:37:e2:4b:f3:40:92:f2:df:c7:2f:d5:fd:
                    c6:9d:36:be:1a:a1:bc:88:71:de:f9:9c:c4:f9:ae:
                    0a:2c:a8:ec:80:12:a1:94:9f:9d:e4:92:84:eb:17:
                    a4:2b:1f:d7:c6:b6:a1:30:cf:a7:73:a3:4e:e9:d6:
                    fa:6a:61:35:e9:d0:f4:9b:52:1f:fa:f6:f4:49:d2:
                    c6:00:14:6b:47:53:a5:ca:0b:f0:06:38:fb:3e:28:
                    c0:81:31:8b:05:26:d4:83:d4:24:de:82:b9:ec:a5:
                    df:ee:e8:8a:92:2b:df:8d:9d:a5:8e:5c:7a:c3:82:
                    91:16:ca:a0:d6:51:ac:15:fc:f2:c5:c4:0c:fe:a7:
                    17:63:41:a4:9b:f9:66:85:24:f7:b1:11:d9:42:5a:
                    18:0b:ce:ca:df:93:23:75:a4:5c:a9:85:47:8e:22:
                    cc:9a:43:47:c6:fd:3e:74:dd:23:5a:de:a1:d6:f1:
                    ec:4f:45:e4:59:60:91:7f:a8:9d:65:90:4f:99:7d:
                    0e:7d:b0:40:b8:83:00:6f:35:8c:c2:16:81:93:f8:
                    e9:47:bc:f7:ab:0a:7a:88:7c:a6:f9:4d:e8:c9:19:
                    a1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FB:DE:10:B0:24:06:F6:73:5E:67:60:E3:E4:02:43:5D:98:9E:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790acf16-ed18-4049-99fe-fe5d7b719385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:2a:23:62:e4:7c:85:20:26:70:ce:43:31:60:32:b9:e7:8b:
         04:b2:c5:d5:b7:44:6f:e8:77:5e:d0:a8:61:47:9a:1c:fa:95:
         74:dd:3a:e1:ba:94:b0:c3:99:e4:88:bc:e2:3e:a1:6a:d4:55:
         60:21:0d:c9:2c:5b:95:85:64:d0:80:a5:e9:a3:20:2b:af:ff:
         d4:34:df:14:7e:cc:13:cb:e6:f2:fd:c0:6b:3f:30:30:f8:de:
         59:70:d4:c7:23:08:8a:68:03:5f:b3:f5:6b:24:0a:f3:76:cc:
         7e:ec:6b:48:ac:5c:aa:1e:5d:32:3e:14:8e:83:e6:1f:67:f2:
         ad:72:5b:f1:13:b2:c8:b0:40:73:7c:81:fa:fb:77:b1:13:8c:
         f1:57:0b:d5:ff:be:d9:be:5a:85:aa:b1:10:bc:47:61:6e:5e:
         5a:63:a2:e8:a2:50:90:73:8b:8d:08:1a:b7:f8:04:69:24:4d:
         e7:e8:6a:24:44:2b:83:9e:f6:e3:2d:31:4f:f3:32:ef:59:15:
         88:bc:e2:7a:f6:9b:9d:14:72:10:96:1d:f5:a4:b4:e4:44:c4:
         60:e4:c5:78:bb:68:46:9d:27:09:37:33:e4:6d:bc:dc:88:0c:
         88:ad:7a:85:32:6f:ae:5f:c5:e0:0e:40:cc:58:73:e7:73:c2:
         e5:fc:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:10 2024 by rpki-client on console-fra.rpki-client.org