Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79931b83-9888-42c4-8cab-49d3b3177907.roa
File:                     79931b83-9888-42c4-8cab-49d3b3177907.roa (raw, json)
Hash identifier:          99RlCpn5FqWkPVnAXY7MX2KGjziQTra4IBCfcoxPSD8=
Subject key identifier:   1E:30:71:71:36:E8:9E:C8:4D:C1:01:12:02:C3:45:1D:96:7D:71:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78BF56F7DF4EC2EBD027149523BB882037E281C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79931b83-9888-42c4-8cab-49d3b3177907.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bf:56:f7:df:4e:c2:eb:d0:27:14:95:23:bb:88:20:37:e2:81:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=4215b7ea5a994e2e480090561be30b69ba40c5f8aa7b11dbc0f9f141f16ebd45, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:75:29:b1:3b:02:b7:b7:b5:23:9a:5e:91:
                    ed:99:06:44:f5:78:ad:be:31:df:de:6b:09:d6:07:
                    3b:73:b6:7d:c0:f7:be:6b:c5:62:c1:af:ea:ec:8c:
                    aa:dc:75:35:b2:9a:3d:65:0a:ec:65:07:ce:e8:93:
                    35:fe:1a:07:4d:92:77:15:6b:62:dc:78:1d:4f:03:
                    11:1b:d5:ed:15:69:b4:14:f2:b0:6b:ec:4c:e3:e8:
                    0a:dd:e4:f1:32:92:0c:07:0e:35:f4:96:ce:46:bf:
                    a5:63:90:5b:d0:10:5b:f6:db:f3:de:4e:3a:9a:b3:
                    b7:b0:67:db:38:a3:92:b5:86:01:e7:64:e5:10:05:
                    7a:e6:88:8a:81:06:d0:e3:38:e9:73:44:eb:16:80:
                    c4:2a:30:43:6a:d9:03:cb:d8:b7:49:da:71:0f:af:
                    25:d5:a8:e8:da:17:ce:d9:38:6b:23:40:16:9a:ad:
                    17:09:36:f3:a3:50:21:7c:c6:ff:af:16:9e:9d:2b:
                    82:0d:b3:03:f1:d8:5a:12:7f:38:cd:78:84:36:8f:
                    c7:6e:28:30:2d:93:89:f4:69:44:dd:c8:0f:63:a5:
                    ce:57:8c:5e:55:c3:45:14:7b:b9:01:9d:97:3a:eb:
                    32:50:01:f3:44:70:97:b2:4a:80:de:1f:2a:1a:78:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:30:71:71:36:E8:9E:C8:4D:C1:01:12:02:C3:45:1D:96:7D:71:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79931b83-9888-42c4-8cab-49d3b3177907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:ef:03:2d:6a:9e:59:70:56:1c:cf:88:c4:e0:47:a2:2c:96:
         7e:55:4c:07:93:db:09:76:04:65:d4:3a:2e:b9:cd:23:92:b5:
         f8:54:42:b3:36:fc:59:6d:db:6e:7b:ac:70:f6:5b:bc:01:b0:
         4e:51:ad:ec:f0:5d:c7:69:97:c4:dc:84:01:71:fa:84:4f:f8:
         f1:c6:26:c3:0f:6a:e4:48:33:c0:be:74:03:d9:fb:bd:8c:8c:
         55:fd:25:5e:dd:80:34:2d:88:16:a1:68:af:a2:54:5d:08:39:
         65:98:4b:df:bc:e6:76:b5:33:d7:d1:87:53:b2:1e:66:ac:fd:
         c7:4f:cc:ca:2e:d0:b0:07:f0:43:58:fe:a9:14:f5:9e:88:b9:
         c2:fc:22:0c:13:11:8e:66:6e:1b:a7:81:83:a8:eb:60:f3:0a:
         aa:0a:5b:78:0b:c1:6d:a3:5d:ef:6e:49:69:bc:83:ce:e7:8e:
         f0:80:6f:ff:a6:96:6d:ff:ea:21:95:77:73:b3:15:cf:63:10:
         59:d1:3e:83:79:66:c3:89:ca:e7:18:80:a2:79:42:1a:4d:36:
         71:a1:3c:b8:a3:ba:86:d2:45:dc:c7:e8:a7:dd:88:61:97:1d:
         b4:ad:fc:b9:a0:1a:13:f5:94:c4:9c:d6:4a:21:c3:fd:2e:ea:
         2c:06:d8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:50:56 2024 by rpki-client on console-ams.rpki-client.org