Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/811b057a-b7d8-480e-a87f-4479c3441f45.roa
File:                     811b057a-b7d8-480e-a87f-4479c3441f45.roa (raw, json)
Hash identifier:          VzalVjYhJ9smjZBQd54NdKAOk069m4H3glrgsAWUSNI=
Subject key identifier:   17:61:BE:FF:32:1C:BC:BA:E6:5A:E0:94:DD:98:A2:68:71:38:5B:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08F94118B6FB68E823C7A08E2C3FC0B9BE7D720E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/811b057a-b7d8-480e-a87f-4479c3441f45.roa
Signing time:             Fri 11 Oct 2024 00:00:00 +0000
ROA not before:           Fri 11 Oct 2024 00:00:00 +0000
ROA not after:            Fri 15 Nov 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        199.61.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f9:41:18:b6:fb:68:e8:23:c7:a0:8e:2c:3f:c0:b9:be:7d:72:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:00:00 2024 GMT
            Not After : Nov 15 23:59:59 2024 GMT
        Subject: serialNumber=15df1db8fe79842b9b13211779197b0ee1dae99db34b993e90e06be671de1868, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:e7:fa:39:38:7f:71:9a:58:4a:a5:86:0a:
                    ad:0e:ed:7b:77:96:bf:7d:38:7b:ad:65:f8:f2:2d:
                    63:39:ce:b1:33:9a:10:94:0b:2a:c9:a8:19:09:ec:
                    22:94:56:52:4a:5e:8a:9b:99:3f:a6:63:26:94:5a:
                    d0:3b:86:47:94:ff:5d:72:4f:0b:e3:5a:1b:54:1a:
                    08:c1:00:ff:0a:1b:40:4e:81:c2:fe:07:24:45:c8:
                    c7:59:b8:16:9e:fc:f4:5f:12:e4:17:e4:6e:db:71:
                    7b:22:dc:9c:07:d8:03:91:5e:57:74:88:90:ce:a9:
                    25:ff:c7:c0:6f:4d:6a:47:b5:01:73:c3:6d:46:70:
                    19:bd:f6:ad:4a:ed:a8:01:e2:63:c9:ed:48:9f:31:
                    db:9c:22:ea:3d:43:c8:ae:95:e2:9a:6a:5c:b6:39:
                    71:fb:c9:8a:87:46:c7:bb:89:40:e4:5f:81:68:65:
                    67:5b:a6:a1:bd:bb:31:18:2a:14:85:64:52:2e:97:
                    9e:45:dc:28:38:79:03:93:68:46:08:bb:df:12:ab:
                    66:cf:c3:ce:21:da:c9:2a:bf:16:85:a6:c3:dd:96:
                    4a:19:56:8a:4e:0a:e2:a6:0b:32:49:42:23:73:44:
                    8e:df:e7:ad:d4:f6:37:d1:65:bd:f3:ab:8c:5b:f8:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:BE:FF:32:1C:BC:BA:E6:5A:E0:94:DD:98:A2:68:71:38:5B:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/811b057a-b7d8-480e-a87f-4479c3441f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.61.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cd:f8:6b:7e:0e:83:a9:cf:c6:72:8c:94:ca:ea:6e:18:ae:6c:
         5b:49:c2:8f:ed:55:4a:c6:e0:4b:8f:0f:ed:4d:1f:8c:41:f0:
         77:25:a0:ea:0a:b7:72:83:17:eb:b6:2c:19:61:11:0b:9f:05:
         81:ca:dc:da:e9:9d:f4:4a:a7:b2:60:73:02:d4:f5:77:64:94:
         b7:06:e8:38:58:e1:fc:13:68:07:f8:65:8a:cc:03:bf:08:48:
         0d:f4:63:4b:18:42:63:f0:12:58:70:95:ee:23:6e:eb:aa:bf:
         ba:17:9b:aa:97:74:1d:84:a7:ff:fd:81:c3:ed:83:a3:cf:03:
         6c:0b:68:b3:22:e1:f0:9d:a9:5c:91:04:48:1b:8e:88:da:f4:
         35:80:c4:a9:c8:ec:5e:8f:d5:e2:91:6e:c8:b7:96:50:16:14:
         75:60:e1:d3:89:5c:03:75:42:05:a2:da:9f:1d:ce:53:3f:75:
         42:38:03:9f:25:23:a2:80:62:44:a9:37:a3:2a:92:16:a0:15:
         06:e1:64:97:25:c4:ed:6b:d3:95:eb:28:29:0a:22:9c:81:72:
         0a:b3:a3:c8:67:23:ca:36:a8:3b:d9:33:de:93:6b:62:1a:d8:
         69:21:4f:73:d0:c4:81:5f:60:ee:34:92:82:16:01:05:08:73:
         bb:f1:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 00:46:54 2024 by rpki-client on console-fra.rpki-client.org