Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa
File:                     81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa (raw, json)
Hash identifier:          /r3W+Q1TPnTzWwnrQtxoaNXvDQRB41RHYfQplXAoBQE=
Subject key identifier:   AC:95:6C:F1:61:85:2C:00:FF:60:85:1B:FB:51:7C:BC:9C:8E:54:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CB218258512BA8C90ED5DB1918E89DF059E9D72
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        99.77.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b2:18:25:85:12:ba:8c:90:ed:5d:b1:91:8e:89:df:05:9e:9d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=446eb0650224dacc86d395d3fe0286fb5712ab7b8ed6d6809423478cbfc0f728, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:45:5b:9c:5f:c2:01:45:62:cb:7c:1d:54:
                    ed:90:b1:1a:86:1c:71:73:64:42:02:a4:6f:74:cb:
                    72:67:fb:63:c3:46:b2:81:4c:93:9b:80:52:30:fb:
                    4d:e8:58:df:0a:51:7c:df:cc:b0:07:1d:d7:a8:09:
                    f7:2b:a2:54:60:b9:90:19:17:f9:12:b4:0f:57:8c:
                    89:b4:90:9f:38:50:6e:00:a1:22:98:bf:92:e4:03:
                    85:82:a3:1b:75:21:22:f5:3d:01:a9:be:0b:b2:9b:
                    9b:43:61:2c:91:dd:17:7b:c4:e1:fa:2f:b3:ad:e3:
                    af:df:5e:70:9b:79:fb:d8:ed:d7:64:a3:3e:b3:9a:
                    e0:41:10:05:7c:b7:f2:f5:62:6a:7f:74:a2:d6:1b:
                    9c:94:87:42:ce:2a:7a:42:a7:04:66:f5:b8:f1:58:
                    d5:26:b9:f6:c8:0e:46:79:6f:a9:9f:c9:e2:ee:a5:
                    43:01:b7:3b:1a:d1:32:e6:99:90:22:30:4f:c5:7c:
                    f8:84:8d:64:a2:2b:98:4d:8f:e3:5b:0a:52:dd:5a:
                    83:be:21:68:b1:6b:a8:da:4c:7e:53:e3:26:26:c8:
                    18:6e:f7:6c:82:51:38:63:88:fd:29:df:24:e2:7e:
                    cb:b2:bb:87:80:9a:d4:13:d0:d9:d8:48:4d:ed:85:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:95:6C:F1:61:85:2C:00:FF:60:85:1B:FB:51:7C:BC:9C:8E:54:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:f2:5b:65:2a:b7:90:0c:11:81:c5:c6:15:81:ce:63:a4:78:
         4e:d6:f7:c3:89:59:60:98:20:95:a9:87:e2:b6:9e:db:3e:15:
         f7:b7:6c:58:30:77:9f:e2:fa:63:eb:80:da:ec:04:91:4d:62:
         79:7e:64:49:b5:1b:e8:5e:b4:2a:a8:ad:4b:a1:aa:67:89:a1:
         fd:35:b8:34:12:16:ff:b5:13:3a:88:24:c6:f7:8d:cc:bc:61:
         4a:1d:64:4f:d3:3b:1f:8d:0e:f6:20:5f:76:0d:b0:ec:22:7e:
         06:8d:e3:3a:0d:a4:37:dc:0c:54:99:08:49:a5:32:5f:39:63:
         be:75:cf:c0:0c:c1:bf:cc:13:23:aa:d0:8d:51:69:8e:8a:aa:
         cc:29:e0:fe:19:a9:26:70:65:e3:df:38:77:f0:99:32:08:95:
         bb:35:35:85:d6:18:19:c3:be:c6:ef:4a:ce:c7:ab:8d:47:98:
         04:85:30:cd:e5:6d:bf:ca:48:2e:b0:59:b8:af:52:f2:d4:29:
         0f:ea:cd:85:de:7a:5c:d8:28:c8:40:37:9b:00:a3:28:2b:b8:
         43:65:5f:7f:e4:02:85:7e:88:d0:ff:d3:a9:09:54:e6:fe:db:
         80:89:9c:ec:f2:5d:37:05:48:d5:fe:af:3e:53:82:af:db:ee:
         0a:a5:3c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:18 2024 by rpki-client on console-ams.rpki-client.org