Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/853df1db-a09d-4f3c-ba4e-0e4495cf5b9b.roa
File:                     853df1db-a09d-4f3c-ba4e-0e4495cf5b9b.roa (raw, json)
Hash identifier:          acJqgWJ6FlCB/ChzN3Twhu51/Cq85tB6F95FxctwB58=
Subject key identifier:   28:4F:30:90:ED:97:9D:EF:CC:DC:A9:43:73:FD:EC:AB:35:F7:58:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77296A63A3A05F2582980A9CFCF70CC5BB10461F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/853df1db-a09d-4f3c-ba4e-0e4495cf5b9b.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        141.230.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:29:6a:63:a3:a0:5f:25:82:98:0a:9c:fc:f7:0c:c5:bb:10:46:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=6fa33f4a1ee8106697c4a32bc15aa6252f95531a59c6f0f31b426eab7b4903ff, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:35:7a:63:93:f9:75:72:f8:be:0b:eb:02:a0:
                    26:f0:77:46:b5:12:03:3b:25:db:f5:42:06:95:79:
                    30:e7:66:5f:86:d6:4c:5a:4e:ab:de:b4:46:e9:5d:
                    77:f3:16:8b:f7:b1:b7:a1:cd:bb:4d:58:8d:6e:56:
                    35:31:b5:b7:1b:a2:69:60:89:94:6f:5a:b5:87:fe:
                    d9:9a:6d:88:15:00:47:83:de:ae:41:cf:c5:b2:16:
                    c4:a1:c2:3f:42:ce:e1:d6:10:66:4e:6f:f9:40:a9:
                    82:96:d8:de:90:f8:7a:07:c4:f2:f3:53:fb:d9:08:
                    e1:4c:e8:b5:1e:a3:95:36:c9:18:c5:d8:c6:61:c0:
                    75:5e:be:5a:a9:8f:06:7a:79:db:b7:69:62:ba:39:
                    19:a1:8d:4f:07:dd:90:23:7a:aa:7d:72:2c:3c:5c:
                    1b:9c:4b:3b:48:1f:b2:79:67:e7:e0:d4:d0:51:df:
                    e5:d1:2d:3a:46:59:96:62:01:76:61:81:c8:fa:c3:
                    2d:0a:19:1c:b2:d2:c6:d1:78:dd:ae:b1:0c:09:de:
                    01:c7:90:d9:5a:8a:df:82:c5:e0:fa:22:5d:54:e9:
                    6b:2e:5f:56:d6:fc:df:80:f7:e4:16:d8:22:c8:6e:
                    39:18:44:d9:3d:af:32:10:48:b4:50:92:a3:2a:ca:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4F:30:90:ED:97:9D:EF:CC:DC:A9:43:73:FD:EC:AB:35:F7:58:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/853df1db-a09d-4f3c-ba4e-0e4495cf5b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:06:61:b7:9e:ac:a6:4b:ee:f1:a4:55:39:81:d5:e7:af:84:
         58:85:e0:78:78:20:28:a2:4c:25:25:6d:3d:e9:92:d3:49:7e:
         c9:ce:77:0a:74:a8:fd:57:3e:23:1f:b5:8b:b7:73:0a:ae:fd:
         db:b5:6f:01:50:ce:9b:c1:b7:87:b5:10:0b:61:db:c6:9c:7f:
         04:ee:d4:ca:8b:e7:6a:b8:d8:c7:31:b8:a2:a6:8b:68:9b:3e:
         76:ab:d9:28:68:07:98:45:49:f8:68:eb:97:22:d7:33:5b:75:
         a3:3a:e6:5b:01:b9:1d:1a:89:5e:61:9f:b7:6e:19:1f:39:c9:
         0d:10:d9:b1:da:f8:b0:12:2d:ed:e4:4d:a9:bb:a3:84:df:0b:
         d0:19:1d:af:3e:82:d8:c9:75:f0:4c:1f:01:1d:30:d2:40:6c:
         81:c5:ac:d8:58:9c:e6:78:d1:3f:38:27:03:11:21:2e:9b:27:
         da:9e:50:62:8c:01:d0:51:70:85:06:e3:46:95:5e:45:bd:38:
         88:55:fe:8f:33:4b:68:62:89:48:41:63:4f:8c:49:0e:aa:86:
         6e:ea:9b:b9:a1:b7:8c:c2:f7:df:c4:8d:37:ac:11:fb:54:51:
         86:27:ab:8a:ed:44:06:62:c5:5f:ea:d7:69:f4:37:51:6d:c8:
         c3:e5:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:13 2024 by rpki-client on console-fra.rpki-client.org