Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/885ae76d-2736-4d57-95d4-a2473d3f4750.roa
File:                     885ae76d-2736-4d57-95d4-a2473d3f4750.roa (raw, json)
Hash identifier:          beXO8wzL+0IFJ7pZ9YINkowZyXFIqrozqctnv7ot2VQ=
Subject key identifier:   3F:11:06:E3:DC:45:E4:2E:52:CB:8F:B1:C4:3D:9E:51:21:EB:B3:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       053CA9B8CE491EA6F9F039C06653485BB18B2AD4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/885ae76d-2736-4d57-95d4-a2473d3f4750.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        168.84.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3c:a9:b8:ce:49:1e:a6:f9:f0:39:c0:66:53:48:5b:b1:8b:2a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=80465bf000cf2d659133dac872d0d5baf4fb97b3561810841ec786e858a76b1f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:96:b7:12:a3:4b:09:aa:e6:f8:c3:2d:75:
                    37:3b:e0:4b:d0:f8:67:11:c7:d9:bc:ec:10:f1:cd:
                    81:ce:71:39:33:4d:ab:df:85:a6:b1:cc:0a:d1:e3:
                    40:dc:d7:ec:ec:b5:97:ed:70:24:16:b3:23:87:40:
                    dd:cb:13:0e:67:83:69:99:f8:79:76:e8:f4:dd:ee:
                    93:9d:6b:03:9a:bc:40:d0:71:a3:c5:ff:d7:90:04:
                    a7:a5:0b:02:03:7c:71:9a:10:73:eb:3d:ff:6f:e3:
                    3b:24:ca:6c:fe:b9:f8:c1:50:b7:31:b2:1c:2d:a5:
                    1b:26:12:42:34:9c:a2:f6:97:1a:d0:91:1e:23:de:
                    71:4d:07:b7:07:90:87:54:f8:87:c6:8d:a6:40:c1:
                    14:a7:ab:42:01:1c:fd:e0:4b:c0:aa:46:ce:52:14:
                    6c:40:26:3a:f0:db:20:cb:db:93:ee:53:a7:cc:06:
                    6b:c7:23:7b:e0:e5:25:90:e1:14:b8:47:b8:cc:09:
                    75:e3:74:f0:bc:e9:dc:02:41:d1:01:09:13:fc:06:
                    3d:b0:2a:57:1b:80:8d:fc:d0:66:d1:87:ba:76:8b:
                    a7:07:17:9d:eb:85:7b:dc:43:f7:74:ab:90:66:72:
                    8f:b2:8c:44:a3:d7:75:0a:f6:61:fb:ce:28:63:0a:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:11:06:E3:DC:45:E4:2E:52:CB:8F:B1:C4:3D:9E:51:21:EB:B3:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/885ae76d-2736-4d57-95d4-a2473d3f4750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:53:6f:5b:e3:c0:fa:22:9b:d0:e6:48:c0:6d:0a:f1:05:b2:
         6a:aa:f5:30:a4:5a:87:6f:6f:20:15:04:b5:0d:44:bb:7b:92:
         04:45:ec:12:e4:e3:b1:18:89:2f:d7:3f:79:fb:28:d5:6c:83:
         41:da:94:29:f3:9b:19:d8:3c:f1:f7:2f:71:73:4d:ff:73:6b:
         a5:2a:43:b9:35:1a:e0:b2:7e:f0:c6:8e:6d:3b:cb:d9:59:fa:
         db:9e:8e:4c:25:c3:69:68:6c:7b:a5:5e:65:d9:31:c4:83:40:
         dc:db:7d:20:37:1f:89:2f:00:f2:fa:6d:ee:85:b7:c8:fd:fd:
         f1:b0:89:3d:80:55:7f:f8:97:1d:56:9e:b6:67:d5:67:a6:bd:
         29:6e:a3:17:ee:7e:19:af:af:e7:06:68:ac:b9:13:59:f6:0b:
         c3:24:b3:a5:f5:e2:f6:f3:93:87:e6:92:71:46:36:1a:c0:2e:
         18:72:e8:46:2b:ce:b5:42:2a:a8:bb:a4:1f:f2:80:eb:32:5d:
         71:b2:96:41:60:ee:30:76:23:49:d9:34:a7:58:7d:64:c8:93:
         db:d3:6f:75:3f:4d:c5:78:60:b2:e4:40:b7:c2:35:a7:d8:d8:
         92:77:a2:e0:39:c9:b7:00:dc:68:d4:55:56:cc:df:85:ef:e0:
         dd:61:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:14 2024 by rpki-client on console-fra.rpki-client.org