Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8db8b283-32d5-451e-ae3f-a594ab33edc2.roa
File:                     8db8b283-32d5-451e-ae3f-a594ab33edc2.roa (raw, json)
Hash identifier:          nWqJ66TVW89NZBoYi1E3KhjcHErxvjrMOmXWILu4BuA=
Subject key identifier:   A5:4C:07:5E:AD:63:44:8C:37:DF:13:92:C0:C9:E4:B4:7B:E4:E1:01
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       597EFBCB2A1D4C1507F49E69E2329CF78ADE95D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8db8b283-32d5-451e-ae3f-a594ab33edc2.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        99.86.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7e:fb:cb:2a:1d:4c:15:07:f4:9e:69:e2:32:9c:f7:8a:de:95:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=b2dd6a132c5fed74f5bda956dc78351c428b54d6d01a6680415be23be0256d30, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:ae:f8:ae:78:c5:8c:32:d5:78:15:1e:f5:
                    f4:62:8c:ea:d6:d9:31:0e:9f:f7:3d:d8:b6:f3:8b:
                    79:f0:22:dc:b6:14:9b:1b:42:8f:4b:64:fe:5f:a5:
                    9a:3c:8b:62:b0:c2:7f:af:2a:4e:d6:fa:84:d2:56:
                    9e:d2:76:21:41:00:4e:40:ad:2b:0b:ca:3c:79:8c:
                    50:0d:7f:ea:91:cb:33:1c:0a:fe:5d:a3:97:3e:84:
                    bd:b7:5b:6f:ec:66:3b:b5:eb:54:f6:93:b6:aa:b5:
                    96:03:93:87:96:21:98:d6:b9:88:7b:a5:eb:54:ee:
                    62:42:06:45:8c:e8:c7:b8:1d:14:1c:62:83:6e:aa:
                    61:49:b1:7d:70:88:42:21:d7:14:e8:9b:43:e4:5f:
                    44:a2:4b:fc:b7:11:b7:0a:4a:6f:bc:d0:ff:c7:b3:
                    a6:0c:07:b4:c6:55:13:14:5a:aa:05:78:d6:5a:41:
                    1b:19:8e:a4:8a:eb:69:1c:78:b6:52:55:d4:6c:01:
                    86:a4:bf:4d:27:e8:bd:69:99:df:a4:49:ed:d0:65:
                    7a:d1:46:4e:54:2d:7d:45:62:57:72:7c:f0:39:6e:
                    b7:3d:35:9d:ca:5d:66:a4:ac:e0:2f:79:f4:a3:48:
                    7b:c9:9a:47:cf:6e:46:f8:74:0a:16:7f:41:c5:15:
                    45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4C:07:5E:AD:63:44:8C:37:DF:13:92:C0:C9:E4:B4:7B:E4:E1:01
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8db8b283-32d5-451e-ae3f-a594ab33edc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b8:3e:2b:fd:a9:34:c7:54:76:a9:29:d5:03:76:eb:ce:20:d6:
         4a:3a:b0:c8:b1:a4:67:4e:fa:d9:10:a3:03:48:56:0d:1e:4d:
         ff:d4:ed:64:27:37:39:f5:af:3d:2f:b0:24:f1:51:91:9e:67:
         93:df:7a:33:ad:ff:72:1c:e0:0b:24:e0:4a:1e:ee:03:a8:d2:
         a2:7c:45:cd:31:2b:cc:e9:ad:4d:f1:cd:7f:5b:4f:5a:44:2a:
         9a:1e:fb:4c:95:21:e5:31:5e:85:e4:ab:dc:16:e7:45:23:0b:
         0c:9e:e2:8f:93:dd:79:61:56:82:ab:73:96:81:33:e0:fb:98:
         ef:65:10:53:13:2b:3b:48:ea:7f:30:68:c6:01:88:b0:bb:1f:
         2b:37:91:74:2e:a9:23:6b:bb:05:57:ff:63:85:b5:b2:da:0d:
         98:38:8e:03:54:75:5d:70:06:b5:54:86:39:3b:05:8c:da:21:
         b5:04:d7:ab:3d:a2:4f:8c:9a:d0:42:c1:7a:a7:7b:2d:a0:fb:
         1f:11:04:b9:b0:9e:2a:c0:53:cf:10:d1:50:ed:e8:9c:3b:76:
         f3:ef:cb:23:70:25:f4:e9:66:1d:fb:71:83:08:12:4c:c1:39:
         88:81:5e:ad:a6:c8:5f:85:6b:5b:3b:be:a8:b0:f3:03:16:c9:
         a2:29:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:15 2024 by rpki-client on console-fra.rpki-client.org