Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eb7b26c-cac4-414b-8d13-16e6fbde08ce.roa
File:                     9eb7b26c-cac4-414b-8d13-16e6fbde08ce.roa (raw, json)
Hash identifier:          i1ZTNJnuMmQx1N0TYVwBIEHj4sf0eKoqr6dTdGKa/as=
Subject key identifier:   F5:A3:D5:AF:78:E2:35:CE:67:24:7F:4F:C6:C5:99:96:7B:68:76:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B90B4168455FA277C17A5FCA544DF3A9B2EC825
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eb7b26c-cac4-414b-8d13-16e6fbde08ce.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.69.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:90:b4:16:84:55:fa:27:7c:17:a5:fc:a5:44:df:3a:9b:2e:c8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=42803ac9082882748fd516e604117a6c984417d324d1a2378c31c94215a98713, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:e2:a4:48:d7:ff:fe:df:3f:0d:91:3f:68:
                    9f:2f:46:bc:14:55:87:f3:ec:e4:b3:ba:30:b8:a4:
                    80:7d:c2:ed:eb:e7:b4:84:5f:50:3c:b8:8d:d4:75:
                    b1:59:b4:84:48:26:a5:38:33:10:06:2a:74:a5:5f:
                    11:52:7a:13:18:d0:56:eb:ae:53:6e:a9:81:0d:4a:
                    b0:a3:33:4a:d3:ef:53:97:ab:ae:8d:9d:1a:d3:6c:
                    2d:4c:f8:9c:f3:40:b5:33:1f:80:05:e1:54:47:12:
                    10:3b:95:1b:c5:57:e7:eb:d4:de:c8:b8:81:17:71:
                    da:00:f0:4c:6f:23:cd:06:df:04:40:87:a0:74:56:
                    d5:f1:9c:f4:3c:96:ed:0c:83:63:fd:09:a9:fd:0f:
                    40:40:74:30:0c:05:b5:1b:73:04:69:b7:6f:ff:b8:
                    8d:d6:ab:39:63:44:d6:3a:59:51:a0:e6:d0:3d:a7:
                    9c:de:b1:8c:81:3d:e1:fc:84:52:b6:1d:1b:bb:e0:
                    28:df:c3:a7:be:a6:ee:e2:61:a9:47:8a:83:f1:ba:
                    c5:fc:d1:38:f7:f6:7d:dc:4b:57:16:6a:a0:cf:d0:
                    8f:16:17:12:79:8b:cc:c6:dd:b6:0e:f1:b3:19:a8:
                    34:63:67:12:9f:37:b0:8a:bf:88:da:81:ab:7a:fb:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A3:D5:AF:78:E2:35:CE:67:24:7F:4F:C6:C5:99:96:7B:68:76:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eb7b26c-cac4-414b-8d13-16e6fbde08ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.69.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:1f:ab:82:43:52:a8:ec:44:15:df:b3:d2:54:dd:5a:64:4b:
         f1:72:aa:98:12:17:43:76:03:64:8e:6b:f3:d2:8a:a0:5d:50:
         33:f8:f3:b0:4f:7e:50:7b:2a:85:01:7c:30:62:c7:c6:9b:55:
         d7:7f:c4:f4:2c:f6:15:ca:f8:84:b1:bd:d7:f1:36:29:02:c0:
         86:3b:9d:8a:5c:1f:9b:75:bb:bc:35:25:8b:21:e6:1c:57:fc:
         e6:dc:84:8d:b7:a4:74:5d:86:bb:84:6b:a2:0b:2e:ec:f0:b8:
         2c:62:a1:ed:65:87:d9:60:aa:1b:80:3f:33:05:dd:e1:1e:4e:
         9e:68:70:30:76:06:1c:f8:2a:28:d9:9f:9e:26:0c:1a:16:52:
         d7:a7:57:1a:bc:85:bd:99:2c:e4:94:5d:74:6d:ad:52:11:65:
         ce:69:58:7e:13:cd:73:1e:f0:10:79:be:47:e8:94:c1:49:dc:
         cd:ff:b3:91:7b:5e:e2:35:38:58:98:51:2c:5d:de:80:ff:ff:
         34:2d:4f:ca:ec:ac:d0:7c:d5:f6:db:c3:96:b0:4d:87:f2:39:
         73:ff:8e:ae:51:8e:91:f6:fb:4b:8d:44:8f:6a:39:59:e7:84:
         55:7b:cb:05:f7:82:54:c8:24:56:45:d8:04:59:dd:b5:ae:cd:
         ea:89:bd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:19 2024 by rpki-client on console-fra.rpki-client.org