Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017381e-018d-4bd0-9469-10e4c81d2392.roa
File:                     c017381e-018d-4bd0-9469-10e4c81d2392.roa (raw, json)
Hash identifier:          Z96NoFJPWts6t7jWY/hxbqLHux87/xkj1tDUbN2aqY8=
Subject key identifier:   B6:E3:94:48:BE:29:25:A8:77:3A:D3:94:2E:6C:3E:85:A0:39:61:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29431D92C82C158DD8FABE7B577145F946338265
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017381e-018d-4bd0-9469-10e4c81d2392.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:43:1d:92:c8:2c:15:8d:d8:fa:be:7b:57:71:45:f9:46:33:82:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=b88dc546dacf7532df372bba08908f33fcb5abb02a20ef17dc70c2006653c5c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:63:9f:2f:29:d3:00:df:1f:d4:f5:2b:8d:
                    29:49:a3:22:11:a0:41:9c:e0:a6:05:6a:1d:6d:09:
                    cd:1a:41:62:2d:b4:ed:ca:0b:9d:e8:f7:60:a9:b8:
                    0e:dd:98:7f:06:8e:60:e1:d9:8d:8c:0d:e3:d7:36:
                    a6:8f:45:f8:f3:ad:c0:0f:fb:14:26:d4:4d:09:41:
                    0a:14:38:bc:37:82:7a:8c:06:1e:cd:62:e8:63:ea:
                    cc:d0:f4:41:0d:bd:7b:ec:00:d2:67:08:27:bc:b8:
                    d0:7f:42:60:18:5f:97:ea:9d:47:3b:2c:90:ee:9b:
                    77:c5:5d:86:68:41:80:bc:00:78:cc:f0:e3:3a:d0:
                    59:53:ad:70:c4:d8:41:2a:48:ef:03:55:ed:f5:cb:
                    af:fd:42:20:90:bd:1a:4f:25:35:dc:18:90:d7:74:
                    79:94:35:60:c5:8b:67:72:f3:82:c3:ba:f4:57:61:
                    cf:b9:cc:7b:ba:fe:59:24:86:da:35:5f:25:ee:31:
                    f2:5a:1d:64:94:22:66:a5:22:2f:b5:98:47:58:ba:
                    13:b5:64:6e:39:04:9d:2a:56:ab:18:d6:05:3e:07:
                    2e:5d:ed:2a:f1:9e:40:f5:3c:89:8f:f3:77:5c:6c:
                    9a:b2:6d:ba:1e:a6:2c:32:4a:9e:af:73:62:ab:5d:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E3:94:48:BE:29:25:A8:77:3A:D3:94:2E:6C:3E:85:A0:39:61:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017381e-018d-4bd0-9469-10e4c81d2392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:c7:ce:38:5b:71:97:bc:99:00:72:8f:66:b6:ad:78:5f:
         35:85:9f:f6:1f:55:f4:fb:ed:81:67:21:c9:47:a4:67:0e:e7:
         dd:7e:53:9a:07:ea:32:6d:b8:50:6e:97:ea:f3:7f:67:b0:72:
         d2:4d:f7:3b:77:ab:11:36:96:09:0a:d2:0f:41:da:45:a6:a7:
         ac:36:14:d4:8a:25:39:13:3d:f8:2e:02:d9:ef:c0:ed:a2:54:
         0f:6f:64:d0:4c:eb:37:36:c2:c0:8d:a6:3f:51:d9:b7:c5:4d:
         40:fe:55:c3:8e:1d:42:a9:b0:45:93:d5:c5:15:c0:c0:24:b6:
         69:53:f7:b2:21:ed:97:9b:58:b0:9f:77:fc:3f:c3:55:8d:dd:
         1b:13:c9:49:c8:71:6a:64:c7:92:a0:4a:55:54:00:5f:c1:46:
         e8:e9:42:c4:9c:ce:8f:9b:36:15:2c:7f:af:56:20:4e:85:bc:
         ef:af:15:7d:fd:c0:49:74:af:d8:33:25:69:6d:30:9c:de:92:
         39:f2:67:f6:9e:43:7d:fc:88:90:2c:4f:5e:c5:2c:68:92:fe:
         98:ce:91:27:46:98:95:f4:b2:cc:6f:7a:87:b3:70:5e:b6:35:
         0c:df:0b:01:74:c4:0b:ae:b7:d9:e7:10:ad:d6:11:f1:a7:d6:
         0e:a8:01:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:27 2024 by rpki-client on console-fra.rpki-client.org