Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f92b29-8f90-4d53-9a45-ff668b951d4f.roa
File:                     c6f92b29-8f90-4d53-9a45-ff668b951d4f.roa (raw, json)
Hash identifier:          9hjg2eAXZu3B+BFKRIzy4n1N0/J6VBqRrRbusyqCP8w=
Subject key identifier:   FA:2C:3A:22:A8:F5:03:73:DA:3C:46:19:8E:F5:ED:E5:10:52:23:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66F49476724384F5E355019A166434939422A460
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f92b29-8f90-4d53-9a45-ff668b951d4f.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        99.85.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f4:94:76:72:43:84:f5:e3:55:01:9a:16:64:34:93:94:22:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=bc04b8ee5eb8d2f0bad000920bb64762170a911372e72ae79f50973d77a65cce, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:e4:96:21:ce:73:10:3e:47:05:2d:f6:fb:
                    6e:26:13:72:ac:9e:db:e9:4c:40:24:94:d0:be:5f:
                    10:ee:a7:25:37:44:73:4d:b4:e2:3c:74:63:ea:f5:
                    6a:56:e7:ca:71:4c:66:1b:4e:92:ed:ef:cd:d3:4f:
                    0c:b0:ca:36:ba:52:16:c1:b3:65:84:ab:d6:bb:90:
                    b8:db:6d:42:03:68:c9:00:84:0b:bc:22:36:05:ba:
                    0e:8d:37:0b:44:d6:65:2f:d6:5a:fc:1c:98:6f:f0:
                    66:4f:68:fc:82:d1:d4:a5:aa:0e:bc:d6:4d:b3:cd:
                    13:67:e4:2c:0d:bf:03:5b:2f:f1:b4:17:46:eb:22:
                    c9:42:13:9b:4c:7e:bf:0a:6f:e9:4e:6d:7f:09:61:
                    18:af:b3:30:71:f4:3e:7d:b4:2a:e7:49:5a:fd:7a:
                    6d:97:bd:79:7f:61:0b:b7:1d:dd:3b:91:a6:b1:cf:
                    97:21:9f:01:e0:ab:b0:7e:b8:8e:95:1c:7b:be:64:
                    f4:da:26:dc:fa:10:48:2f:cb:e7:e7:c9:8c:d1:b9:
                    1a:40:e7:ba:bf:75:f2:24:55:d4:c5:17:be:6a:98:
                    94:e3:a3:99:62:5e:22:ab:6c:16:b1:41:04:cd:aa:
                    d3:82:ae:39:18:82:63:d4:e7:18:f5:85:51:c6:9b:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2C:3A:22:A8:F5:03:73:DA:3C:46:19:8E:F5:ED:E5:10:52:23:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f92b29-8f90-4d53-9a45-ff668b951d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.85.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:f0:63:2b:2d:2a:eb:0f:07:e9:a2:bd:5d:a0:98:91:6c:
         07:16:8d:4a:fd:7a:a6:d1:16:6b:1c:6c:05:94:2c:c8:91:07:
         a7:eb:75:f6:5b:3a:42:26:03:f2:41:b4:58:f3:52:a8:2b:04:
         c4:cb:3d:b6:50:d0:50:f3:57:6d:b2:97:76:b0:54:d8:07:c9:
         05:51:dd:15:60:66:c1:98:55:1d:3d:8c:b1:fc:5d:9d:77:75:
         b0:2a:a4:1b:92:7b:51:af:ca:67:bd:39:02:6a:b2:3d:30:0b:
         0f:58:0b:58:bc:a6:e7:39:1b:90:34:08:62:52:7a:d0:ed:6f:
         ca:51:20:0c:07:1c:ee:45:51:e7:43:9e:62:f9:28:41:bc:58:
         c7:01:26:55:18:26:8a:04:52:c9:12:09:75:5f:92:c7:78:b5:
         2a:67:c4:ae:94:0e:78:f5:8b:b3:c0:cd:d4:8a:0c:a8:1e:e2:
         b8:62:09:89:79:54:f2:00:5d:c6:98:49:80:1d:05:c0:74:08:
         d9:d5:61:d4:dc:26:bc:36:f8:ae:e9:14:80:c0:53:6a:93:2a:
         4b:68:76:ad:f0:13:9d:2f:b5:aa:f5:e0:12:60:ee:d7:b2:fd:
         6e:e0:e8:20:89:4d:6a:39:48:96:94:7e:b4:79:95:6b:1e:29:
         59:77:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:25 2024 by rpki-client on console-ams.rpki-client.org