Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8de6053-5e4a-43fb-8fbe-de17554fa5cf.roa
File:                     c8de6053-5e4a-43fb-8fbe-de17554fa5cf.roa (raw, json)
Hash identifier:          ZBnVNGOl4Y3S6JNej0UaoMvpNGwna9q3/jyoCYAetNg=
Subject key identifier:   C4:08:88:AF:12:BB:7E:1F:93:10:6C:41:C5:88:E5:9A:36:F6:A2:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F1647C8D41662B487215AC3E0854C071B9633B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8de6053-5e4a-43fb-8fbe-de17554fa5cf.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:16:47:c8:d4:16:62:b4:87:21:5a:c3:e0:85:4c:07:1b:96:33:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=aba2fc0b4e990ccd3a928300d6b0ce9792f88c3bc288d9b00a25d39433bcbcf8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:f1:74:2f:bf:86:8e:fd:17:0f:f7:ea:9a:
                    d8:22:ba:68:f0:66:19:22:90:77:ad:02:46:a5:c6:
                    c5:5b:b2:53:cc:f9:8e:db:9a:0c:b0:df:b6:bc:f1:
                    b7:39:7e:bc:c5:cd:7d:0d:a7:7d:60:5c:b3:2f:55:
                    87:ad:c0:65:a9:ce:20:cf:38:d2:ae:59:2f:74:b1:
                    b3:6e:34:72:38:ae:67:3b:55:59:e3:e8:81:c9:cc:
                    04:71:b5:00:04:bd:51:c9:7c:e0:cd:63:d5:b4:9e:
                    d3:86:23:80:e7:96:11:75:e5:c0:db:96:bd:82:6a:
                    c5:98:7e:c7:54:0e:d1:05:2f:98:70:9c:77:07:8a:
                    c6:41:b2:69:86:0a:1b:ac:73:c9:65:c0:16:f1:62:
                    90:ca:d6:0f:2c:8d:da:1b:01:71:4c:ac:c6:11:f8:
                    0e:72:7e:88:ed:4b:41:b5:27:aa:19:e2:09:fa:3f:
                    59:c0:00:79:08:b5:85:43:c6:c2:dc:29:d4:25:e0:
                    dd:dc:47:97:f4:24:ac:cd:2c:9f:05:fe:93:bc:67:
                    2d:a7:dc:d7:e8:5c:3a:ca:79:ee:83:41:2f:1a:5d:
                    31:c5:d7:ac:14:ed:ad:1b:42:fb:66:9a:5a:0a:d3:
                    e2:10:4f:17:79:6d:fe:71:6b:21:d0:71:5a:e3:ad:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:08:88:AF:12:BB:7E:1F:93:10:6C:41:C5:88:E5:9A:36:F6:A2:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8de6053-5e4a-43fb-8fbe-de17554fa5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:d9:43:79:66:21:dc:fa:69:42:98:74:0d:e3:eb:b3:3b:69:
         69:e2:95:cf:ab:1d:64:c5:0a:b9:7b:3f:af:bc:8f:77:f9:45:
         5e:df:15:9b:96:cb:ae:94:c0:48:81:97:b0:0b:d2:94:e7:ce:
         f9:4a:4d:d7:04:5b:35:c4:69:2a:37:d6:78:f8:fc:45:fd:df:
         b8:25:3c:c2:57:8a:7c:ac:fc:54:ec:fb:a1:fa:69:60:3e:44:
         9e:37:b0:a7:ac:7f:25:9e:e3:54:c0:87:9d:58:c9:47:fe:bc:
         ad:f8:50:c6:bf:f6:3f:4b:d4:5a:2b:a3:ea:f9:dd:0a:ce:66:
         07:85:d6:a1:c7:ea:82:a4:f4:6c:7e:ee:4b:3d:b5:22:4a:8d:
         d4:0d:f7:55:b9:e4:71:bb:44:84:da:bf:6b:25:af:e6:6c:ee:
         10:6c:bc:a3:34:60:b7:bc:d1:7c:92:37:44:d4:ef:7b:d8:67:
         dc:f9:cf:56:c6:3f:96:79:a3:6d:05:82:50:7e:0d:bf:f5:0a:
         24:7f:2b:16:ff:7b:57:6e:79:b4:08:a7:95:bc:be:a0:a9:11:
         38:04:cd:5f:01:6a:07:27:0e:e5:c4:44:be:b7:7f:3a:f6:7f:
         10:d0:3c:96:3f:c4:d1:00:97:14:2b:09:cf:14:c0:2f:39:35:
         49:e6:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:32 2024 by rpki-client on console-ams.rpki-client.org