Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c90818a8-3277-4323-aa01-3bd2a36f1179.roa
File:                     c90818a8-3277-4323-aa01-3bd2a36f1179.roa (raw, json)
Hash identifier:          tC6hmPyNhFXesb1RN9d99LHn4ThBjTh4D61IZVBr8gs=
Subject key identifier:   92:59:2B:44:C3:17:1C:39:04:FF:36:A5:A9:59:FB:7B:87:F1:FA:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37738BC82BDBDFFEE371480A6EA33914D3EF998C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c90818a8-3277-4323-aa01-3bd2a36f1179.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        54.134.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:73:8b:c8:2b:db:df:fe:e3:71:48:0a:6e:a3:39:14:d3:ef:99:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=95476f241300ec748fc5387990cc432e05ee5e39e86c4c24e0fbe767df0d2947, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:92:ef:86:97:60:51:c9:6f:98:a8:96:e3:
                    c6:16:79:91:31:e1:de:c9:54:8b:42:73:09:c0:ea:
                    70:e5:34:66:c7:70:2d:88:8c:54:ef:e2:7d:73:63:
                    6c:c1:96:9e:de:80:a1:fb:69:6d:66:d0:d4:cf:bb:
                    75:55:3f:55:e2:3b:7c:8b:d8:42:b4:06:a2:b4:cc:
                    bb:7a:80:ea:83:2d:4a:e5:cb:7c:1d:80:69:62:27:
                    d6:69:6c:40:b7:d7:c3:38:63:cd:0b:94:65:36:b1:
                    ea:50:ba:d9:b5:f2:1a:46:f5:6b:94:8e:5c:f2:b1:
                    a6:75:b6:bf:de:ca:3f:39:87:6a:50:e8:08:59:f1:
                    39:b5:8c:be:bc:e5:55:66:d6:38:a8:b3:aa:a7:01:
                    5c:ef:5e:1c:c8:35:06:5a:69:64:26:3f:74:6c:55:
                    25:f7:79:98:f4:9f:e5:54:58:e7:ea:fc:15:85:d1:
                    a0:c9:00:98:f3:2e:d7:d7:19:f9:7b:f8:8b:c9:91:
                    14:e2:92:80:44:b5:20:4c:ed:37:69:fc:be:d7:e0:
                    d9:9d:0b:60:48:a4:41:82:da:e3:5d:94:e6:0a:bd:
                    17:d6:9d:1c:8a:22:74:7b:b4:d2:27:ea:28:92:44:
                    8c:47:ce:16:09:10:dc:a7:82:ec:df:e9:96:ee:62:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:59:2B:44:C3:17:1C:39:04:FF:36:A5:A9:59:FB:7B:87:F1:FA:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c90818a8-3277-4323-aa01-3bd2a36f1179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:17:b9:07:f4:f0:5a:23:14:22:b0:f5:83:88:1e:5a:39:f5:
         55:8b:b4:98:7a:f8:46:f1:c8:83:22:6b:b4:fb:00:85:1d:d5:
         70:e1:59:86:17:0b:23:96:2a:12:71:09:80:b2:8d:b8:c7:8c:
         1d:b5:89:1e:40:9c:2c:28:35:5e:97:45:a3:2c:a0:61:7f:18:
         b1:f4:b5:66:79:ad:83:3f:62:2e:b2:82:c7:28:56:b9:a2:78:
         91:97:54:c1:b9:af:4e:84:2e:d1:d5:c5:8f:fe:ff:5b:aa:b7:
         00:a4:85:e6:a6:58:19:05:90:88:d8:5e:1b:9a:6f:8f:d1:78:
         7d:ce:81:80:06:95:c3:e8:2a:f7:06:9a:61:03:b4:26:18:a3:
         2f:cc:bc:a1:7d:17:da:a0:18:f8:fd:f7:41:7e:e0:1b:f2:3f:
         36:a2:bb:dc:4f:b2:76:a0:8d:bc:4e:1e:e2:61:0f:9e:0a:17:
         b0:33:ab:d1:e5:61:37:ba:17:c4:67:4e:75:d7:db:53:66:8d:
         88:b0:9e:23:ef:8e:07:53:b8:d7:82:61:55:f5:d9:39:33:08:
         73:1d:27:2f:61:97:7a:c0:3a:60:d9:a7:a2:a3:48:fb:0a:fb:
         d4:97:61:29:ed:57:fa:ad:17:16:ba:11:89:1d:2b:98:a3:4e:
         5c:45:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:29 2024 by rpki-client on console-fra.rpki-client.org