Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9f65bea-8ca3-415d-b0e3-6b568f8e01ba.roa
File:                     c9f65bea-8ca3-415d-b0e3-6b568f8e01ba.roa (raw, json)
Hash identifier:          EZ6TPfqkn13BUybZBwaKiS9SdhOd4GyQxV56IttCfdA=
Subject key identifier:   D6:38:2C:91:40:29:0D:71:6B:71:63:88:D1:CE:63:8B:25:6E:1F:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       184BA55E49BB37A0348330D49E86B1CC486F2DDA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9f65bea-8ca3-415d-b0e3-6b568f8e01ba.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4b:a5:5e:49:bb:37:a0:34:83:30:d4:9e:86:b1:cc:48:6f:2d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=75150fcac04287dea796b07b4a5459ac540f210022c0ce2162be5e1e226eeebb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:59:6d:80:d7:d0:81:f0:57:d0:81:b5:94:
                    e4:d3:b5:01:b5:10:bf:13:25:1c:40:d8:5d:50:82:
                    f1:af:90:92:32:03:3c:fd:47:d5:21:a4:0d:6c:f7:
                    fa:f2:1a:db:3c:53:06:3d:57:ff:19:53:0b:12:db:
                    fa:fc:08:4e:f8:24:f5:cb:8e:6a:c4:fa:7a:3c:62:
                    39:bb:a9:94:01:b2:3a:7a:48:60:1d:14:3c:5d:b3:
                    93:c6:f1:35:34:06:b2:c7:f5:f6:76:8c:e4:45:d8:
                    be:5c:2f:23:24:bb:ec:b4:b1:d9:af:30:5a:21:ec:
                    3e:0e:28:91:55:7f:9f:2e:90:47:47:f9:9f:b2:9c:
                    9e:20:2b:87:c8:ce:51:a9:c7:fa:25:5d:95:5b:58:
                    a4:06:88:af:dd:2c:23:8d:1b:5c:0e:f0:50:ec:a6:
                    93:57:71:ad:51:9d:bf:30:39:79:fd:22:0f:f0:b3:
                    d0:33:a7:99:e0:56:ba:6d:c6:97:4d:b8:e7:97:2e:
                    ba:2d:93:6d:e3:63:54:1c:6f:f6:a4:bd:ac:ac:1f:
                    d1:5e:f0:ba:21:13:32:82:d9:ea:bb:2c:d8:c2:27:
                    40:3d:fc:5c:e2:ac:0b:11:89:be:26:2c:b1:1c:23:
                    47:65:fc:8e:c7:c9:a2:eb:ba:f0:9f:b2:ce:02:13:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:38:2C:91:40:29:0D:71:6B:71:63:88:D1:CE:63:8B:25:6E:1F:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9f65bea-8ca3-415d-b0e3-6b568f8e01ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:85:27:4b:b7:99:e9:a1:60:ea:50:e4:c7:22:59:b7:47:ad:
         a8:8e:f4:73:c9:eb:50:d2:f6:ae:a2:30:fe:0c:a2:3f:31:26:
         48:8c:2e:83:27:64:88:c0:26:61:54:42:6c:f6:be:5d:7e:2f:
         4f:9d:e2:47:6b:f2:cf:2e:85:8e:9d:69:d4:ce:00:4d:ca:db:
         1a:b7:cb:a0:7f:c6:44:0b:40:a7:72:b5:9e:0e:0e:71:cf:51:
         8e:26:5b:fb:a9:10:93:3d:7c:42:57:db:45:23:3a:cc:be:7f:
         17:0a:40:78:93:58:90:69:37:eb:ef:ca:f9:da:1a:e0:04:da:
         35:d7:ca:e5:e6:49:a5:15:b0:7b:aa:ab:77:5e:02:aa:bf:0b:
         87:a0:d3:e6:f4:1e:8b:d4:f6:27:a1:33:1e:51:24:9b:d8:80:
         80:11:ac:bc:79:e8:9b:5e:c6:51:0f:5a:3a:83:30:ea:1f:43:
         04:79:cb:51:02:c9:f2:9e:93:8e:22:7b:ed:9e:0c:39:4d:54:
         c6:fd:d6:6d:34:49:c6:70:f7:41:af:a7:93:58:eb:fc:2d:f1:
         3c:98:34:df:c0:ad:d5:3a:ea:94:9b:bd:09:6d:19:1c:16:70:
         25:a5:4b:3d:fc:3a:8e:e6:31:2f:ea:d5:bf:75:20:e0:a6:43:
         a8:11:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:30 2024 by rpki-client on console-fra.rpki-client.org