Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cffa990e-6fc2-4b61-89ad-172287c16758.roa
File:                     cffa990e-6fc2-4b61-89ad-172287c16758.roa (raw, json)
Hash identifier:          soNyXRFZv80L2LVEMUzkTkv48dku/w+Z11G5FsNA3r8=
Subject key identifier:   55:75:32:65:D4:98:19:D8:BD:78:86:20:05:23:68:96:05:25:2B:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63902505067B2CD359F5707069938BAB7DD213B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cffa990e-6fc2-4b61-89ad-172287c16758.roa
Signing time:             Fri 16 Aug 2024 00:00:00 +0000
ROA not before:           Fri 16 Aug 2024 00:00:00 +0000
ROA not after:            Fri 20 Sep 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        77.122.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:90:25:05:06:7b:2c:d3:59:f5:70:70:69:93:8b:ab:7d:d2:13:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 16 00:00:00 2024 GMT
            Not After : Sep 20 23:59:59 2024 GMT
        Subject: serialNumber=53c61cc50a5a2d2354c28b9ea31e8438facdcd2c5c0676df3581a3e5c9df3154, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:30:1f:44:c0:fd:23:ef:50:4d:38:38:ab:
                    43:e0:93:be:a0:98:4b:7d:12:d6:8b:20:0f:79:25:
                    14:c4:29:d4:db:fe:65:f7:95:22:29:2b:eb:02:54:
                    20:62:54:7b:94:2f:a1:66:c5:af:3c:39:7e:d3:f5:
                    ea:25:7f:ee:59:36:fe:c1:25:4f:43:b8:a2:d9:b2:
                    ab:53:2c:b6:e5:cc:2d:9b:cc:98:c4:b3:de:f4:3c:
                    fd:4b:ec:e7:d4:79:c2:af:25:9e:f1:a8:04:54:26:
                    2d:90:7a:fb:c7:4a:a2:40:19:ec:52:38:0b:e8:0a:
                    aa:45:cb:4b:1d:58:04:16:34:68:5f:ef:3b:24:15:
                    34:7d:d0:ba:d2:76:39:26:c6:a8:c8:c4:6d:66:6e:
                    26:bd:10:3e:53:5f:1a:60:03:3c:69:0d:97:6e:ca:
                    fe:6c:76:ec:b2:43:77:c9:97:11:ae:d0:cf:cc:70:
                    9f:96:27:a6:1a:8d:30:f1:b2:fe:e9:94:13:fe:6e:
                    95:10:0d:a1:61:1f:e8:d6:7d:7a:43:7a:1e:73:0c:
                    f2:79:9b:7b:f9:52:37:6e:08:0b:5a:11:da:c9:03:
                    24:4b:38:cd:f8:d9:41:be:09:24:b1:6e:82:3e:19:
                    df:0e:15:96:49:71:6f:0e:b1:c6:3e:79:42:e0:21:
                    8a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:75:32:65:D4:98:19:D8:BD:78:86:20:05:23:68:96:05:25:2B:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cffa990e-6fc2-4b61-89ad-172287c16758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.122.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d2:9f:1f:fe:49:50:e6:67:bd:88:6f:8f:ef:6a:1b:5d:53:3a:
         ff:03:a2:be:b9:1b:8f:e5:21:59:11:93:11:61:b2:f5:21:85:
         ba:39:54:cd:da:fc:cb:9c:b8:38:2f:f2:3d:2b:91:79:c6:0a:
         26:d4:54:b6:aa:61:2f:79:c0:ba:ae:f2:44:be:ea:a5:5d:85:
         f7:27:cd:dc:df:27:c5:11:df:e7:08:28:dd:e9:22:7d:a6:1f:
         b1:e6:a5:a4:4c:35:5c:4f:df:93:5c:ab:4f:25:a2:13:fa:6d:
         6d:ea:27:2d:2e:61:15:23:d5:39:eb:fb:0c:37:23:af:ba:4e:
         b6:7b:8d:4b:3a:1f:95:20:cf:fe:9e:85:a1:1b:19:66:6a:01:
         29:3f:90:e8:66:9e:eb:1c:9c:28:d9:ec:bb:06:f8:99:75:fd:
         fc:05:c7:55:d9:f6:24:50:d7:b8:19:a4:ea:09:73:46:0c:3d:
         17:83:88:2a:26:27:e3:24:93:88:8d:e6:ec:2c:d4:9a:fa:e1:
         6e:2f:ee:75:88:6f:cd:7f:f2:22:6c:e7:3f:0b:03:bf:8c:5a:
         b6:fb:62:54:92:64:4b:cd:1c:1a:81:dd:95:c7:74:b8:a9:48:
         5d:17:ed:5d:9e:ae:db:7e:6a:b9:40:c3:fd:34:a6:62:62:05:
         26:d3:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:35 2024 by rpki-client on console-ams.rpki-client.org