Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b99b09-0ba6-4ef3-890e-ee2c04cf9a51.roa
File:                     d1b99b09-0ba6-4ef3-890e-ee2c04cf9a51.roa (raw, json)
Hash identifier:          MAxDUsS6GxPJdOw21GAR3CQc0Cp1aIQKOnd3xGpus9Y=
Subject key identifier:   D3:5C:C7:85:1D:1C:7E:EC:16:43:99:A4:0D:43:B4:8B:4C:CD:80:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76BDD1548EBD66DC0BB3DBC6CE9D42DDB7F065E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b99b09-0ba6-4ef3-890e-ee2c04cf9a51.roa
Signing time:             Tue 15 Oct 2024 00:00:00 +0000
ROA not before:           Tue 15 Oct 2024 00:00:00 +0000
ROA not after:            Tue 19 Nov 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        142.4.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bd:d1:54:8e:bd:66:dc:0b:b3:db:c6:ce:9d:42:dd:b7:f0:65:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 00:00:00 2024 GMT
            Not After : Nov 19 23:59:59 2024 GMT
        Subject: serialNumber=ca9819c9d134c6f0fcf8ddc8658258a932147e1840a7ef72ddc56cbe71d317d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:6e:17:7d:5d:18:08:00:6a:4a:42:45:5e:
                    24:03:fd:72:6d:5c:93:4b:bb:be:a6:da:ca:8a:97:
                    ef:3d:c1:f3:ae:5a:4e:9b:35:94:d0:f4:c8:09:7a:
                    df:21:a5:5f:0a:b5:8d:ab:f9:44:50:b6:4e:cf:f9:
                    3b:90:b0:f5:ed:53:88:5c:fb:49:c2:23:f9:78:b5:
                    b5:7a:ba:2d:bd:eb:11:c6:b5:16:3d:34:e3:3d:b8:
                    80:61:13:cb:09:62:51:2b:06:8a:b5:e5:7c:e3:e8:
                    86:6c:c1:d8:15:21:9f:d9:53:1f:8a:4f:af:7c:88:
                    f6:63:02:c8:5b:df:cd:56:5b:dc:52:9e:80:e5:92:
                    92:78:c1:17:e9:ed:35:4f:04:66:73:ed:68:24:f7:
                    24:54:81:4a:6b:0c:64:db:44:99:56:1f:42:5c:d5:
                    b0:9a:a5:c1:29:62:e2:88:5e:dc:19:e8:a6:25:5b:
                    41:d5:52:7a:6b:c7:96:b9:6c:c8:98:19:41:ee:ea:
                    d0:f2:8e:27:34:83:02:7b:d0:98:d9:e1:2d:05:ef:
                    bb:3c:fb:42:3c:03:17:92:1d:c3:8b:9f:01:51:82:
                    7e:b6:70:4a:a8:1c:38:97:11:b5:c0:2c:6d:09:2f:
                    61:9c:96:91:62:fb:50:28:99:a5:1e:39:24:9b:7b:
                    55:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5C:C7:85:1D:1C:7E:EC:16:43:99:A4:0D:43:B4:8B:4C:CD:80:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b99b09-0ba6-4ef3-890e-ee2c04cf9a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.4.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:77:16:32:77:e3:80:1e:42:8b:25:26:8c:45:9f:fc:5f:3e:
         ee:28:39:79:42:66:ae:f2:0b:36:a9:32:37:03:bc:f9:af:ed:
         69:02:09:b6:11:b8:96:49:ab:a2:a6:00:9e:f5:f4:b4:50:e5:
         8e:6a:17:01:52:d0:e7:88:f9:f0:aa:f0:33:1c:d1:d0:bf:a8:
         93:48:cd:10:d6:ce:85:6a:9f:f8:81:eb:aa:c7:e1:c7:86:4f:
         f9:a2:41:be:cc:16:a7:82:9a:8b:58:0a:0e:e5:3e:90:3e:a9:
         8f:eb:4f:91:2b:aa:43:e4:80:00:f4:e2:d8:09:75:9b:f3:e3:
         1a:d9:01:c0:ae:7f:b4:48:2e:f6:79:1c:2c:17:22:5b:26:3f:
         14:bc:a8:ce:98:3b:81:8a:d3:39:3a:0c:8d:70:46:7e:90:1b:
         15:c3:a0:53:59:ec:0f:b9:8d:8d:1a:b7:6d:b0:1d:a7:f8:d0:
         15:c2:ab:b9:e2:96:8f:e0:87:21:2d:ef:1d:00:92:93:1f:f9:
         7c:de:90:e3:dd:4b:9a:f6:58:f6:60:4a:2f:84:97:6a:65:01:
         9a:97:82:57:71:5d:e3:18:58:00:85:0a:6f:bc:0f:b8:5d:53:
         49:56:c6:5b:ff:91:b2:bd:57:ae:b4:72:9b:02:79:01:25:b3:
         88:82:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 00:47:10 2024 by rpki-client on console-fra.rpki-client.org