Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1ec8f96-4d98-4f77-8779-9e1c5c72b28c.roa
File:                     d1ec8f96-4d98-4f77-8779-9e1c5c72b28c.roa (raw, json)
Hash identifier:          8TEi1TS74qo+UmU1Xf3EkX7NiojkzzVPcdX9s0XWBdg=
Subject key identifier:   69:75:1C:98:88:CE:F3:BB:0D:9F:CA:B8:CC:35:D8:31:46:5D:99:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       777AB013503C7E99A4F9D81F07822AD5E55A4F27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1ec8f96-4d98-4f77-8779-9e1c5c72b28c.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        75.2.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7a:b0:13:50:3c:7e:99:a4:f9:d8:1f:07:82:2a:d5:e5:5a:4f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=045b893f905667e8488b4b242d79292e3c73e09250ccee587d6d98966096ca9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7f:1e:e4:98:47:c5:69:00:44:50:93:36:97:
                    9b:da:b6:58:3e:80:23:7a:90:e2:6a:a6:d7:2b:41:
                    fc:0c:48:74:7f:7a:e0:5a:f5:cd:1c:23:54:2f:66:
                    9a:6b:c0:25:15:ac:0a:9a:28:0f:ef:1e:08:0d:9b:
                    27:b4:be:f0:4d:48:ac:99:d2:6e:53:f3:e0:53:14:
                    08:a2:eb:45:f2:aa:1c:3b:b3:1a:f6:2c:07:72:91:
                    7a:3a:bd:ae:15:89:b9:0d:a1:08:e9:e8:6d:e0:5f:
                    ab:ce:c1:5a:52:ff:d3:22:fb:a5:69:19:1c:86:db:
                    25:75:53:49:3d:9f:34:d5:cc:53:db:0c:89:0f:2e:
                    a6:5e:73:e4:02:87:cc:6b:65:11:82:0d:1a:f8:a5:
                    ca:33:0d:f4:fa:dd:96:3a:26:4c:96:63:89:5f:01:
                    f3:ba:3b:d5:4a:77:72:75:2c:91:d0:6c:b6:19:fb:
                    22:ca:89:d4:ed:77:0f:05:c0:39:4d:29:94:60:2b:
                    1a:5a:0f:e4:59:f4:cc:fe:47:9d:8f:84:38:2d:d8:
                    64:03:8e:8a:37:2d:a1:9b:bf:bc:b9:36:ad:28:7b:
                    c7:7a:13:9f:16:7c:25:91:90:3a:c4:31:ff:82:14:
                    d8:ba:fe:d2:d5:47:b9:7d:59:e6:66:2b:36:a2:e3:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:75:1C:98:88:CE:F3:BB:0D:9F:CA:B8:CC:35:D8:31:46:5D:99:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1ec8f96-4d98-4f77-8779-9e1c5c72b28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a7:88:34:08:25:9c:c4:ca:56:7c:00:44:12:32:2a:69:cb:3c:
         b7:f3:72:f2:26:91:b7:25:f1:d2:d1:6c:a4:68:0c:f4:d2:5e:
         54:e5:2d:b5:88:c8:c5:96:3c:7e:14:8a:8a:1b:64:ae:8f:14:
         82:d2:49:7c:28:ff:c6:44:dd:eb:41:d7:0e:72:90:e6:70:7c:
         45:5e:6d:7a:ce:80:56:6d:07:17:ce:f0:26:93:7f:10:a6:13:
         1e:29:ac:3e:6e:65:30:4b:b9:61:92:67:9d:9b:37:ad:a2:a8:
         f6:43:f2:b0:4d:b9:ae:56:d5:29:98:8c:be:a5:60:36:ef:4b:
         db:9c:20:9d:b5:f7:0b:ef:3a:98:ce:aa:44:c2:cd:d8:cc:1c:
         51:34:8d:80:ca:ca:8d:aa:bc:56:03:e2:6a:f6:23:bd:33:ee:
         7c:3a:f4:53:e9:29:97:5c:78:ae:61:8e:45:60:b1:36:08:d5:
         8b:77:fa:78:15:25:30:72:bd:cc:59:12:2b:43:ad:49:e0:6f:
         46:bf:88:c5:dc:cf:a7:59:0b:d2:4b:57:c1:7a:d7:a5:79:78:
         ec:60:f0:49:57:26:ff:a8:1d:f1:57:a9:21:b8:2f:5a:ab:72:
         79:c4:31:67:95:3c:25:dc:2c:c3:a6:e8:41:ab:16:82:49:4a:
         bd:a9:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:15 2024 by rpki-client on console-ams.rpki-client.org