Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4a21000-3e1d-4970-8585-41d9313167de.roa
File:                     d4a21000-3e1d-4970-8585-41d9313167de.roa (raw, json)
Hash identifier:          fEzn7naN77qoBbtadO3VxPDydF2giHK6Yl6yWczz2Yw=
Subject key identifier:   FA:A6:CF:61:EF:05:C6:FE:03:27:8A:12:7E:CF:B9:EC:C5:EF:CC:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       556622FA7B37A9E5A6456A51F2C41A446A8DE9E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4a21000-3e1d-4970-8585-41d9313167de.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:66:22:fa:7b:37:a9:e5:a6:45:6a:51:f2:c4:1a:44:6a:8d:e9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=0e0625f5a6e87148d4707a2cd27ba8b2cc9a5cd4bb745360d2ed75396523e845, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:9e:3e:e4:39:c9:5f:4c:67:00:72:2b:d9:
                    d2:e9:98:70:cf:77:20:33:05:ff:8d:48:f5:45:32:
                    df:1a:48:58:be:0d:83:eb:de:9b:7f:de:c8:0b:4f:
                    73:76:31:66:7b:b1:5b:63:98:73:42:3f:b7:35:15:
                    83:5e:c4:5e:6b:7c:63:57:51:e2:61:4f:fe:f3:0d:
                    ad:28:c8:f8:f3:e9:f3:2c:91:7e:4e:4b:18:02:23:
                    84:ce:45:e3:4b:12:9f:2f:e3:18:c1:0f:97:1c:5b:
                    73:0c:d5:68:fd:c6:09:da:81:d8:f2:6a:1d:c1:a2:
                    6e:33:e4:29:ef:d3:65:6e:f3:7d:1f:ad:2d:a8:52:
                    cd:0c:6c:a2:59:ff:d7:0a:16:92:2a:2a:3d:8a:0e:
                    76:b4:6f:59:a6:7f:cf:a1:86:73:b3:8c:b9:b0:7a:
                    04:78:ce:3c:d3:8c:ae:71:d7:a7:79:29:b6:f3:b9:
                    fe:53:af:23:1c:c5:4e:0f:de:0d:c0:c8:b0:d5:b9:
                    29:a8:39:23:e7:bb:7f:b0:6e:86:b0:3a:8e:6f:95:
                    a4:a3:40:47:b0:72:ba:9c:93:b6:fc:cf:c5:31:d5:
                    e9:34:fc:9b:69:72:4c:95:cf:f7:eb:5b:4f:d9:c0:
                    27:c7:d9:19:f7:fc:a5:23:f5:27:a5:74:69:dd:d7:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A6:CF:61:EF:05:C6:FE:03:27:8A:12:7E:CF:B9:EC:C5:EF:CC:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4a21000-3e1d-4970-8585-41d9313167de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:35:fd:6a:de:fb:45:3c:e8:3c:6f:e5:4d:a9:d1:13:48:63:
         86:a1:b4:15:f2:2f:4e:40:2a:b4:1b:57:e2:f8:19:ea:54:2f:
         de:09:f6:4e:c5:41:31:aa:c2:13:17:61:41:65:ec:f1:99:b4:
         f0:8f:de:7a:85:49:52:c6:47:c4:6c:39:38:65:2f:87:dc:bf:
         86:cf:e1:ff:58:aa:ae:79:8d:81:48:a4:4d:6b:dc:2f:61:c9:
         82:95:9c:8d:73:f9:c7:96:7a:8d:06:f5:54:70:34:c5:bf:3d:
         ae:37:50:90:64:4d:3b:7e:24:2f:2a:24:23:21:7c:78:f2:33:
         41:40:13:8f:55:57:6a:06:59:13:ca:3e:03:1a:45:41:10:d7:
         31:15:d0:96:b3:1e:60:c3:98:d5:27:28:f3:72:96:2d:a7:69:
         30:db:88:81:e9:f8:bc:df:29:69:77:d7:db:55:4b:49:8b:a2:
         a5:ab:cf:2c:bc:74:e0:58:53:17:be:b7:e7:bd:f6:61:c7:74:
         5f:48:6f:a0:23:c0:12:a6:00:03:da:67:1f:8e:e2:9b:07:c5:
         da:e5:bc:10:5d:c9:c3:a8:d7:53:4b:bb:68:13:8b:32:02:eb:
         20:6d:b0:1e:f1:85:3f:57:5b:d8:12:c4:2b:60:57:72:64:7c:
         30:a7:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:54 2024 by rpki-client on console-fra.rpki-client.org