Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deab7d88-8bd0-4709-8367-123d28645648.roa
File:                     deab7d88-8bd0-4709-8367-123d28645648.roa (raw, json)
Hash identifier:          ONvY+SnB167fJne1Pq5sH1GGWYtr0imJUwpad6TxEwE=
Subject key identifier:   65:C5:46:53:97:64:CD:15:C3:CF:27:A2:17:8C:74:EB:B4:FB:A9:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3726C7AA32B3B5242AF28410D5B6730D7C2BEC3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deab7d88-8bd0-4709-8367-123d28645648.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:26:c7:aa:32:b3:b5:24:2a:f2:84:10:d5:b6:73:0d:7c:2b:ec:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=7cf2c8da4d6e38d7d8a20140bbd5e570ceb06134d44ae93528f68338045ee980, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:94:7e:e1:c6:6c:93:87:f8:8c:f6:7e:7a:
                    36:bc:03:b9:53:3f:0b:cc:2e:7e:b4:62:51:72:5a:
                    f2:d4:6f:9f:c3:cb:02:2b:da:23:d9:99:2d:6d:85:
                    03:79:1f:cf:54:32:ce:52:37:f5:d2:d8:db:b5:80:
                    8e:f1:6d:9b:49:85:67:22:7e:c5:5d:50:3e:29:ff:
                    21:36:c1:db:44:3e:b2:fc:95:d7:2c:39:7e:67:36:
                    c6:48:41:2e:74:f6:ec:a2:29:08:43:37:b3:22:28:
                    fb:ae:4f:ea:5c:87:f8:56:2d:94:f7:53:c9:65:10:
                    71:77:44:ec:aa:18:b0:a1:b7:db:13:75:bd:26:d3:
                    ad:f4:79:76:c1:3d:f6:ae:cb:8a:e1:6a:4f:05:fe:
                    57:31:5f:6c:59:e3:78:b1:6e:17:dd:77:3a:bc:f1:
                    e3:63:04:6d:da:5b:9b:b8:6a:a5:79:5d:87:99:5e:
                    05:f4:31:b1:f7:c3:34:b0:a9:d6:8a:ec:c4:91:cb:
                    49:70:19:e2:74:6f:7f:c0:a1:f5:7a:6c:c3:a8:f0:
                    16:f6:f5:4e:2f:05:ec:e8:90:3d:b3:a7:4f:9c:96:
                    f3:5a:13:3a:40:e8:22:2a:14:f8:82:8d:6a:43:13:
                    b5:2a:f6:ce:c9:25:57:74:40:9b:d1:52:4f:f8:ea:
                    8f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C5:46:53:97:64:CD:15:C3:CF:27:A2:17:8C:74:EB:B4:FB:A9:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deab7d88-8bd0-4709-8367-123d28645648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:2d:10:fe:e4:d4:25:89:1f:6f:c9:e4:ad:9d:f2:2b:91:10:
         7e:b7:60:ad:f0:13:10:9d:df:5a:70:39:b2:cc:9c:d0:4f:e9:
         be:9b:9e:a5:00:a2:c8:88:47:3d:73:64:26:8d:26:1f:2f:6c:
         88:7f:b7:b1:3f:01:4c:df:35:bc:a5:7d:3f:91:ad:9a:92:2e:
         61:2d:b0:82:13:73:0d:3e:ca:36:bb:68:5c:5e:3c:5e:f6:20:
         ef:04:fb:8e:d9:56:21:67:b6:f0:c5:24:0c:04:b6:e4:87:cc:
         11:6f:f7:e6:0c:ff:a8:41:55:26:fa:68:68:ae:7a:75:fd:38:
         b2:5d:a9:5c:0a:b0:c5:9b:d3:64:96:fe:10:90:92:5b:6b:02:
         ea:89:50:2d:c5:50:3e:c3:22:82:4b:5f:9f:e4:86:ec:a7:41:
         37:46:09:e6:fc:20:0b:2d:34:5b:64:23:b0:28:21:e2:56:14:
         2f:1f:28:5f:9c:32:2e:a7:6c:ef:71:90:3a:68:b4:79:69:66:
         42:75:d0:3b:c3:62:3c:b5:3c:c8:4c:4e:43:a5:5d:dc:dc:b5:
         b6:42:fb:e8:01:7d:34:e6:6a:25:80:42:88:ad:8f:89:94:9f:
         61:02:75:6c:dc:13:09:a7:23:f8:79:46:7e:15:91:4c:ba:64:
         ab:51:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 18:20:53 2023 by rpki-client on console-fra.rpki-client.org