Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2bebc06-e8cf-4886-867e-e176aed5eef7.roa
File:                     e2bebc06-e8cf-4886-867e-e176aed5eef7.roa (raw, json)
Hash identifier:          NLL0XZu7EpJRR2h83UGXeloEE1Z8RiXG60eKlC8GwGE=
Subject key identifier:   D7:80:0C:D1:3E:D4:CE:26:CD:32:70:28:3D:62:FB:7A:38:85:D7:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       690E3FF69C9C697688E0898CED6A162BEBB448A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2bebc06-e8cf-4886-867e-e176aed5eef7.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        64.91.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0e:3f:f6:9c:9c:69:76:88:e0:89:8c:ed:6a:16:2b:eb:b4:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=582c7c7af0663ed40ac6139d86c56a35e66a23cebb1b915162ef80f54bfa7b10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:db:b4:20:94:0a:80:26:7f:66:11:48:bc:
                    fd:65:5f:a5:3d:d1:63:0f:1e:62:8d:d5:2d:e9:09:
                    fa:07:47:dd:53:a7:d0:4a:aa:36:d5:51:f7:bd:23:
                    8a:f2:22:67:45:de:73:96:da:8b:c5:06:f3:ce:58:
                    19:fb:3e:da:cb:c0:5a:3c:2a:9e:4b:bb:d6:49:f2:
                    93:61:b1:11:e4:54:62:04:f3:fc:13:6a:44:d1:4c:
                    f6:01:3d:05:65:f6:18:2f:81:e4:64:8a:53:b0:27:
                    67:9a:ce:e5:24:20:b5:a6:ac:9e:de:ed:67:07:74:
                    aa:31:b3:40:0a:eb:9d:d0:74:87:e1:b8:5f:3f:68:
                    17:80:94:f0:e7:c8:c3:40:9e:e2:c0:f1:5e:03:18:
                    24:3a:bc:cc:b2:ae:5e:11:84:c4:ef:19:fd:49:17:
                    86:e0:cb:85:f5:0a:c2:e6:db:3c:7c:de:3e:86:79:
                    e6:81:cb:7a:63:a0:9b:3d:76:e1:fd:0a:cc:95:d4:
                    8e:64:6d:1e:d2:d5:dd:81:da:9d:8e:be:98:2a:cf:
                    cd:9e:49:27:a7:2d:54:28:0b:ff:5b:80:c4:46:99:
                    44:3c:2d:65:e0:08:b9:00:c6:d8:d4:49:f6:bd:ce:
                    2e:00:fa:14:a2:a0:06:51:11:a2:df:ba:da:57:fa:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:80:0C:D1:3E:D4:CE:26:CD:32:70:28:3D:62:FB:7A:38:85:D7:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2bebc06-e8cf-4886-867e-e176aed5eef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.91.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:70:d2:90:e6:ce:8c:6b:2c:98:fc:81:bb:78:cb:79:13:79:
         fb:aa:c1:51:f7:56:8c:d7:0d:6a:4b:21:44:15:a7:29:dc:4d:
         c6:f0:48:a2:a9:7d:f2:80:e7:c6:8f:69:b9:30:69:19:50:f0:
         0b:1f:76:85:c3:52:ff:a2:4b:ea:1f:98:36:4b:f1:c0:5a:3a:
         22:41:d0:e2:b0:45:b4:36:d0:3b:3a:8c:fc:96:5d:22:0f:10:
         d3:a6:a4:af:28:84:34:06:2a:90:9b:43:04:93:29:50:79:96:
         6e:20:ef:14:13:5e:d2:1a:bd:d5:ac:81:95:43:e6:ea:68:fd:
         aa:92:32:32:9c:18:a3:70:57:69:3a:1c:eb:e2:eb:b2:5b:a4:
         18:89:b8:f2:7d:a7:7d:d5:cb:cf:78:f9:5f:85:e9:e4:ff:db:
         c5:0e:bb:9a:65:77:b9:89:6a:67:8a:75:61:84:86:9e:c3:37:
         7e:be:35:3c:19:17:60:cf:d2:c5:57:d0:1b:0b:51:11:92:9a:
         88:ba:4b:24:76:92:cb:b5:5c:da:4a:01:02:94:47:e1:b3:16:
         bc:af:d4:ca:ec:af:e6:b3:19:db:35:79:f4:54:e9:a5:da:21:
         84:38:40:86:ba:d3:cf:8a:af:de:94:a9:34:46:6c:63:8e:bc:
         83:4b:e9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:36 2024 by rpki-client on console-fra.rpki-client.org