Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebe39619-319e-458b-b84a-3d8a21095a66.roa
File:                     ebe39619-319e-458b-b84a-3d8a21095a66.roa (raw, json)
Hash identifier:          fFZMH6z1AzrgFHeNXPtJjxq4qz+d2g6CQzPkR8As3tI=
Subject key identifier:   53:D0:B1:E8:39:A8:F3:8C:9C:46:05:13:34:14:EC:11:55:D5:30:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       520E8DC10D9D32F2FC7F5160C3F1D32B54961178
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebe39619-319e-458b-b84a-3d8a21095a66.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0e:8d:c1:0d:9d:32:f2:fc:7f:51:60:c3:f1:d3:2b:54:96:11:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=ed997a463582e33cc05a0f02753c6bd2e09bd9bc4c2ff3e5cbfaf27ccb6228e1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ef:63:8a:cc:43:04:a8:58:a4:41:82:ad:cd:
                    57:58:f3:6e:57:a2:db:ab:34:bc:a7:44:de:36:c5:
                    60:36:79:37:94:8a:0c:c3:f0:c2:38:f0:6e:fd:69:
                    2b:f7:7c:74:cc:57:57:7f:69:e4:0e:b3:ed:d2:f9:
                    98:47:57:1b:6a:2c:4e:43:25:f4:17:01:3c:f7:5f:
                    4b:f9:f3:53:3e:22:cc:85:ae:39:f4:2f:3c:2c:50:
                    cb:ff:e4:4c:97:a9:90:38:55:98:e2:e3:0d:ea:15:
                    4d:63:45:74:3e:f8:bc:d7:70:f7:ff:b5:eb:5f:ee:
                    f2:f2:bf:0b:24:b3:18:75:15:8b:e6:f9:da:d6:c5:
                    9f:2a:36:6e:8f:84:e7:53:49:50:0b:5d:df:21:cd:
                    69:d5:bc:b8:23:21:9d:e1:db:10:48:49:dc:3a:b4:
                    8d:c1:d0:f5:d5:d6:c7:fa:80:97:df:85:f0:82:3e:
                    d1:2c:fd:01:44:a6:b5:c9:58:f7:80:43:8c:e2:af:
                    53:20:95:bd:08:73:c4:e8:8e:2f:cd:44:6f:1d:2c:
                    2b:72:7f:62:cf:2b:5b:1c:bb:b4:f8:a0:1a:8a:e2:
                    ae:1b:d1:92:09:ae:6f:98:89:cc:9a:3a:6d:0e:c8:
                    61:33:26:e1:72:92:09:13:4d:11:a7:ad:26:4f:1c:
                    4f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D0:B1:E8:39:A8:F3:8C:9C:46:05:13:34:14:EC:11:55:D5:30:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebe39619-319e-458b-b84a-3d8a21095a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:95:f6:c2:63:15:e2:98:f8:93:f7:1b:42:2d:dc:6a:e0:89:
         46:3b:d5:e1:8b:80:7d:12:98:4e:c0:88:77:7f:88:1a:44:fa:
         90:9e:e1:e3:5d:76:7d:6b:cd:e6:ef:82:8c:af:c0:33:d4:96:
         40:ff:5c:5c:7c:39:f7:f4:b8:fc:d1:ed:1c:eb:91:5c:0d:31:
         92:c5:52:0b:6c:3b:71:de:a1:e3:53:f7:75:ba:6e:91:a4:4c:
         26:a8:b4:b7:81:c5:42:98:2c:d5:ca:48:58:8a:73:68:bc:9e:
         1b:a4:62:c3:42:10:c2:f1:92:43:32:76:2c:6d:af:89:e2:58:
         f9:e4:30:3a:75:c8:07:2c:9c:4e:7a:7f:86:f4:2c:94:14:1f:
         7c:89:13:2e:ab:96:8c:c2:d5:b3:12:49:c6:96:54:3b:cb:54:
         6e:e8:ff:9c:ba:d1:fc:20:06:16:d8:ab:64:61:68:9d:0c:20:
         18:65:d1:1c:a3:e3:b7:05:8a:9f:8b:d3:97:22:6a:ae:5b:39:
         3f:4e:a7:16:b8:c9:99:9d:a3:21:53:2a:07:e7:2b:8f:fb:a7:
         bf:49:2b:bc:d2:66:20:88:a6:78:bc:23:4f:97:1a:c2:91:56:
         ef:c1:ac:6f:d2:45:ce:4d:4a:62:a9:c0:2a:03:d3:11:a8:4e:
         05:63:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:34:57 2024 by rpki-client on console-fra.rpki-client.org