Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6a51318-4276-4b4a-bd94-0b9080671339.roa
File:                     f6a51318-4276-4b4a-bd94-0b9080671339.roa (raw, json)
Hash identifier:          kPo2iGwizv87rllUuJds7NumauQCahbV3L9Fn3tHoYA=
Subject key identifier:   A1:2C:9C:F4:99:0F:C6:D2:13:D6:D4:30:2A:44:02:2F:32:BB:34:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F6B70451D0E0893728F307A71D5A3CFC86291FB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6a51318-4276-4b4a-bd94-0b9080671339.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        207.221.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6b:70:45:1d:0e:08:93:72:8f:30:7a:71:d5:a3:cf:c8:62:91:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=f722a4f749e0989da3771869513e0fecdfaed9426e86f702d272817d3e448750, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:4d:e4:e7:27:04:aa:74:2c:d8:a8:d7:91:
                    ac:8d:46:bf:1f:95:63:65:7f:07:6c:fa:ba:0e:5f:
                    88:9b:33:da:f1:59:14:46:b7:41:f2:85:44:a2:f2:
                    1c:19:f4:3c:fd:cd:63:14:df:66:fe:c1:11:00:a5:
                    31:d2:f5:56:45:72:7d:80:db:3b:cf:fa:ea:df:d5:
                    ea:39:ef:cf:af:64:e1:e2:68:91:2c:a3:73:ab:77:
                    e4:66:53:99:bd:7e:c0:ed:a4:c1:cb:80:54:54:ac:
                    29:89:5e:c7:7e:49:5a:9b:25:74:f2:41:23:7f:29:
                    93:8e:47:92:69:9c:ea:e4:f3:30:bf:4e:ad:d3:8a:
                    d9:c1:32:63:7e:2b:6e:a8:7b:f0:cc:06:f8:71:d4:
                    f2:37:a9:da:3c:73:d6:f6:53:ca:e7:09:07:8a:c3:
                    97:e7:3a:ef:26:b2:a5:8e:99:64:b2:ca:a3:f7:e9:
                    63:46:42:6e:15:1b:c7:50:df:08:47:cc:70:59:9a:
                    bc:11:9b:8c:f5:e3:c0:75:66:46:b7:39:b2:5b:00:
                    42:9a:72:39:82:67:e8:52:c8:26:18:66:fb:5e:fa:
                    eb:ae:8c:68:b3:17:97:21:dd:d6:e0:c9:57:68:50:
                    93:c9:bc:03:c1:8f:d2:6e:96:91:30:8f:61:d5:27:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2C:9C:F4:99:0F:C6:D2:13:D6:D4:30:2A:44:02:2F:32:BB:34:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6a51318-4276-4b4a-bd94-0b9080671339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.221.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:45:d1:d6:46:e2:7f:60:9b:ad:50:e4:15:e8:b9:6c:d6:a7:
         18:e2:db:5e:c4:be:87:39:c0:aa:f2:df:8d:95:ac:03:2c:9a:
         be:25:f2:85:81:57:d3:50:0e:5e:da:93:fc:3a:fa:17:83:b5:
         b5:2d:96:0c:ed:21:e9:4c:63:61:ca:d0:6a:80:79:34:48:e9:
         a6:99:0d:40:36:f7:24:6e:06:e9:d1:8d:59:d8:65:de:6b:30:
         5d:99:d0:25:f3:4c:59:d8:a1:24:5f:1a:5c:b2:53:e2:0d:9d:
         fe:85:5b:86:aa:31:33:67:90:59:6b:4c:d9:2e:f0:5a:9c:8e:
         48:69:a9:d0:c0:0b:c2:f2:fc:3e:c3:52:1b:ab:2b:ca:e6:0e:
         a9:9b:7d:7a:13:d7:a4:5e:f0:11:fb:ba:05:83:fd:81:fc:27:
         8c:0c:a2:06:4c:bd:a0:f5:82:47:1d:99:1e:39:b5:fe:ac:b9:
         b1:69:0b:25:97:79:3b:2c:38:3b:1f:11:b4:d3:93:ca:02:70:
         48:d9:ba:4c:a2:a8:aa:91:4e:a2:0b:ff:21:4f:84:70:a3:4a:
         01:9b:5b:01:57:56:88:b3:65:f6:f0:29:c9:c8:b1:6e:94:2d:
         6d:47:3d:00:e6:d3:df:da:93:c0:fd:db:b2:13:35:b2:e7:aa:
         5d:9b:3d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:42 2024 by rpki-client on console-fra.rpki-client.org