Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc14eed1-8236-4842-9526-26b0265b42a1.roa
File:                     fc14eed1-8236-4842-9526-26b0265b42a1.roa (raw, json)
Hash identifier:          D4bopnsDIGBxCse3mZ6rSkrB/bEqaU2iDWVbsD5GnhY=
Subject key identifier:   DD:72:EB:F3:21:95:35:1C:FA:A4:2B:FA:D2:B3:1B:99:07:F3:53:60
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       190955A390067AD008B8E9A20C5FF2D56D41FFB0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc14eed1-8236-4842-9526-26b0265b42a1.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:09:55:a3:90:06:7a:d0:08:b8:e9:a2:0c:5f:f2:d5:6d:41:ff:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=ee5b96fbd4c4f89ada87402ae7c9b695856e0507430844154e10a058411ad93e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:eb:ec:2a:65:da:32:ff:0f:9d:93:c7:7c:
                    c7:27:4f:50:23:fe:63:c9:a0:b0:d5:0a:5c:cc:ef:
                    88:f3:14:7c:ac:c9:dd:29:06:c4:57:71:43:0e:4e:
                    fc:55:4c:b7:b9:22:ba:9d:3b:15:69:7a:c1:4e:74:
                    e7:37:0e:10:06:d5:42:e3:40:8c:1c:a9:1e:8a:e6:
                    5f:d5:dc:eb:38:ee:e1:97:dc:de:d7:c5:43:85:8d:
                    dd:ba:96:01:fd:c7:b4:ff:d9:5e:dc:fc:e3:2f:95:
                    0c:2f:3e:bd:5e:92:52:33:cd:c2:73:91:f6:96:d7:
                    64:39:c8:e0:17:18:1b:ca:d5:2e:38:68:22:ef:80:
                    fb:19:84:2d:aa:0f:11:9a:54:e8:7d:5b:44:9d:26:
                    57:b0:1d:e8:b3:bd:84:3f:df:05:ec:ba:db:26:eb:
                    1a:84:64:58:a8:e0:b7:67:b1:dd:8b:dd:3e:e4:ea:
                    75:f0:5a:84:85:1c:b2:07:8a:a9:63:4d:56:52:7b:
                    fc:d4:d4:58:6f:c7:b1:24:b6:1f:a9:33:3b:2c:25:
                    f0:06:71:31:ea:82:96:ac:a0:7e:ac:b4:43:ae:67:
                    3a:e2:79:e3:00:ae:cf:82:c2:7b:43:1d:39:14:36:
                    27:da:02:f1:40:16:1d:82:ce:4d:60:e3:d1:4c:cf:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:72:EB:F3:21:95:35:1C:FA:A4:2B:FA:D2:B3:1B:99:07:F3:53:60
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc14eed1-8236-4842-9526-26b0265b42a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:37:b9:1e:57:68:83:69:31:8c:8a:3e:a7:28:ed:1f:22:10:
         9f:8f:6a:4d:54:76:37:da:92:18:b3:a3:f6:64:cd:84:1d:73:
         3f:2b:92:da:1a:ac:02:7c:fd:f1:7b:28:5b:20:db:db:0f:81:
         bd:c3:65:18:54:b1:7b:be:bb:fb:5a:d7:5c:8e:1d:70:5f:23:
         99:03:ec:c5:a7:c3:77:b7:64:ab:26:e8:68:c8:8a:05:5d:e6:
         fd:77:7a:cd:5b:c8:99:ec:e6:1e:ba:51:29:d4:2d:c7:ea:c6:
         d9:ec:02:9d:3c:4d:62:da:3b:49:78:7a:24:2c:41:02:6e:ab:
         29:61:5f:80:25:1f:f8:c5:ef:c1:88:6d:dc:36:1c:0b:04:c7:
         c6:25:87:40:73:95:2a:2b:eb:73:41:b5:38:26:1d:93:8b:36:
         6a:4e:5a:c0:2a:c2:f3:d7:0e:e1:42:89:71:89:3f:42:0d:50:
         68:b2:65:24:22:ad:a2:3e:61:1b:f2:54:55:42:5f:6c:05:fd:
         49:a4:67:28:ec:7e:fb:00:e5:c7:b3:c5:f3:2d:8c:7d:15:a3:
         22:31:24:3d:fb:ed:19:d0:9a:75:6d:6b:16:54:35:37:d2:18:
         00:46:31:af:b9:b5:91:e4:ec:7b:48:ad:2a:35:67:2f:f1:a5:
         9e:56:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:31:44 2024 by rpki-client on console-fra.rpki-client.org