Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa
File:                     ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa (raw, json)
Hash identifier:          O5rdhn6tgo4UbOYv+KdDJDvNoPDSX6jcu1H0b8R4Jyg=
Subject key identifier:   23:0F:D0:8A:D8:54:AA:46:49:66:DF:EE:EE:5C:94:BF:86:D9:41:39
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       421B85F5667BD1E13E67757301E07BC4C2661264
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        96.127.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1b:85:f5:66:7b:d1:e1:3e:67:75:73:01:e0:7b:c4:c2:66:12:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=431ce0faa938f32f1b4aeb95d894e045dc513ebd8499011a8a6368c35360687c, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b1:e0:82:08:f1:20:fe:af:b9:4e:20:5b:bb:
                    3a:0c:f9:29:b5:e6:a2:c6:42:49:a5:c1:38:82:78:
                    c5:11:87:bc:6d:58:cd:2a:ec:c1:09:15:84:ee:b8:
                    3d:52:b9:af:79:d3:1a:db:e7:fd:45:dd:37:22:46:
                    a2:76:60:f9:f4:20:21:61:18:5f:d8:c8:7a:11:e7:
                    31:4b:9c:ec:46:f1:97:5f:57:ce:b9:c1:93:da:7b:
                    20:b7:47:00:ce:f7:83:22:26:48:50:83:80:08:cf:
                    ab:35:23:92:30:65:3c:97:5b:91:8b:de:31:57:3b:
                    ea:4f:34:f4:0f:fc:08:88:2a:d8:09:32:f6:32:5a:
                    76:98:77:d7:0d:41:47:41:6a:45:bf:bb:1a:bf:37:
                    1d:6b:d6:13:42:2a:68:04:72:3b:cd:da:73:9b:9f:
                    16:96:17:04:37:03:5f:7f:93:42:44:8f:bb:d8:6d:
                    c6:6c:09:c7:11:21:50:ce:d7:ba:7d:79:93:7f:dd:
                    7f:e0:55:10:18:34:cd:dc:6a:be:14:2f:89:34:36:
                    13:7e:cf:94:b2:28:d5:88:e3:5a:cf:4e:15:94:b5:
                    de:5d:22:08:74:c5:c6:60:91:c1:fa:9e:43:37:6e:
                    45:1a:1c:18:8e:f8:63:ab:86:ad:de:09:81:9c:d8:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0F:D0:8A:D8:54:AA:46:49:66:DF:EE:EE:5C:94:BF:86:D9:41:39
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         06:d5:59:ce:72:9f:c9:dc:51:d5:c7:a5:11:10:f3:4d:b5:95:
         0f:46:f6:73:b9:e1:4a:1e:65:9b:41:45:a2:16:ef:cd:5a:3b:
         45:0f:3c:41:53:6e:57:6d:b7:67:54:7f:3a:aa:cb:6e:5e:39:
         3c:f9:df:82:c7:fe:5e:6b:57:32:3d:84:1b:61:fa:91:a9:9f:
         20:9e:a0:f0:45:8c:38:62:a0:1b:7d:c9:68:08:76:92:14:fc:
         b9:d9:58:e0:35:a4:f0:87:da:4f:43:0f:9e:dc:a6:86:02:c4:
         8e:ec:b1:e5:38:b0:a0:de:fd:f2:2d:74:dd:8b:c3:a4:fc:55:
         41:4d:ab:3c:bf:6b:45:ae:ca:75:bd:15:ef:47:4c:c7:0a:f3:
         ed:d0:14:12:5b:6c:91:29:0a:48:da:1d:fb:d7:81:ef:6d:0d:
         bc:35:b3:de:f5:73:c2:83:7f:f5:49:39:df:de:f2:f1:af:c5:
         b7:4e:92:b8:58:03:19:9d:c3:14:7c:d6:8c:f8:e6:2b:46:8a:
         a0:9f:cf:f0:31:9d:34:a6:35:1e:7c:a0:43:62:a8:35:a4:e2:
         8c:df:12:ed:f2:17:72:bb:42:37:2f:f5:9d:e6:95:5f:17:ec:
         7f:dd:8a:01:37:5a:44:2a:15:06:ab:24:ad:84:23:25:2c:de:
         b9:59:b8:d0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQhuF9WZ70eE+Z3VzAeB7xMJmEmQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3
YTViNzRlNjk0NDljMWViMDQwHhcNMjQxMTEzMDAwMDAwWhcNMjQxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MzFjZTBmYWE5MzhmMzJmMWI0YWViOTVkODk0ZTA0NWRj
NTEzZWJkODQ5OTAxMWE4YTYzNjhjMzUzNjA2ODdjMS0wKwYDVQQDEyQwMDk5YTdl
YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCEseCCCPEg/q+5TiBbuzoM+Sm15qLGQkmlwTiCeMURh7xt
WM0q7MEJFYTuuD1Sua950xrb5/1F3TciRqJ2YPn0ICFhGF/YyHoR5zFLnOxG8Zdf
V865wZPaeyC3RwDO94MiJkhQg4AIz6s1I5IwZTyXW5GL3jFXO+pPNPQP/AiIKtgJ
MvYyWnaYd9cNQUdBakW/uxq/Nx1r1hNCKmgEcjvN2nObnxaWFwQ3A19/k0JEj7vY
bcZsCccRIVDO17p9eZN/3X/gVRAYNM3car4UL4k0NhN+z5SyKNWI41rPThWUtd5d
Igh0xcZgkcH6nkM3bkUaHBiO+GOrhq3eCYGc2J1bAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIw/QithUqkZJZt/u7lyUv4bZQTkwHwYDVR0jBBgwFoAUmcNUTAjJlFS4
eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05
YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2
M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3
ZTU1MmM2ZTM1L2FkMmQ4YWEwLTdkMzUtNDczOS05YWQyLTE0Y2E5NGI5M2ZlMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw
LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAdgfwAwDQYJKoZIhvcNAQELBQADggEBAAbVWc5yn8ncUdXHpREQ8021lQ9G
9nO54UoeZZtBRaIW781aO0UPPEFTbldtt2dUfzqqy25eOTz534LH/l5rVzI9hBth
+pGpnyCeoPBFjDhioBt9yWgIdpIU/LnZWOA1pPCH2k9DD57cpoYCxI7sseU4sKDe
/fItdN2Lw6T8VUFNqzy/a0WuynW9Fe9HTMcK8+3QFBJbbJEpCkjaHfvXge9tDbw1
s971c8KDf/VJOd/e8vGvxbdOkrhYAxmdwxR81oz45itGiqCfz/AxnTSmNR58oENi
qDWk4ozfEu3yF3K7Qjcv9Z3mlV8X7H/digE3WkQqFQarJK2EIyUs3rlZuNA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:46 2024 by rpki-client on console-ams.rpki-client.org