Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03e2b441-9934-4e21-8fc6-2cbe9000cc23.roa
File:                     03e2b441-9934-4e21-8fc6-2cbe9000cc23.roa (raw, json)
Hash identifier:          VCkiY2GuoWCW27X8lpgqs1nx6BUUm5ZKrP0R2Nf/vxg=
Subject key identifier:   43:B1:65:2E:21:76:33:FD:26:3F:36:FE:BB:F4:59:ED:8D:8E:83:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39933CA7435910D736C58681144F06F90A5CC762
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03e2b441-9934-4e21-8fc6-2cbe9000cc23.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        32.232.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:93:3c:a7:43:59:10:d7:36:c5:86:81:14:4f:06:f9:0a:5c:c7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=45082a3a7171004774cc428bd0c0535e2da58ecb46d878a7829154b7d1fdbb94, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:f4:1a:2a:d9:2d:75:7a:a2:12:65:b9:dd:
                    4c:f4:15:24:9d:34:0c:e2:c0:04:17:62:1a:29:f0:
                    5e:7d:3e:8c:3f:c4:30:15:d8:de:12:c0:0f:15:ce:
                    7f:b6:fd:40:c0:43:62:6b:3a:2d:52:03:19:2c:57:
                    60:da:cb:4b:d3:8f:c2:7c:97:54:e7:36:04:5e:f2:
                    e8:7e:43:18:05:d3:27:10:34:3a:59:df:68:27:43:
                    f2:f1:94:d4:29:34:15:21:05:2c:76:bb:e3:98:ed:
                    83:2f:8d:7e:dd:d7:04:d7:d1:24:61:aa:dd:ff:0d:
                    89:a5:12:f9:ed:2d:4a:13:55:c9:76:ab:e9:ea:f8:
                    f6:32:ab:16:f6:e2:22:b5:73:82:71:89:2a:d1:8b:
                    e6:63:e1:a7:f0:cb:6d:e6:ea:ce:b1:fe:97:78:87:
                    61:b0:b0:94:49:8d:28:10:91:02:ab:63:9f:97:79:
                    83:1c:5b:f2:3b:36:9b:96:38:61:3d:af:d6:73:30:
                    c2:1f:bd:77:d2:67:f2:b3:46:d6:5b:56:4a:5b:51:
                    20:fc:06:ac:98:93:30:2e:e6:95:07:16:65:99:f9:
                    88:53:c2:9b:a9:25:41:dd:74:e0:3b:e4:1b:b4:5b:
                    63:3c:be:02:a3:36:7d:f0:f5:9f:30:da:4f:9a:8f:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B1:65:2E:21:76:33:FD:26:3F:36:FE:BB:F4:59:ED:8D:8E:83:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03e2b441-9934-4e21-8fc6-2cbe9000cc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.232.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:a1:5f:be:d3:8b:46:54:9d:bf:3b:9b:e1:4b:a0:e4:3a:ef:
         1a:38:e5:ec:ad:05:b6:bb:cc:cb:8a:f0:7b:04:d4:c8:b5:ca:
         64:21:c5:1a:e9:bb:33:50:84:85:72:50:f6:2b:ef:c4:cc:f6:
         9b:02:89:37:af:9a:fd:a1:3c:31:25:e5:25:64:40:0a:b3:e0:
         6c:fe:c4:9b:3b:6c:a0:d6:e6:3b:7b:6c:81:97:21:b5:c5:b1:
         60:0c:05:13:18:5f:f4:1a:be:e7:89:44:b8:86:b1:7d:57:e1:
         ad:96:15:3a:5b:c6:85:57:18:56:98:72:a1:e0:68:9d:3e:9c:
         93:80:55:c5:c4:7d:6b:ee:a3:7d:0a:fe:be:96:b0:93:ea:06:
         37:f4:09:87:38:d6:be:2a:64:e7:75:49:f3:b4:a4:df:1b:16:
         45:0b:1f:b5:e9:d9:f2:34:f9:62:c6:b4:ee:5f:ee:74:37:ce:
         e2:a7:f6:b4:4f:62:2b:a7:eb:24:b7:fa:3d:e5:e7:ab:ba:33:
         6c:8c:d3:1d:7b:77:4b:ce:ea:3a:f3:de:31:89:d6:f3:c5:7b:
         e3:e6:87:73:94:56:2f:90:0b:fe:6f:c0:b0:d3:65:0f:01:62:
         78:73:67:cb:bc:88:ee:1f:a5:52:ac:33:7f:4c:5f:25:a5:65:
         5f:60:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:15 2024 by rpki-client on console-ams.rpki-client.org