Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0516fcce-e4f9-4158-998f-c295c4722748.roa
File:                     0516fcce-e4f9-4158-998f-c295c4722748.roa (raw, json)
Hash identifier:          KpP7MfZRg1LZWTEr+JbC5hISu4KSE+hCb/WkWaa4gf4=
Subject key identifier:   28:79:43:67:2A:C0:D2:D2:EF:25:8C:89:46:C9:15:6D:89:00:58:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A03E3822144CDBDBBDEF2398B26AA25F94B51BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0516fcce-e4f9-4158-998f-c295c4722748.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        45.72.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:03:e3:82:21:44:cd:bd:bb:de:f2:39:8b:26:aa:25:f9:4b:51:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=8464d2ebdabcd2422eacc2501c2b6beaf1a5f9ec30b2254ab6604f21f468472c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:d2:b4:54:1e:29:08:c9:0b:21:46:55:09:
                    5a:8e:db:18:cf:c5:f9:ac:67:27:56:db:db:55:54:
                    07:b4:59:14:b0:d4:6b:43:5c:8f:6c:8a:17:96:16:
                    d4:52:22:a0:94:9f:8e:67:a9:fb:dc:05:b7:53:86:
                    e0:f5:d5:26:bf:32:66:1a:fe:32:d1:91:47:98:a1:
                    69:09:0c:f3:4b:71:b0:d2:a3:b4:5e:fc:27:70:47:
                    7c:4e:18:8d:91:4f:00:3a:50:3e:ce:0a:0d:f0:f4:
                    4c:6d:1d:4b:88:aa:03:57:33:89:0d:c9:17:17:6b:
                    70:6c:8f:7b:c9:2f:4a:c5:dd:1f:f3:91:04:fc:6c:
                    9f:c9:8b:8a:46:93:ce:69:4c:23:38:ed:b8:5c:16:
                    0e:42:16:9c:7d:9d:f4:8e:06:50:a2:8f:07:35:43:
                    6d:79:01:96:fb:69:3a:ef:d7:7c:1a:bc:da:5b:17:
                    ec:9b:47:e5:9a:e8:dd:1b:5f:56:d1:c1:97:75:43:
                    59:9b:bc:d9:0e:56:a8:8b:ea:23:d3:b1:1e:e0:83:
                    f5:4d:89:7d:24:c8:18:c8:39:e7:77:7f:13:a4:4a:
                    0a:be:25:ce:81:51:a6:e0:19:0b:66:57:ad:05:44:
                    8e:40:82:d1:39:e7:dc:9a:0f:b8:48:06:3e:18:3c:
                    c4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:79:43:67:2A:C0:D2:D2:EF:25:8C:89:46:C9:15:6D:89:00:58:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0516fcce-e4f9-4158-998f-c295c4722748.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.72.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:10:b3:e4:04:de:71:6e:01:8c:49:ed:30:4c:c2:6c:62:
         34:d8:43:ff:b8:64:9b:e9:0d:94:72:0f:28:43:82:f8:fe:ea:
         b5:c7:40:6d:3a:f2:29:57:fa:48:7b:70:1e:b1:f4:50:94:dd:
         61:e8:1e:c6:00:04:df:44:1c:dd:f3:26:88:a7:de:8a:c8:af:
         e9:d6:fb:d9:ee:09:e8:25:ed:57:73:82:8b:08:96:dc:3d:4e:
         a2:4d:68:0f:08:d1:92:a9:39:bb:17:37:25:c4:04:db:1a:70:
         02:94:cc:e7:2b:9d:80:52:a9:29:4c:f3:b8:31:37:bb:f7:19:
         1b:f3:18:32:34:2b:87:08:34:87:11:d4:08:20:c3:b9:4b:10:
         20:b5:59:7b:80:d8:66:da:5b:46:b7:19:a2:f0:f7:b5:86:d3:
         71:35:21:3e:40:df:52:e7:11:06:f5:2f:98:ab:cc:10:aa:f2:
         a2:ca:a5:c1:f0:bf:21:eb:cf:a6:f6:fe:01:0d:34:bc:88:6c:
         54:a4:81:c8:e3:15:95:3e:fd:fc:df:85:35:ce:9b:86:01:28:
         70:33:1a:4e:80:36:e9:95:af:42:d0:34:4a:cf:98:cf:a1:e7:
         8e:80:e9:ed:7d:1e:a9:03:36:e7:c2:03:60:aa:1c:16:43:79:
         ab:ab:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:39 2024 by rpki-client on console-fra.rpki-client.org