Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/056772da-4106-43bd-b54f-e11f3c8dd0ea.roa
File:                     056772da-4106-43bd-b54f-e11f3c8dd0ea.roa (raw, json)
Hash identifier:          r7SSJLHxC5M6GKqWpfc/5Wbdj9HCkx/gf0o9csXZwlU=
Subject key identifier:   5B:86:CE:D0:38:B1:2B:1C:B8:94:CE:09:86:16:C1:7A:C1:55:81:51
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3717D453BF352D3A1D253C235E9B24E6B2C3C9CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/056772da-4106-43bd-b54f-e11f3c8dd0ea.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        80.241.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:17:d4:53:bf:35:2d:3a:1d:25:3c:23:5e:9b:24:e6:b2:c3:c9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=2ea85001a4eae5781c437c02433213d6d1df9a9e1184ccdd75baf954f74eb650, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:be:2b:ea:0f:a6:00:d6:77:8c:f8:8a:14:
                    f8:f8:67:42:30:a7:6f:53:ed:33:c5:8a:2f:64:97:
                    52:5f:f5:aa:57:07:ef:86:20:6d:08:f7:51:bf:25:
                    2d:f7:81:d2:d0:f6:d9:f6:f3:3b:2c:ba:30:40:26:
                    98:03:e6:db:e8:b9:12:f4:a9:11:74:c9:14:01:91:
                    fc:81:76:d5:9b:80:5b:23:e9:e3:87:cb:50:02:a8:
                    e0:c9:13:90:d2:13:b0:32:5f:42:35:0b:6b:59:08:
                    bd:09:3e:57:13:10:92:1d:84:8f:74:fe:49:ef:48:
                    96:c2:70:4f:5b:3c:81:73:80:b5:3b:a8:56:88:6d:
                    54:27:ed:d5:de:82:ad:d2:88:43:88:86:a9:2b:99:
                    78:2c:ab:e3:e7:96:6d:56:d5:d5:0b:0c:a3:5c:e8:
                    d7:5f:bf:91:48:41:c7:78:a1:14:37:50:a0:c8:34:
                    8d:ad:96:99:99:c4:53:1f:3c:09:69:3e:f7:9f:24:
                    b2:ce:b6:a7:df:78:c5:af:c6:4d:6d:10:78:69:36:
                    21:b9:b0:31:d1:86:0b:64:8c:33:8d:84:56:a8:77:
                    ef:04:2a:f3:c0:c0:d5:05:47:c8:be:5f:61:96:dc:
                    a7:2c:ab:af:43:3b:42:a7:ff:75:83:8d:02:5f:cd:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:86:CE:D0:38:B1:2B:1C:B8:94:CE:09:86:16:C1:7A:C1:55:81:51
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/056772da-4106-43bd-b54f-e11f3c8dd0ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.241.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cf:9c:fa:8e:57:19:36:11:7d:47:70:2e:cb:1e:a9:6f:63:8c:
         84:be:1c:9e:f6:4a:2d:28:de:fc:a0:fc:2d:78:9e:cb:8d:75:
         e2:f8:1a:fa:1b:6b:16:f7:6b:eb:44:45:76:30:7d:ee:a4:51:
         c8:2b:aa:b2:39:f2:97:83:42:42:fc:55:5b:0b:12:fd:0b:1c:
         ed:66:b6:c5:94:f4:9b:26:89:0d:3d:5c:74:d3:84:3a:3e:18:
         97:ae:cb:33:36:ab:76:f4:0b:3e:0d:17:a8:e5:a0:94:04:c3:
         86:57:c8:da:ac:5e:c8:b7:99:14:e5:37:98:e4:14:89:39:ae:
         78:69:6c:ed:b0:fd:34:3d:a0:35:48:f7:20:41:99:b6:d1:41:
         15:65:ca:0c:80:4a:de:0d:94:a0:33:72:2b:31:e4:94:13:1b:
         9e:f1:37:1f:a1:79:3b:4f:b6:b0:10:96:40:40:44:f2:84:09:
         b3:66:20:d2:38:01:7b:a7:43:37:e5:8d:86:11:d9:df:1b:bc:
         c0:f4:63:92:40:94:8c:b8:44:ef:bd:2b:69:95:c1:5b:7f:0b:
         65:ec:7d:bc:f9:59:48:59:e9:c0:72:35:7f:fa:0e:34:3f:51:
         d3:1a:59:fa:dc:81:a4:ec:21:12:ed:35:64:2d:ee:f2:58:16:
         8a:87:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:42 2024 by rpki-client on console-ams.rpki-client.org