Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1288b26f-2c14-4cbd-8aee-0369177cdcc9.roa
File:                     1288b26f-2c14-4cbd-8aee-0369177cdcc9.roa (raw, json)
Hash identifier:          sRil3y/l4nXEGf1FRafWD6QWA87UtkwqadMyj8jm3CE=
Subject key identifier:   3D:38:25:87:80:E2:B9:4D:02:90:CF:F3:F3:7E:09:A4:7D:C1:F4:AD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D25F0829DE630609E493CF5EB0DD1512C0A41EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1288b26f-2c14-4cbd-8aee-0369177cdcc9.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        76.255.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:25:f0:82:9d:e6:30:60:9e:49:3c:f5:eb:0d:d1:51:2c:0a:41:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=36d7664a243aa8ed7d9c0e8a50e4db8f49877811316b869231877dfdad6d8800, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:e4:58:17:ec:4d:6e:71:82:e4:33:66:5f:
                    16:20:c9:bc:64:36:87:26:c1:7d:ea:a0:fb:6d:ca:
                    08:98:58:d5:2a:97:c2:2f:07:e9:bb:c4:f2:dc:ef:
                    91:75:7f:18:c5:a4:92:de:e9:4f:bc:81:a2:98:ba:
                    63:c9:9d:27:07:ee:20:3c:a4:24:e3:c0:5c:5c:27:
                    a5:5e:32:85:8c:9a:0d:88:ff:1f:3a:52:4a:74:b7:
                    94:c3:75:52:4d:35:c9:ee:b3:52:83:d2:89:f3:72:
                    41:57:08:47:11:64:8e:23:b9:1e:81:2f:97:3a:b1:
                    2b:cc:11:f8:51:f5:a9:ef:10:c3:8c:17:9e:a2:ff:
                    27:92:8b:22:1b:8a:c0:83:e8:80:37:50:78:a2:0b:
                    b5:b5:37:c8:a5:73:51:72:cc:32:eb:f9:4a:2c:55:
                    6d:44:ae:58:09:24:9e:cf:6b:e3:ef:7e:b2:9e:a4:
                    65:af:60:9d:46:31:dc:17:cd:e3:9f:24:0e:1b:a9:
                    9a:9b:ad:3e:73:17:5c:4b:f5:63:a7:d2:c9:d2:ef:
                    77:93:cd:d0:3d:25:be:c5:c1:9d:aa:9e:2b:de:d5:
                    c4:43:22:3b:1d:72:dd:8d:c8:9d:61:03:c5:df:90:
                    05:f8:7b:bd:60:b1:4c:a3:5d:16:37:0f:ff:eb:fb:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:38:25:87:80:E2:B9:4D:02:90:CF:F3:F3:7E:09:A4:7D:C1:F4:AD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1288b26f-2c14-4cbd-8aee-0369177cdcc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.255.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:ff:e8:87:b0:8f:24:a6:f3:34:55:14:70:f3:d7:a3:36:
         4c:55:5f:23:0d:de:45:b2:6b:17:b1:31:73:79:9c:cc:3f:3f:
         bc:c5:08:4c:27:a7:27:1d:bc:50:6b:d7:d3:a9:5a:7c:79:00:
         ed:8c:8b:ff:a7:e7:f7:a9:a6:95:38:d3:fa:03:2b:e8:5d:1b:
         fb:82:a2:ec:98:c7:39:0c:09:b4:81:ba:92:b0:f2:dc:70:06:
         30:6c:75:2b:46:2f:5d:a9:63:6b:2e:15:b3:f4:04:b9:68:31:
         60:06:aa:38:31:a3:28:1d:11:cd:0c:92:a1:6a:34:b4:c1:f5:
         ac:97:61:f9:a5:47:76:fb:f9:17:37:66:af:23:9c:fd:44:d1:
         93:0b:24:1d:51:a4:55:c8:c5:b0:a7:4d:92:0b:d2:dd:6d:48:
         03:77:80:8a:c4:a3:63:24:8e:d7:cd:cd:b4:74:3e:9d:90:60:
         01:18:96:6b:87:2e:0e:d7:45:e7:c0:cb:0a:44:cb:5b:ed:45:
         b3:bf:a3:22:19:cb:10:52:48:4f:6f:57:12:be:2a:c3:b1:8c:
         e9:f7:a3:d8:32:61:20:c2:af:cf:ca:8a:54:d8:05:3e:91:a5:
         87:91:e3:ae:95:88:eb:e4:76:d6:be:e2:2d:55:9f:f2:5d:a8:
         a4:c4:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:43 2024 by rpki-client on console-fra.rpki-client.org