Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17dc70ee-02a0-4fa1-b026-d0e8f579c2a4.roa
File:                     17dc70ee-02a0-4fa1-b026-d0e8f579c2a4.roa (raw, json)
Hash identifier:          xJo3JgLEn4JhOI88f+sp7VKy+CY9+XOX5DhLkfW8wOM=
Subject key identifier:   EF:AF:EE:00:3E:2D:AF:2B:54:7C:B0:9A:74:36:59:B1:02:2D:B8:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08F3EA5CC125064393407737C108B1C8201A54BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17dc70ee-02a0-4fa1-b026-d0e8f579c2a4.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        136.9.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f3:ea:5c:c1:25:06:43:93:40:77:37:c1:08:b1:c8:20:1a:54:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=5e3ffc58a4536d96a7c0026930213a52702aa34cff6463850a8ca739cfc8afca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:74:29:61:8f:e5:6e:c4:1f:56:59:10:28:
                    3f:e3:38:ee:de:29:7c:8f:e6:eb:9e:73:06:14:e3:
                    e1:f8:a8:61:d6:a9:8d:96:1c:ce:8d:3d:ad:e6:67:
                    e8:da:30:87:6a:6c:6c:d0:7f:ba:10:b1:63:ed:c2:
                    13:c1:62:13:94:ed:50:c5:3e:e2:47:57:ba:d7:21:
                    10:b0:9d:5c:35:77:91:20:79:29:27:11:14:1a:cf:
                    bc:66:d5:f3:79:50:57:18:5a:54:4e:eb:36:65:c2:
                    22:c4:fc:8b:ef:ba:3c:63:b2:4b:f4:aa:ff:52:5d:
                    dc:99:63:c7:42:b0:08:7c:cb:65:21:0a:ee:6b:60:
                    4b:c4:26:53:46:ad:6f:4e:d8:49:92:65:59:b0:37:
                    7a:d5:d8:11:85:42:f4:4b:42:6a:20:18:1f:a5:cc:
                    99:3c:63:dd:c7:37:1c:f6:75:c7:cd:50:94:11:a3:
                    3e:49:81:65:3f:8b:37:ee:ff:f7:48:bc:b7:f6:28:
                    7b:af:0f:b7:7a:ef:fe:65:fc:3e:24:d9:cc:f8:01:
                    b7:eb:44:9b:d8:7a:58:eb:cc:d7:73:13:a1:28:ae:
                    1d:1d:0c:2a:29:ca:a7:ee:a1:c4:61:41:4b:d4:81:
                    20:6a:82:69:87:ed:95:b1:82:d9:53:62:fb:a0:46:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AF:EE:00:3E:2D:AF:2B:54:7C:B0:9A:74:36:59:B1:02:2D:B8:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17dc70ee-02a0-4fa1-b026-d0e8f579c2a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.9.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:c6:e6:67:75:55:52:6b:28:47:ef:e4:8e:96:12:f8:91:
         4c:9b:c2:65:0c:58:9c:52:ec:72:bb:8e:70:da:38:9e:d0:df:
         d1:89:80:8d:ba:b2:22:6f:3b:8e:6b:54:94:df:53:5f:af:53:
         fe:52:05:bd:7f:5a:8e:8c:d9:2e:74:a9:e7:c6:28:5e:df:24:
         84:44:e2:0c:50:85:01:10:5b:87:b4:d5:c8:b0:67:4b:47:5e:
         ea:e7:9d:ab:6a:28:5d:15:c5:4d:4b:3d:51:b5:b4:59:dd:9e:
         82:59:16:42:91:eb:c1:2e:f3:45:4f:da:88:6c:67:ca:59:2c:
         6e:34:e5:72:8d:bc:32:c8:19:ad:e2:32:00:90:b5:c3:32:70:
         a0:bc:a3:55:5b:76:f3:fe:c6:0d:df:8b:ad:7b:c9:b2:07:73:
         31:58:3a:ea:9b:a1:41:c9:b4:bd:e5:21:de:f8:97:de:bf:5f:
         00:60:ce:62:ea:a3:37:a7:89:0b:1d:5c:cb:92:1e:1a:18:25:
         41:08:ab:f1:b3:ce:dc:0a:57:df:21:b2:88:74:c8:ab:6c:72:
         4b:9d:f7:a3:49:d5:31:a0:ba:3b:ee:f1:5f:2a:5f:6a:5f:60:
         6b:1f:e1:83:e3:9b:b6:3b:f9:b7:89:e8:92:17:66:a3:36:32:
         68:c9:e3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:44 2024 by rpki-client on console-fra.rpki-client.org