Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f7c453e-1314-4042-a6ff-dbe95d9bfc88.roa
File:                     1f7c453e-1314-4042-a6ff-dbe95d9bfc88.roa (raw, json)
Hash identifier:          2gUJcIab/P3atcY32QHfBmhUxBvJ3Yq7L0zrjjS6Gm4=
Subject key identifier:   73:AF:3D:49:E5:5E:FB:2A:99:DC:CE:F2:1A:60:18:AB:89:09:C2:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F7A6412F2ED781F151EFDEED2CF4AF6E52CB218
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f7c453e-1314-4042-a6ff-dbe95d9bfc88.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        192.251.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7a:64:12:f2:ed:78:1f:15:1e:fd:ee:d2:cf:4a:f6:e5:2c:b2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=595287c0bd471a73fa79f752c6a0a6d4a63acfd7ef8c73f2a216c885f18b7b64, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:a0:41:0c:5a:76:1c:26:e9:27:f5:b6:04:
                    fe:2b:6f:11:93:7e:2c:70:f7:98:bb:b3:20:38:4b:
                    ce:36:de:d3:e1:ab:9b:ef:f7:e3:79:f1:c3:bb:12:
                    8e:d8:a0:75:f5:04:88:30:d0:5e:f9:89:a1:4f:06:
                    6a:37:ed:5d:6e:91:20:44:79:ec:24:4e:25:5f:95:
                    26:05:c3:a8:53:4b:f3:c8:95:17:01:c8:b1:ba:d4:
                    02:a7:19:75:17:47:fd:32:fd:3d:7d:0a:89:d4:03:
                    e2:1b:fc:0e:2c:90:c1:60:a9:4a:71:c7:f9:f1:09:
                    55:35:e4:05:37:48:a2:73:90:be:ba:ad:b8:6b:9d:
                    d3:13:35:03:c5:f9:0a:fe:ac:bd:ac:92:2c:07:31:
                    9d:03:26:fc:42:e4:b2:75:f3:f3:91:0d:41:e9:54:
                    70:a0:55:a7:1f:97:19:19:b3:a1:70:11:bc:b2:0a:
                    45:5f:89:91:32:de:09:77:4c:32:50:e5:f1:1b:97:
                    ad:e0:b0:a6:63:0d:40:65:d5:2f:8c:a2:c7:0f:0d:
                    d4:08:b3:2f:24:08:a8:29:be:52:a6:04:ab:e8:c1:
                    1a:78:e3:3c:5b:56:3c:ac:b5:c6:b1:a4:ae:a4:fa:
                    8c:4e:a4:29:b8:33:b2:f1:01:2f:20:10:1c:55:d5:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AF:3D:49:E5:5E:FB:2A:99:DC:CE:F2:1A:60:18:AB:89:09:C2:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f7c453e-1314-4042-a6ff-dbe95d9bfc88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.251.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a4:97:f4:bd:f2:3e:15:14:d5:50:b6:40:62:cd:76:d8:4d:
         48:b6:d8:b2:14:96:55:57:e8:d2:70:18:92:8b:6f:6f:33:87:
         19:90:63:87:18:3d:07:a9:a0:bb:d1:42:96:5b:f3:ab:1a:50:
         18:9e:24:64:e1:7a:44:44:3a:5f:a7:f1:aa:94:4b:74:56:47:
         e6:a3:47:b2:94:6f:ca:38:7b:d3:d5:8a:37:e0:bd:5e:76:9a:
         5b:60:d6:5e:d6:ef:56:f9:4b:f3:98:a6:5b:04:d0:c5:a1:04:
         8f:9e:69:d1:49:41:a1:2a:4e:f7:8b:28:3a:c4:a4:d9:5e:a6:
         8e:73:7c:37:68:f6:2d:c3:67:ae:ca:06:e3:8f:eb:d3:d9:23:
         bf:9e:e7:ab:1b:c0:8f:06:76:94:f9:df:85:88:2e:c7:8f:99:
         bf:d7:ae:5f:b3:7f:43:6f:e2:79:df:68:a4:9d:dc:02:60:f9:
         2d:ac:e3:4e:c2:0a:af:83:fa:18:fb:88:a8:a6:80:a4:6f:15:
         4c:11:7a:b0:78:f5:4e:7f:6f:de:fe:53:5c:3b:44:e8:6b:39:
         39:b9:9a:ac:88:f0:25:f5:17:9a:91:db:c5:f7:29:26:ad:af:
         dd:a2:2e:a1:c3:98:1b:5e:ae:54:85:4d:5e:ed:d3:7e:d3:3f:
         ee:de:59:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:46 2024 by rpki-client on console-fra.rpki-client.org