Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2505ea24-3c92-445f-9cd4-b90465450804.roa
File:                     2505ea24-3c92-445f-9cd4-b90465450804.roa (raw, json)
Hash identifier:          FMSClmSFo1jwIOPC15NEgsvaSQEj8OMOBaNYnj+GxXE=
Subject key identifier:   12:BF:E7:D7:2E:1E:ED:3B:D3:1F:E6:00:E4:21:81:6D:95:8F:54:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F55AC4CFC297DB5937402DB6B81DF0E0F443EEE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2505ea24-3c92-445f-9cd4-b90465450804.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        108.175.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:55:ac:4c:fc:29:7d:b5:93:74:02:db:6b:81:df:0e:0f:44:3e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=18ecafcddd177f38a960cfdc9520e601a2b3f72601b68aeb6aa1ef0c8d65e7de, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:a3:7f:cb:43:d3:55:2b:6d:df:13:4d:9f:
                    5f:da:12:63:50:62:f6:fd:ef:ac:b1:24:aa:fd:f9:
                    e7:da:39:3a:1c:13:20:99:64:b3:21:3c:65:eb:8b:
                    9d:45:25:cf:8b:38:3e:63:3d:ca:17:39:5d:62:ea:
                    79:a9:06:65:b7:b5:b0:1e:c4:2e:9f:78:4e:7d:bd:
                    23:8a:48:45:5c:3e:ad:d4:6f:98:dc:e8:78:90:ba:
                    4a:7c:b1:15:19:ea:35:f5:5c:b5:d0:63:03:be:d2:
                    a5:87:d5:8f:df:cb:b9:00:c6:dc:dd:ee:2c:b9:8a:
                    e5:6d:98:dc:9d:c3:f9:2a:93:d6:9b:13:ad:74:8b:
                    fe:07:ec:61:f7:14:8d:a0:9c:f8:93:c9:e2:1e:07:
                    81:48:1b:c3:ef:c8:de:2a:f0:2f:0b:f2:ed:95:e1:
                    92:91:fe:c5:70:8e:c4:ea:76:e3:f2:99:15:ca:b7:
                    e1:0b:03:4b:f9:ae:f3:1f:2a:05:66:73:db:f9:9c:
                    88:39:24:7c:fc:7c:04:bd:a8:54:02:f3:ed:63:cd:
                    0b:3a:d7:d3:34:a6:12:28:83:86:84:ec:a4:2d:9c:
                    59:cd:27:0d:e5:c5:fe:7c:8b:b6:05:de:c2:03:b7:
                    1a:ba:91:41:02:d6:f2:42:cd:aa:23:9a:c5:e5:66:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BF:E7:D7:2E:1E:ED:3B:D3:1F:E6:00:E4:21:81:6D:95:8F:54:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2505ea24-3c92-445f-9cd4-b90465450804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:d7:d1:d8:c7:01:61:85:d4:bc:d5:4e:90:58:5b:11:8f:48:
         f1:8f:1a:bc:b4:bc:28:ac:23:1f:42:ab:4b:e9:95:d9:0c:09:
         a7:e4:20:39:53:9e:fb:35:e3:a0:24:2c:ee:49:ac:29:c4:05:
         a6:09:a4:d0:b8:94:01:1c:43:4b:89:c9:02:6c:15:d9:80:20:
         ac:9d:53:74:f5:a9:07:3e:9f:78:76:38:55:13:af:bd:5c:f1:
         6f:d9:22:c7:57:00:1e:40:e0:ec:5d:b7:ab:7b:59:78:af:5d:
         f0:52:e0:b5:e1:60:ab:7a:03:74:fc:ac:f0:3c:97:93:ae:68:
         3a:b4:d8:de:27:49:d5:e4:b6:68:01:77:70:cf:48:36:8f:02:
         71:76:97:13:03:5f:08:bc:52:b7:89:fc:bb:6b:56:b8:59:fb:
         58:af:ae:c4:82:15:6e:12:bb:31:ee:a5:6d:51:5e:15:52:e2:
         7d:9a:1d:b8:01:4e:04:db:01:78:49:bf:4e:65:06:93:4a:c8:
         7f:52:00:36:23:21:24:95:c4:4b:fb:c9:73:b9:94:17:3b:22:
         e2:b4:98:45:5a:06:ac:f9:93:4d:ef:84:08:13:96:4c:2f:30:
         34:97:23:50:55:cb:21:56:6c:d5:44:10:35:d4:c7:6f:84:c1:
         f4:91:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:48 2024 by rpki-client on console-fra.rpki-client.org