Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/276fdd50-edd9-4254-9fb3-11797ccc8dd2.roa
File:                     276fdd50-edd9-4254-9fb3-11797ccc8dd2.roa (raw, json)
Hash identifier:          l3CXkVwTeSelx660OJkt000dVR/XOxLJCcCtaUy3zWM=
Subject key identifier:   15:A0:76:5A:5C:E8:45:50:7C:01:6B:B1:85:DF:0C:73:67:D5:D6:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       049D18F44354001AAEA6DB67FC08601E00E9DA7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/276fdd50-edd9-4254-9fb3-11797ccc8dd2.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        216.39.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9d:18:f4:43:54:00:1a:ae:a6:db:67:fc:08:60:1e:00:e9:da:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=c50d53eec23a791822b50450c71fc118ffbc4d92a0cd9aa8eef684c174dee50f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:0c:99:ca:e5:a5:29:10:5d:99:bb:a6:5a:
                    0e:0a:97:89:25:37:24:bd:bf:cd:7d:f7:93:d6:45:
                    12:c8:d3:79:28:ee:9d:e9:8e:14:c2:82:6f:51:77:
                    19:62:6e:db:06:71:b4:5e:19:39:e4:6e:90:e5:0e:
                    a3:6e:fb:f4:aa:eb:47:0e:1e:9a:6c:e0:9a:79:1a:
                    8c:b3:16:74:3f:3f:00:f5:da:b6:19:74:ca:42:bd:
                    61:9b:9c:1e:1c:6c:60:65:85:5e:de:bc:45:b7:9f:
                    7d:82:bf:b0:da:c0:e2:96:f4:c9:d4:78:49:f2:00:
                    0d:b1:74:91:13:fb:0c:35:ed:f2:dc:d2:3c:e5:b3:
                    68:c7:6f:bb:b7:93:17:33:c0:07:4b:05:17:be:31:
                    50:53:4f:09:1d:e4:4d:7c:fd:26:1e:ab:bd:3c:f0:
                    09:09:c7:e9:57:d6:72:47:be:90:83:82:43:57:33:
                    01:eb:24:23:85:29:fd:c9:f8:d1:02:b0:d4:4e:18:
                    38:e0:9b:c2:b5:28:4c:2a:d9:6a:b5:ce:a3:79:92:
                    c2:f4:ad:4a:5b:70:f5:12:2b:ba:eb:45:14:7d:2a:
                    06:32:d8:54:bd:67:72:2f:24:64:61:2a:6f:47:57:
                    6c:d2:83:1c:45:83:ef:4c:43:11:74:64:34:12:f4:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A0:76:5A:5C:E8:45:50:7C:01:6B:B1:85:DF:0C:73:67:D5:D6:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/276fdd50-edd9-4254-9fb3-11797ccc8dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:e8:3b:30:3d:1b:82:fd:f8:06:ce:c2:31:03:1b:9f:76:51:
         b7:dd:90:c3:96:f0:27:78:7e:fa:52:ca:26:9c:fc:4b:4d:5d:
         fe:f1:00:c6:86:2b:fa:2c:7e:14:6d:35:8a:60:75:58:24:8a:
         0b:34:93:c9:06:f7:14:a5:1e:c8:f5:27:48:66:cc:5c:78:87:
         39:a9:87:7f:51:81:76:aa:36:96:8f:1a:f6:aa:e0:c5:54:78:
         fb:64:90:bd:1c:8a:ea:08:8d:48:97:26:81:2f:5f:05:1b:23:
         c5:35:38:b7:f8:ec:86:cb:8c:7b:06:1a:b9:98:e6:34:17:f4:
         93:ea:41:0a:36:e6:67:53:47:b3:a6:e1:2d:d5:ef:a2:a9:b5:
         f0:0a:f7:b3:f1:72:03:62:20:cb:85:5b:79:81:e0:79:27:fb:
         38:b9:05:e9:30:e7:ce:a0:fa:3d:a9:49:4a:ba:93:62:54:ca:
         54:23:8e:af:f9:50:1c:93:a1:b3:e4:a8:61:a7:77:bb:3e:ed:
         32:88:16:b6:52:ac:55:55:a3:36:fc:34:a3:4d:01:db:52:86:
         1a:29:30:bc:36:56:a5:b7:48:be:f1:b1:d8:1d:b7:aa:b4:45:
         80:52:74:47:94:f7:75:ac:9b:a1:71:4e:ee:b8:29:82:fa:e4:
         07:3b:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:25 2024 by rpki-client on console-ams.rpki-client.org