Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386f74be-c953-4ed6-808b-5f23e8a0a6de.roa
File:                     386f74be-c953-4ed6-808b-5f23e8a0a6de.roa (raw, json)
Hash identifier:          g5LOd/T4fYuXRdKSIsuGCeMroqobzcpKtz25tPfgjTQ=
Subject key identifier:   9F:9B:D9:D9:04:B4:5A:1B:E7:FE:94:C4:3A:A1:A7:F9:A4:76:FE:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50FB771BADFE3AF373D6F5ECB7E6C6145518B877
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386f74be-c953-4ed6-808b-5f23e8a0a6de.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        172.103.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fb:77:1b:ad:fe:3a:f3:73:d6:f5:ec:b7:e6:c6:14:55:18:b8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=8afb2dc920e5efd82f63486c5beb17404a0ad9f978d5cb2770729e26868fb929, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6a:85:b1:19:c5:28:5c:3a:45:f4:fa:f8:f2:
                    38:3e:c6:79:2b:3b:15:be:2b:01:87:3b:56:4a:01:
                    45:15:90:06:62:2c:d3:d5:65:1d:fc:63:b8:76:18:
                    ce:f7:2c:6c:e7:dd:f5:54:bf:dc:07:42:6c:90:fb:
                    18:ec:88:a6:d1:d4:cf:42:b5:51:a1:a8:1d:59:d5:
                    e6:32:16:fa:59:95:7e:c4:fa:27:a1:42:5c:b7:67:
                    f9:dd:e8:7f:a7:98:66:1d:e0:91:dc:72:10:23:4b:
                    ee:c4:1f:02:97:1c:b2:97:51:50:a2:8e:bd:fc:f8:
                    87:cf:54:52:07:9d:76:52:61:51:e8:47:d4:67:d2:
                    23:e3:71:e7:f6:bb:c8:d5:48:eb:52:40:83:4d:02:
                    ad:27:b8:db:d4:f1:36:5a:21:46:9e:8a:b6:40:54:
                    ce:8b:53:ce:3d:67:e4:00:a6:1c:84:51:d8:dc:f4:
                    34:34:55:21:a8:3d:cf:fb:92:8d:f5:cc:74:0a:95:
                    24:0a:f7:f8:04:aa:ec:78:89:d6:9c:9c:69:7b:50:
                    b7:19:9d:ba:b2:46:70:d0:99:24:54:b8:86:6c:97:
                    03:aa:81:b2:dc:f9:83:f9:2e:b2:28:92:96:8b:77:
                    ad:88:23:7c:dd:67:02:e1:52:e4:73:51:bb:36:82:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9B:D9:D9:04:B4:5A:1B:E7:FE:94:C4:3A:A1:A7:F9:A4:76:FE:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386f74be-c953-4ed6-808b-5f23e8a0a6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:e0:5f:88:d1:9b:72:23:da:c5:fc:bc:e9:3c:43:1d:9d:7d:
         82:f6:29:df:9b:66:80:67:79:0e:b6:e9:27:d5:f0:45:af:3b:
         89:a3:5f:ff:d0:67:bd:df:d6:1d:a0:4a:ca:a0:98:d8:8c:fb:
         ba:a3:d6:e5:40:d3:8f:96:c2:96:ed:09:68:26:cb:e3:01:57:
         81:6f:95:82:2f:91:32:a6:77:36:f8:c0:d2:3f:0a:c4:ee:ff:
         18:44:b5:9b:2d:41:3c:db:12:44:bb:29:8d:3a:5a:3e:f3:bb:
         13:28:2a:8c:2a:fa:ad:9a:3b:7c:4e:d3:31:2e:e2:2a:1b:6b:
         81:9f:5c:b1:02:72:f5:4a:c7:1e:e4:ca:78:7f:4e:77:60:d1:
         4b:e8:99:a7:83:aa:4f:77:3c:3b:97:d5:7e:20:20:79:75:b9:
         7b:7a:40:1b:36:8a:ac:ef:5d:ec:a7:88:1d:ad:03:5f:e7:db:
         ff:98:f4:d0:4d:76:e7:bc:2c:5c:52:8c:2a:54:ad:3e:aa:87:
         e7:9c:af:04:fe:69:cb:73:c1:7d:64:91:29:65:db:99:a3:e3:
         1c:a7:0e:ea:db:c2:46:2b:b7:ec:5c:fe:92:85:99:8e:f1:7c:
         8d:a1:67:ab:22:7c:a3:8d:1b:d5:79:d9:0c:23:4f:67:92:09:
         5d:c3:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:30 2024 by rpki-client on console-fra.rpki-client.org