Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a114e16-f155-4c15-8bba-4f75ad8630ee.roa
File:                     3a114e16-f155-4c15-8bba-4f75ad8630ee.roa (raw, json)
Hash identifier:          E+Mj8B2bytBodua6vIVkS+bDdVknyeiPdIKloGGHcnQ=
Subject key identifier:   D5:58:88:BA:8B:DA:A8:A6:E0:D4:23:4F:72:E7:70:02:F2:8F:9E:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E99401CB8161061FF2D8C6359DDCA1407DB7A5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a114e16-f155-4c15-8bba-4f75ad8630ee.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        130.176.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:99:40:1c:b8:16:10:61:ff:2d:8c:63:59:dd:ca:14:07:db:7a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=1f67d5700dad7fa868a1fcdb1576f75c4ecda605400e3a8c48b8f3af9024c994, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:64:1c:f2:53:94:c7:5b:0f:d0:a1:4a:bf:
                    2d:ff:71:37:07:a9:53:cf:22:c0:ef:c7:50:22:b7:
                    aa:9c:b6:12:7e:6c:ac:b0:d9:dd:19:e0:65:eb:17:
                    81:d8:75:16:e6:b4:b6:24:00:b5:12:cd:70:1d:38:
                    54:f0:57:f6:76:e0:1f:26:23:19:9b:1b:4e:18:c9:
                    0e:dd:82:33:ea:42:79:8c:1b:82:22:75:51:c4:d9:
                    60:90:02:3b:22:1f:c6:5e:e1:08:01:13:37:cf:d5:
                    9b:30:79:f2:b0:e8:37:ab:8f:85:9e:ce:d3:60:a4:
                    a7:88:96:7d:51:c3:61:4d:92:77:22:fe:1d:5a:96:
                    12:0c:9c:45:90:0f:5c:d8:f2:f4:1e:45:bc:65:2b:
                    7d:37:54:56:78:e0:bd:5d:f7:84:da:ca:06:cc:f7:
                    13:14:cc:91:19:9c:fc:af:af:0e:6c:35:e6:d8:25:
                    56:0e:b5:33:0b:5a:3f:5a:56:ad:de:93:14:da:2d:
                    ff:d0:6d:c9:d0:b4:68:0b:62:0e:15:69:c4:d7:0b:
                    52:19:03:4b:ec:51:25:2e:d1:85:72:41:66:ae:6d:
                    6f:23:27:3e:b4:ac:eb:22:89:91:e5:f9:f9:e0:e2:
                    2d:a5:a3:77:2b:fd:d0:cb:8f:b2:9e:d7:98:8c:1c:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:58:88:BA:8B:DA:A8:A6:E0:D4:23:4F:72:E7:70:02:F2:8F:9E:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a114e16-f155-4c15-8bba-4f75ad8630ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:55:5d:c3:90:83:ed:f2:3c:ff:08:27:a4:28:94:18:e7:be:
         23:88:e4:d5:45:b8:81:7c:6b:b2:fd:66:40:20:7c:6f:a8:03:
         dc:b7:15:1c:87:61:55:57:19:cc:b8:d6:5f:32:00:5a:80:19:
         c2:a8:99:c6:16:20:1c:43:10:4a:5d:15:f5:c6:28:44:9e:1e:
         c7:60:d2:8f:b9:2b:ce:03:c1:2d:f0:48:2b:96:c7:0e:84:a6:
         97:b9:9f:2c:1b:d9:ea:01:a7:d3:da:c3:30:96:74:e5:76:92:
         3e:84:bf:02:65:7d:72:18:3c:bb:4a:4b:2a:5b:39:13:78:08:
         0d:30:66:9f:b0:e2:54:7d:43:b3:f8:a3:6b:22:f7:07:6a:33:
         ec:ae:8b:58:6c:12:ba:e6:14:c9:84:c1:c9:f7:d6:15:88:1d:
         0a:73:5c:5b:1b:a6:c9:ea:89:a5:00:c2:5c:98:fa:c1:be:8e:
         d6:57:89:cd:05:90:d2:75:db:e1:4a:31:f9:fe:37:06:fb:6a:
         82:46:57:a9:fd:bf:24:bf:dd:e3:98:14:4c:db:f9:6b:15:e3:
         e0:80:53:d1:cf:a1:04:1e:95:6e:7a:ea:d5:43:a3:90:cf:1c:
         a8:0a:d4:fc:1b:4b:2b:95:a6:77:44:8e:13:21:e4:d4:eb:10:
         c0:a4:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:54 2024 by rpki-client on console-fra.rpki-client.org