Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f507d72-8026-415f-aa5a-c40b8d91c469.roa
File:                     3f507d72-8026-415f-aa5a-c40b8d91c469.roa (raw, json)
Hash identifier:          6TaeA1v2y8TeCC8vue7e1hWFjw4fxm9zTzsaAeyqQpA=
Subject key identifier:   61:55:97:0E:78:C9:CF:C3:51:1F:DC:60:81:0F:2A:A3:57:CB:9D:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35F967B7BDD1B0DE3FCBD0C74CF8E227C9A0976D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f507d72-8026-415f-aa5a-c40b8d91c469.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        205.149.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f9:67:b7:bd:d1:b0:de:3f:cb:d0:c7:4c:f8:e2:27:c9:a0:97:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=ce8295f741ad729d2a782136a5cd437bf9bbcc6ee29f04359c9962578e295ca9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d2:00:c2:8e:1e:67:4a:df:5f:54:09:e0:8b:
                    33:b4:d4:37:32:b3:51:6b:4c:19:52:e0:50:53:5a:
                    70:fa:b3:7b:d8:5e:49:21:57:5c:13:e6:25:c8:8d:
                    6e:e7:91:1d:c5:3f:2f:4c:4c:37:20:42:9f:cc:c3:
                    34:d7:e8:25:9a:e7:a5:87:92:a1:e1:d8:ac:3f:a6:
                    c6:a4:5c:ea:6b:8b:43:cf:71:1a:04:65:61:ba:f5:
                    0d:53:a6:41:99:a0:94:c4:7d:98:0c:53:21:ea:9d:
                    d0:5e:72:ca:1b:36:22:0f:19:5b:10:bd:92:01:fb:
                    34:82:1a:3a:7e:50:fd:99:f7:7b:42:e4:61:62:04:
                    a9:16:d2:45:7c:f1:e7:68:44:9a:7d:75:e3:9d:23:
                    d4:e7:98:95:30:e6:5e:d7:4b:44:f0:3f:9d:b0:08:
                    01:48:ac:94:84:20:3a:ac:b4:7e:3a:d8:ad:95:da:
                    bf:67:23:ee:aa:88:33:98:67:fd:6f:d2:77:26:e4:
                    20:4d:68:71:dc:2e:45:7c:14:02:b0:77:bd:29:69:
                    41:ef:d0:23:0c:27:87:81:58:ae:0f:1a:45:3d:bd:
                    13:ab:03:37:c2:aa:a4:0b:69:e9:5c:22:a4:83:4f:
                    77:c0:bc:8e:a6:75:24:41:7f:8e:93:fb:02:9a:e6:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:55:97:0E:78:C9:CF:C3:51:1F:DC:60:81:0F:2A:A3:57:CB:9D:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f507d72-8026-415f-aa5a-c40b8d91c469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.149.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:c4:8c:22:83:67:e0:ac:a1:de:c6:31:32:e6:18:24:58:81:
         0b:d8:32:30:83:b9:4b:eb:db:e6:d2:c7:57:7a:3a:a3:4f:05:
         25:6a:ef:d1:18:92:b8:53:86:cc:a4:3c:ff:75:7c:f8:bf:38:
         77:2a:d2:5f:a2:4e:57:c5:1a:3a:13:24:56:fc:44:61:49:80:
         d2:0f:38:af:73:3f:84:d4:bb:d4:2b:5a:c8:0e:d4:8a:aa:05:
         ab:83:e2:e9:ed:09:44:a8:69:8f:9b:ba:01:af:cc:6f:25:d7:
         20:90:e7:ca:ae:d2:42:f0:08:44:cf:3b:57:5d:8d:44:de:51:
         79:d0:fe:ce:1a:78:e7:cc:0c:40:49:10:06:8b:09:f9:ca:51:
         4a:0f:02:a6:fa:09:09:ea:cd:ac:6a:1f:71:d3:a9:8a:52:43:
         d1:74:e8:9b:8b:fa:f9:bf:19:6d:9f:4a:6f:6a:c9:d5:2d:30:
         e0:b9:ce:52:11:97:49:8a:30:44:ce:d3:cf:d1:a7:c0:75:d8:
         65:98:77:bf:62:12:f4:b8:60:19:49:ef:6a:3d:42:50:27:a4:
         9e:af:a2:01:66:c7:60:c3:45:9a:9e:cc:1c:b5:86:b7:ea:cb:
         1b:cf:df:28:50:b1:46:0a:8d:77:23:69:94:cc:65:98:20:8d:
         51:87:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:56 2024 by rpki-client on console-ams.rpki-client.org