Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4123cdbe-af41-4ec0-8f50-2451dbd8253f.roa
File:                     4123cdbe-af41-4ec0-8f50-2451dbd8253f.roa (raw, json)
Hash identifier:          i8yALs+VhpbVBDy1+PSzp8SM8AVKaum4FSGAp5qF/jw=
Subject key identifier:   A8:D5:FC:1E:9F:26:B3:CA:27:0D:C0:C0:F2:9A:C0:AD:3C:FF:50:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       43EB9C369187FEDCADA05CA3698E523DA44A2B23
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4123cdbe-af41-4ec0-8f50-2451dbd8253f.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        205.147.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:eb:9c:36:91:87:fe:dc:ad:a0:5c:a3:69:8e:52:3d:a4:4a:2b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=d14fdd7d2bc5e02c41218bdeb5fb625bd272bef8f8073cfe3d277a18fe0935c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:dc:12:ed:06:3a:56:d4:f9:41:31:c1:32:
                    3c:c6:77:6c:b1:ff:cf:83:68:2c:1d:4e:de:99:c5:
                    b4:7d:1d:d5:90:3b:ce:01:57:82:57:4d:1b:44:49:
                    84:85:b8:6d:49:e3:32:58:7f:34:21:e9:2a:c4:8b:
                    08:bc:3d:2a:5f:f9:75:c4:b4:ab:bf:72:70:23:d1:
                    ad:ab:cb:a0:80:20:cc:c1:5f:44:e1:39:49:dc:f6:
                    01:39:c9:00:a7:ac:1f:b5:60:c5:2c:39:38:46:cc:
                    d0:34:66:82:53:cc:85:7a:a1:0c:10:3b:3c:0f:b8:
                    ab:50:0c:7f:ca:5e:2c:95:5e:f2:60:d6:57:96:72:
                    39:df:47:c5:15:22:6d:7f:ab:56:44:33:7d:57:b0:
                    5c:13:7a:c3:4a:b5:8b:e7:79:3a:ea:1b:ba:be:ef:
                    2f:d3:7a:40:25:10:62:bd:b9:c1:47:5e:3f:be:9a:
                    9a:2f:0a:86:6b:2a:2c:56:b2:dc:eb:13:f0:97:78:
                    12:cc:95:31:44:ac:ce:14:02:fb:52:cf:66:d1:87:
                    13:f4:a2:b9:6e:4e:f2:19:25:77:4d:bf:c1:f7:a1:
                    61:70:05:7e:db:88:c1:aa:02:9d:d6:cb:cf:61:10:
                    c4:2a:19:c5:d9:95:89:7d:a2:9c:d9:46:8e:4f:db:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D5:FC:1E:9F:26:B3:CA:27:0D:C0:C0:F2:9A:C0:AD:3C:FF:50:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4123cdbe-af41-4ec0-8f50-2451dbd8253f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:93:6c:e5:6c:ff:d5:e8:fb:e1:22:bd:73:1b:30:ad:68:54:
         b5:a0:18:a5:07:40:1f:a8:7d:12:56:a0:91:56:93:b8:4a:24:
         c2:82:be:e0:35:5e:6e:f5:43:af:53:b9:4d:9c:4d:e7:74:15:
         f1:4e:03:e7:31:e7:69:0c:f5:56:96:22:ac:ca:f5:1f:10:95:
         40:c0:45:44:e6:bb:c0:b2:e5:08:29:03:58:bf:d9:01:83:d6:
         b1:d6:71:32:37:ae:ff:4f:20:61:71:f2:fe:db:95:a4:bb:88:
         38:c0:ee:bf:60:af:78:02:93:0a:5a:31:f6:51:d0:b8:71:98:
         60:77:77:e6:7f:d8:dd:31:35:33:bb:32:b7:b6:86:40:39:41:
         3e:88:ac:81:a2:55:18:65:0e:7d:50:7e:1a:8e:6a:55:7a:50:
         e4:6f:8d:ab:11:09:50:56:d2:4b:74:10:df:47:00:9f:f5:87:
         9a:46:98:79:45:7d:7a:9f:dc:ad:43:03:d0:47:85:9c:95:78:
         5a:28:f9:66:38:b0:a3:c7:2f:b1:22:da:9d:47:64:ba:34:e4:
         0f:ef:57:5e:99:60:bc:19:ce:3a:64:4e:60:c1:89:3b:bd:e9:
         d4:51:5f:91:f7:40:1b:d0:8a:fe:af:f9:cc:ae:df:53:77:97:
         c8:63:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:57 2024 by rpki-client on console-ams.rpki-client.org