Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41ea6b71-66e5-4e67-a23f-ff2c06b41023.roa
File:                     41ea6b71-66e5-4e67-a23f-ff2c06b41023.roa (raw, json)
Hash identifier:          RAGMIcH2t+BfTkVwZRz9yJ2g5cFdbM+IO/J0FIPZQBI=
Subject key identifier:   5B:51:71:E4:1F:84:1B:9D:DA:97:D2:CA:1A:85:3C:5D:7A:4A:A7:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B11C9D451283AA9DEB367812E90833D7672A7A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41ea6b71-66e5-4e67-a23f-ff2c06b41023.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        162.250.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:11:c9:d4:51:28:3a:a9:de:b3:67:81:2e:90:83:3d:76:72:a7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=1105a16a29e5d65b43fbf03d2df0e56fe0cf6ca8ca060d943f2106f2219d1393, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:34:98:ce:5a:f5:04:23:cb:00:4d:3d:01:
                    4b:17:9f:e4:ae:5d:32:8e:ee:dd:0c:2e:72:0a:a7:
                    08:cd:1b:75:1e:1f:a5:67:3c:9f:78:f6:45:a1:06:
                    b0:d7:0e:fb:b7:89:1a:de:e0:0c:d7:f7:36:31:17:
                    c3:2f:5d:4b:ca:2b:97:2e:36:bd:42:64:4c:06:cf:
                    75:e5:ee:bd:a1:17:23:9e:7d:95:16:fb:56:bb:ce:
                    c0:c4:4b:b1:63:d4:d8:18:ff:04:e0:43:8a:bf:2c:
                    1f:91:46:2d:af:ac:03:0a:be:32:51:a8:b7:c8:14:
                    39:d9:c7:d7:ce:2c:bd:04:a2:27:26:d3:0b:c2:ca:
                    5b:53:4e:26:37:ce:e9:d6:fd:0a:08:97:8a:33:fc:
                    40:60:59:1a:fa:e1:b5:77:3a:07:1a:37:f2:ff:fd:
                    87:3d:bc:c6:50:ee:34:a6:d5:6c:83:23:7f:f7:78:
                    7d:f4:c4:80:38:00:8c:bd:98:68:32:8c:c3:26:c5:
                    f9:2e:08:0c:ed:cd:1c:03:60:c0:8f:24:b6:c4:a1:
                    da:eb:08:de:f9:fe:79:78:33:be:08:83:90:dc:36:
                    91:1b:ba:a0:2b:f4:80:36:77:f9:b6:b8:9d:db:bc:
                    07:50:6a:03:6b:f6:63:e0:a3:b4:f7:c8:a2:c2:af:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:51:71:E4:1F:84:1B:9D:DA:97:D2:CA:1A:85:3C:5D:7A:4A:A7:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41ea6b71-66e5-4e67-a23f-ff2c06b41023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:49:23:d8:5e:56:60:97:a8:3a:ab:cc:cc:4c:73:e5:17:67:
         2b:7d:ae:f7:ac:72:85:1a:ce:47:a1:bd:6b:f4:62:46:41:b3:
         2b:fc:37:4d:b4:ac:69:a4:58:c9:79:86:89:52:23:d9:26:24:
         13:c6:b0:df:d8:eb:ed:0e:50:20:25:9c:eb:da:60:f9:c4:c6:
         40:bb:29:a0:40:62:e5:cc:27:fe:7c:a4:e2:18:81:f6:09:1e:
         10:02:ad:80:ba:e5:8a:bb:54:94:20:6f:44:01:3f:75:8e:4d:
         16:55:cc:ec:67:86:08:73:0c:db:ac:82:d1:d4:5c:05:1e:a3:
         f1:ba:58:0f:a8:45:ee:71:25:39:e2:7c:a0:05:9d:85:ff:eb:
         a9:df:f0:90:ad:c8:69:7f:c9:69:73:7e:97:5a:01:9a:75:c2:
         bd:25:d5:97:88:ff:8e:c1:29:58:88:96:7c:d2:37:f5:e7:fd:
         b0:95:26:3f:26:71:90:6f:ea:d8:1a:01:a9:3b:ab:87:bb:e8:
         e6:25:ff:0a:ee:e1:a8:90:e6:3a:8b:ce:3b:71:69:ac:b8:e8:
         1d:0c:70:6a:38:a4:43:72:06:5a:1e:88:a5:4d:2c:27:98:6f:
         1f:fc:f5:81:a1:1f:cd:78:50:ac:3d:79:32:be:04:56:9b:47:
         56:f3:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:56 2024 by rpki-client on console-fra.rpki-client.org