Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/441523be-a2ae-4293-b29c-fec428d9805b.roa
File:                     441523be-a2ae-4293-b29c-fec428d9805b.roa (raw, json)
Hash identifier:          xskyObzN0UF0aEIacU9BHHSZ5jh7HFTtYLB3o+Tv5Ss=
Subject key identifier:   3D:8B:EE:2A:EF:1C:AD:4B:83:62:BE:4D:67:87:16:2F:CE:20:34:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F26C7F6D3005F3DE7489D127B2D47352E2BECF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/441523be-a2ae-4293-b29c-fec428d9805b.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        162.208.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:26:c7:f6:d3:00:5f:3d:e7:48:9d:12:7b:2d:47:35:2e:2b:ec:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=b9927a88a6e536b53f062fde90c4df3af056b77dbec49470671ab9cc430be3d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6a:f6:77:ab:42:75:21:33:84:7c:ba:a2:2c:
                    8e:e3:83:38:97:ea:a7:ea:b9:53:ba:3b:63:45:42:
                    05:af:86:ca:a9:1a:43:db:e9:81:03:08:34:48:a7:
                    b6:a5:24:5a:ec:47:d1:8b:45:71:d8:c3:cd:70:6e:
                    14:3f:c7:7f:c2:bb:0f:b6:21:42:02:84:2e:c6:91:
                    de:18:30:b2:4c:1e:93:94:e8:fa:0a:1e:58:89:3c:
                    ce:35:bf:e0:65:99:cc:fa:fe:3a:ff:23:f5:91:58:
                    d2:9e:fc:3e:85:6e:5c:60:63:d1:b6:32:69:2b:40:
                    b0:6d:30:a6:e0:70:5a:4f:78:fc:20:8d:70:38:be:
                    f7:36:be:3d:1b:1d:21:a2:d8:77:d5:8b:e4:38:ea:
                    0e:c3:81:40:f7:09:2c:90:53:5c:7e:32:06:c1:32:
                    df:4f:53:b1:e6:09:d1:e9:53:ca:c1:54:03:79:56:
                    0a:6e:26:80:53:3c:d2:3e:d8:0e:8e:78:8d:90:80:
                    34:12:62:2c:a8:9a:b5:28:7f:36:66:40:5d:9e:cb:
                    5e:9e:aa:7a:65:1e:2a:4e:aa:77:ca:bf:8f:65:2c:
                    80:72:cc:f6:e8:cc:18:a2:9f:22:d1:6e:f9:aa:59:
                    5d:35:38:a5:0b:2d:2e:fd:48:02:61:fa:2d:bc:f6:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8B:EE:2A:EF:1C:AD:4B:83:62:BE:4D:67:87:16:2F:CE:20:34:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/441523be-a2ae-4293-b29c-fec428d9805b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b5:7b:a0:ec:3d:99:d2:5e:ca:33:ea:9d:7d:9b:8e:01:1d:
         ba:56:e9:b4:c2:7a:ec:50:34:ed:e8:d7:a0:43:97:4c:c0:37:
         4b:43:21:0b:a5:da:e9:06:cd:e8:e7:ca:ec:bc:e1:85:e8:13:
         e0:93:dc:b8:ed:98:0f:1b:0d:04:eb:2a:8a:52:0f:79:98:62:
         d6:6f:ed:19:46:55:3d:8c:9e:3a:e5:83:d8:1b:3a:46:ab:dc:
         01:09:c8:6c:a1:29:2a:c0:1c:9a:8d:0a:9c:4b:da:07:dd:f9:
         b8:fc:57:83:00:8e:07:5b:91:37:9a:c4:dc:e3:86:d6:81:01:
         2e:f4:bb:91:ed:10:17:1e:d6:04:92:23:38:29:25:78:b8:75:
         7d:49:17:62:61:53:26:40:7c:a8:25:7e:30:75:8f:40:b1:3f:
         5a:a6:40:8c:37:5d:81:48:51:86:65:7f:12:a7:82:00:56:02:
         c8:bd:04:52:b5:bf:9e:0b:46:4b:91:0c:22:5e:2b:d7:3f:0b:
         e7:2c:00:1e:db:a8:85:63:eb:4f:a4:83:b9:f9:71:4a:f0:d4:
         48:2d:ea:0f:67:0c:8f:a0:41:82:1a:60:c0:a1:43:78:8d:bf:
         b5:44:68:a8:1a:3f:31:3f:d1:b0:2e:ee:72:52:1a:8f:34:a8:
         ac:31:08:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:16 2024 by rpki-client on console-fra.rpki-client.org