Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e3df718-47a3-4852-a205-58384aeb2453.roa
File:                     5e3df718-47a3-4852-a205-58384aeb2453.roa (raw, json)
Hash identifier:          C6iI0o6cDuS59vqUw4SRoqLXDSKlfJKmM8gF9pDfefI=
Subject key identifier:   B0:64:D0:3E:AC:37:31:32:8D:92:E7:BF:C0:D6:D9:A7:C3:CF:E9:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       194EA69F72FFEB47F5BE4DB12AE10B96FAEC557B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e3df718-47a3-4852-a205-58384aeb2453.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        37.7.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4e:a6:9f:72:ff:eb:47:f5:be:4d:b1:2a:e1:0b:96:fa:ec:55:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=aca6d5d968ff7f64cb5c2afe1f8d70ac8d3eceadf7dd327ddaaabbde107b4dd1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:49:9d:6b:a8:ef:7c:b3:28:86:28:84:e5:
                    8b:22:90:7b:c9:56:9d:43:be:39:30:0c:7e:5e:6b:
                    97:e9:62:04:9a:7e:72:92:60:f3:fa:1e:ee:3a:a9:
                    6c:d8:64:0a:be:d5:13:54:b8:c3:82:3a:6b:1f:65:
                    60:15:cc:62:ab:86:fa:ee:09:75:12:2c:15:76:60:
                    f1:66:03:37:b7:c5:a9:4e:02:75:e3:7c:0b:d5:a4:
                    2d:43:f2:c0:9a:17:74:ed:ee:0b:9a:0b:39:a0:d7:
                    5c:a7:3c:88:ea:6b:7d:29:8d:97:ad:a1:1b:9f:cc:
                    ee:e5:34:e5:f4:69:d9:0a:c1:b4:b4:b5:f2:d2:f8:
                    ee:36:16:f1:24:c1:e5:6a:95:ed:a2:41:75:ed:21:
                    4a:ce:29:cd:34:95:ae:8e:60:ba:60:8b:af:98:4d:
                    7b:3d:0c:d2:48:e7:21:e3:01:ac:07:b4:a4:28:84:
                    d8:93:11:1d:2c:46:27:02:61:f8:41:8d:c2:cb:a5:
                    46:1b:fc:5b:6c:d0:7f:7d:2d:8b:2a:2a:9b:db:a9:
                    fd:54:1d:db:ae:1e:31:11:14:fa:84:00:36:b8:ff:
                    74:9a:08:7d:df:5f:55:63:46:dd:fb:bd:d2:74:2b:
                    c6:07:ab:14:03:d9:6e:bf:33:75:10:5b:e6:f7:74:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:64:D0:3E:AC:37:31:32:8D:92:E7:BF:C0:D6:D9:A7:C3:CF:E9:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e3df718-47a3-4852-a205-58384aeb2453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.7.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d2:3a:2f:54:66:19:d3:6e:14:f4:9f:81:ab:54:d3:9d:8a:73:
         be:9c:5a:46:a3:24:cc:1c:2d:5a:72:c0:d9:03:33:0a:36:7a:
         f8:24:4e:10:03:b2:0c:1d:a5:22:7b:f5:56:1e:33:30:0d:33:
         e8:20:d3:93:ac:c1:fd:57:29:14:bd:fa:ff:0f:4a:74:df:f9:
         d5:94:15:b8:59:f1:de:35:90:20:38:85:ea:73:55:d9:6b:96:
         69:6e:d0:fe:8a:51:17:05:3b:35:3d:30:34:52:1e:64:bd:ad:
         74:4b:b1:fa:a6:2c:a3:79:f4:f1:0d:eb:28:e3:0e:83:57:fe:
         61:5d:e6:2f:f2:da:72:0e:4e:3c:cc:97:25:1e:5a:d8:b1:11:
         a2:5b:63:bd:ec:a4:65:c1:8d:75:45:89:c9:38:3c:bb:2c:6d:
         86:7b:4e:6c:2b:f0:da:73:43:be:39:79:70:94:69:59:f0:31:
         7c:3f:f3:7b:0c:4a:b3:fd:96:09:2e:50:6b:92:cb:47:ae:c8:
         7b:5f:10:5a:0a:07:ea:04:6f:cc:79:52:3a:ee:07:a4:b2:8c:
         dd:4f:4e:0a:4f:62:07:3d:e5:31:04:6f:76:11:3f:4f:d5:ff:
         79:0a:bd:4f:3b:42:ed:9b:21:b0:d6:54:fc:a4:49:2a:81:12:
         1d:8e:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:39 2024 by rpki-client on console-ams.rpki-client.org