Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6019cd45-715b-45fc-bbeb-102c29cbb4b7.roa
File:                     6019cd45-715b-45fc-bbeb-102c29cbb4b7.roa (raw, json)
Hash identifier:          BDVvOr5JB0JDKa3CrlC3mD6Uon2zIiSYWAed14rMno8=
Subject key identifier:   A2:1D:85:67:ED:1F:54:95:51:8E:C8:31:CA:40:AD:F7:95:85:7B:02
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57DCCF93B15E8E6562673F6C21BF24EA6876087E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6019cd45-715b-45fc-bbeb-102c29cbb4b7.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dc:cf:93:b1:5e:8e:65:62:67:3f:6c:21:bf:24:ea:68:76:08:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=d6326ca05a8c0cfa9c276749b9f0c83aaa4d8c5335ebcba3d3589dff1e8a8168, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:57:5c:e3:bd:fc:e3:12:57:87:45:80:a1:
                    7b:7e:33:ee:dd:40:a7:55:a5:78:3a:59:a1:9c:62:
                    68:2b:5c:60:f9:0a:5f:de:99:4d:28:b4:43:0f:c6:
                    b8:7c:86:26:43:48:39:01:35:4a:1d:d1:60:1b:e3:
                    f5:dc:87:1e:c8:fd:20:48:19:07:dc:a7:85:df:5f:
                    46:f7:f9:c6:43:50:8e:7c:b2:e2:28:15:14:b9:32:
                    5a:c1:8c:63:59:9f:d6:39:f3:d8:2c:de:1b:0c:c6:
                    d8:c6:02:1e:2f:bd:f0:4d:cb:c2:04:1c:7d:eb:b1:
                    ce:5c:e9:64:d9:ce:79:b0:5c:39:06:0c:cb:db:19:
                    c6:64:81:9e:2d:00:c0:3a:c6:9c:98:f2:16:37:c7:
                    f6:da:30:72:3c:0e:66:1a:e3:3f:ef:77:18:1a:be:
                    48:28:f2:f1:1e:d0:1d:dd:de:94:1c:42:3d:b7:ae:
                    fe:20:ee:95:93:21:c0:53:3c:52:45:d9:8b:f9:2c:
                    f2:cc:89:7e:a8:db:eb:35:d9:1d:6c:b5:b8:bb:f0:
                    8f:75:10:55:f9:f6:b9:24:75:05:e1:95:fb:0f:8c:
                    df:bd:a2:79:26:42:b1:5d:bd:ad:f3:12:34:36:40:
                    0d:29:a2:57:74:41:62:9a:af:6e:13:20:95:e1:a6:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1D:85:67:ED:1F:54:95:51:8E:C8:31:CA:40:AD:F7:95:85:7B:02
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6019cd45-715b-45fc-bbeb-102c29cbb4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         83:91:ab:e7:f7:a1:e4:1c:42:d9:45:1c:c5:97:3b:7a:6c:87:
         fc:32:aa:a8:eb:7b:23:28:39:81:c9:5a:df:2c:8c:ba:af:06:
         d0:9a:ad:6f:0f:00:ce:5e:c9:a3:fc:b3:78:8d:95:2f:5e:c2:
         cc:76:ec:ed:51:c6:f2:d9:f0:ab:56:68:20:96:39:b1:30:3b:
         c7:9c:18:38:ed:f2:da:f2:df:92:a0:f5:f3:6b:11:91:7d:08:
         7d:c9:54:a0:62:4c:9f:5f:9d:f5:a8:02:d7:bb:7e:c6:ba:c2:
         bc:ff:47:8f:a5:51:a1:12:6b:22:01:95:0d:9a:ab:d8:ad:f3:
         62:ad:e6:7f:1d:59:84:20:10:34:48:dd:bf:a1:20:39:f4:85:
         6a:b5:16:0e:f9:33:f7:40:47:1e:35:63:26:da:f8:99:8b:f1:
         89:e4:64:b3:be:95:67:d2:cd:3d:4a:7c:19:77:4d:6b:f8:14:
         a6:38:52:39:93:d7:48:c2:cc:80:93:72:5d:b4:72:ef:93:62:
         6a:7d:8d:39:38:1a:e8:63:27:f6:ed:72:55:60:39:2b:af:51:
         16:06:8d:e6:71:3c:8d:6a:5f:e4:00:85:ca:88:01:0d:ae:40:
         5e:f2:76:8f:5e:a9:d8:cc:36:dd:8a:9c:36:d2:33:ca:33:68:
         57:2c:ab:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:05 2024 by rpki-client on console-ams.rpki-client.org