Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72d26f90-0f0c-4ac7-a01a-5fe442c76423.roa
File:                     72d26f90-0f0c-4ac7-a01a-5fe442c76423.roa (raw, json)
Hash identifier:          DDIDtVW9ZQ0ZUK7IHgkZgXr8Ca512kEoRSE5knRIVjk=
Subject key identifier:   B7:DA:39:DE:73:8C:AA:3B:AE:21:74:A3:78:54:C6:5A:A4:90:A2:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DB72FB278621F393D555F15CFC4A8E92967D766
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72d26f90-0f0c-4ac7-a01a-5fe442c76423.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        40.178.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b7:2f:b2:78:62:1f:39:3d:55:5f:15:cf:c4:a8:e9:29:67:d7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=862bc80d345e4e4dffebf9ed05e722e92e7ee504a14c00aa2446c75239e28de4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:85:a8:1a:de:ab:9a:da:1d:e6:fa:4b:79:
                    f4:60:f9:2f:06:35:14:16:4e:e4:be:a1:1e:78:45:
                    9f:86:36:76:1c:8a:70:53:0a:c5:d1:94:14:fa:8b:
                    c0:8f:4d:52:12:3a:70:f0:76:1a:8a:05:88:17:38:
                    27:ce:22:d9:68:4f:d3:c4:8f:ff:e6:29:28:67:26:
                    25:a4:67:71:9b:e8:e0:53:3f:91:34:4c:99:66:7f:
                    32:1f:d3:ec:a0:55:c2:d0:39:4b:61:e7:fa:c6:b2:
                    63:b4:f0:bd:48:23:13:ca:09:f9:49:b0:e5:d6:81:
                    cd:46:1e:fe:f6:ee:67:11:5a:0b:82:20:9a:6f:25:
                    50:ca:20:a0:42:f2:09:da:e6:dd:a3:5f:1e:47:d0:
                    da:3d:eb:45:68:b2:74:05:6a:d9:96:26:a0:9c:1d:
                    a2:43:5a:31:8c:a3:72:bb:d3:9b:2a:f9:e1:55:f0:
                    f4:ec:27:f3:e3:60:b0:fb:63:66:37:29:21:5a:f6:
                    63:36:65:3f:e1:3e:95:02:71:bf:07:73:df:0e:ab:
                    5a:f4:bd:90:f8:64:38:5c:b0:49:9d:9d:40:db:97:
                    e5:a1:14:8e:8b:6d:37:6d:1f:f2:78:ee:cf:e1:56:
                    4d:e1:8d:7b:d0:90:a1:78:9b:69:4d:06:b4:2e:9b:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DA:39:DE:73:8C:AA:3B:AE:21:74:A3:78:54:C6:5A:A4:90:A2:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72d26f90-0f0c-4ac7-a01a-5fe442c76423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:03:5b:cc:45:de:07:d1:61:c1:f3:2d:88:0f:b5:8a:75:79:
         f2:9c:a6:03:f1:23:f3:7e:92:67:ae:c9:3c:8a:38:01:41:c1:
         3d:c3:84:42:ca:7b:c3:a7:a2:7b:55:4c:c9:17:7c:5e:4a:23:
         b0:b0:90:42:7d:a2:f7:c9:90:73:3c:92:06:bc:de:90:9a:65:
         28:e1:fb:73:ae:4b:20:9c:41:2a:fe:c7:57:66:61:a4:9f:cf:
         2d:15:43:99:7c:7d:f7:62:b2:12:fe:05:4e:d8:bf:ca:aa:38:
         56:78:b1:9e:5e:b7:a0:c1:67:d6:44:ea:0f:b0:14:03:f7:70:
         a9:00:05:60:69:b7:08:6a:ad:e2:2d:24:bc:3f:b4:18:27:41:
         6f:0e:c1:e4:05:70:11:27:82:68:2c:f3:4a:c3:52:29:70:a0:
         83:78:72:c3:ba:8c:ca:25:62:dc:f6:c0:08:c7:7b:28:7c:5d:
         91:1f:ef:80:0c:8e:4a:c3:55:03:fa:5a:36:66:4a:1a:df:54:
         b0:84:5b:1f:04:f4:cd:48:a0:a2:fc:49:2c:90:97:ae:b0:e5:
         fe:aa:e0:e7:79:c8:87:94:0e:4f:b8:f9:0f:19:9d:79:72:20:
         3a:e3:83:a1:e3:a8:07:65:8e:b0:9e:d0:a0:ef:94:f2:6c:6e:
         5e:0a:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:44 2024 by rpki-client on console-ams.rpki-client.org