Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744b2b2e-b918-40f2-ab20-ed0570abb836.roa
File:                     744b2b2e-b918-40f2-ab20-ed0570abb836.roa (raw, json)
Hash identifier:          HlwQgHn9y2guvU2FbOFo8y8SazY6qOWF1E6CKGpIR3Q=
Subject key identifier:   C7:D5:88:DF:4A:E6:91:AC:46:E8:DA:32:55:17:5B:62:A0:B8:EF:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67753F0EA9F41534FEE684515319157B20214FC5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744b2b2e-b918-40f2-ab20-ed0570abb836.roa
Signing time:             Wed 30 Oct 2024 00:00:00 +0000
ROA not before:           Wed 30 Oct 2024 00:00:00 +0000
ROA not after:            Wed 04 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        75.3.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:75:3f:0e:a9:f4:15:34:fe:e6:84:51:53:19:15:7b:20:21:4f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 30 00:00:00 2024 GMT
            Not After : Dec  4 23:59:59 2024 GMT
        Subject: serialNumber=9ad51ac88786e67089d145d7d115da4430974f0cd3ca3819be70a87e230dd9b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:21:5f:c9:f8:95:df:4e:d2:93:df:0a:b4:
                    84:04:02:9e:89:d2:61:35:9a:88:98:e4:99:e8:61:
                    e3:46:3a:6d:6c:11:8e:ae:ea:d0:a7:02:02:63:06:
                    2c:29:6c:2a:c4:e8:39:0d:1e:ba:8c:71:ba:b6:20:
                    10:4b:bf:c9:0c:22:f1:24:32:24:1d:24:6e:b7:b1:
                    ba:cb:80:f4:83:0d:4b:5c:db:54:db:2c:14:89:0e:
                    de:74:0d:5d:a5:fe:86:ec:7f:5a:14:0b:ee:48:00:
                    19:ea:c3:26:65:e8:f3:8f:4e:c4:97:25:dd:21:da:
                    76:5b:13:fb:90:9f:0e:2c:e3:15:68:0d:ad:b2:46:
                    95:41:31:9b:48:d0:b5:a3:b8:05:a1:30:68:f1:72:
                    45:02:37:33:43:7b:37:99:9b:f5:e7:84:0d:df:4f:
                    63:bb:78:80:31:a4:37:e7:2e:9f:49:94:0c:1d:f4:
                    19:2f:b6:40:2f:98:47:0b:a6:86:61:7b:db:cb:7d:
                    d7:d6:b9:c8:2d:dc:be:4e:31:fa:1f:b9:d4:6f:4c:
                    17:c3:da:47:f5:a0:81:de:0c:31:38:c6:83:98:76:
                    3d:1d:cc:0e:c3:e1:a7:3f:57:38:7c:12:df:58:19:
                    9e:c2:f1:75:90:6c:8c:79:4c:59:f8:ac:38:2c:08:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D5:88:DF:4A:E6:91:AC:46:E8:DA:32:55:17:5B:62:A0:B8:EF:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744b2b2e-b918-40f2-ab20-ed0570abb836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c1:fe:1f:03:58:40:21:a3:a8:aa:c2:66:d1:8e:6b:37:d4:c2:
         2e:7d:b1:47:09:b2:86:2a:9e:38:c1:f4:d2:bd:29:25:8c:0c:
         11:ef:d5:aa:13:94:6b:a7:72:29:67:9d:e2:b8:b8:7b:55:2e:
         d7:33:3f:9b:c8:df:95:ec:b5:83:a4:1a:c5:7f:e7:2a:fa:22:
         d2:10:1c:61:35:6b:dd:fc:d1:07:ca:df:b6:55:23:d0:05:8b:
         91:b7:e0:f7:7a:d7:e4:f8:94:dd:ab:f2:7e:c1:3b:bc:00:06:
         16:4a:02:7c:5d:ec:8b:90:13:a3:3f:25:59:82:3a:7d:54:c8:
         3f:f5:96:9f:f5:6a:dc:b8:8f:4b:ea:7e:13:81:ac:e1:de:1e:
         46:fd:01:3f:12:18:b2:65:4b:09:69:5d:ad:cc:59:50:f2:80:
         7a:ef:cf:41:d9:56:c8:4f:14:86:e9:62:80:89:4b:ce:84:24:
         cf:d4:f8:75:b9:7d:81:cb:39:75:9a:79:69:21:16:b3:30:63:
         14:a0:ee:31:45:92:7b:12:e3:d2:32:42:de:e1:56:9e:a0:c5:
         48:aa:af:80:a5:ed:5c:a6:63:53:7f:0f:9c:14:a8:0a:71:97:
         42:31:a6:ee:2e:3a:26:c4:c4:9c:2c:3f:30:85:d4:18:eb:f0:
         dc:b1:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:09 2024 by rpki-client on console-fra.rpki-client.org