Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dcc6701-a64f-442b-a018-829dca8b617d.roa
File:                     7dcc6701-a64f-442b-a018-829dca8b617d.roa (raw, json)
Hash identifier:          Z1/L520cLrcMXTKeflxjTUK5RfXBKQWdFQma3PT4kPM=
Subject key identifier:   CF:17:6C:7B:5C:DD:53:AB:BF:47:3D:A2:74:12:C7:29:52:FD:3A:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DF981CE3A8AE6776F4A8218A16A1830257B5A44
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dcc6701-a64f-442b-a018-829dca8b617d.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        205.147.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f9:81:ce:3a:8a:e6:77:6f:4a:82:18:a1:6a:18:30:25:7b:5a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=c0dbf80ca3e71f5331f1db7aad42878a37b2caaba4b755557a0fff1cfb10a461, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:ce:a0:20:9f:32:90:10:62:14:e9:1c:97:
                    fc:0a:d2:2a:5c:18:01:55:c6:14:25:d2:b2:66:70:
                    b1:0c:c5:37:ae:5f:21:5a:7b:5f:e5:99:07:22:80:
                    86:5b:ce:6c:0a:82:a7:d7:9d:b5:c1:90:c5:f3:65:
                    96:aa:a0:87:1d:c5:4c:d6:c3:1c:b9:db:0a:f6:bd:
                    50:c1:e5:22:c2:c6:41:95:4a:c3:8d:21:62:7e:e6:
                    47:d7:75:22:6a:60:5c:62:59:fe:c4:6c:54:b8:20:
                    99:fe:b3:aa:10:10:50:f7:05:e9:64:5f:f9:b7:ee:
                    d3:1e:f3:96:3e:f8:08:0f:f9:1a:ad:17:26:af:f0:
                    b8:38:f4:6d:d7:db:05:67:92:3d:c7:42:59:44:44:
                    eb:01:2a:01:60:2f:f9:be:39:32:f9:0c:12:d9:19:
                    1a:fe:a0:7d:93:ac:d5:48:34:cf:ba:b3:9c:5e:05:
                    d6:6a:11:02:b3:4b:18:3b:f1:20:32:f1:2d:a4:93:
                    8d:04:d1:d0:b2:43:a4:b9:ff:30:e2:3d:02:b0:e9:
                    11:bf:a9:48:9e:43:db:a7:27:51:ce:06:18:e7:ec:
                    6f:9f:a4:22:32:2a:41:d0:89:45:88:ba:47:1f:6f:
                    56:57:ab:ca:50:28:6b:4c:ac:e6:00:ed:51:c4:3c:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:17:6C:7B:5C:DD:53:AB:BF:47:3D:A2:74:12:C7:29:52:FD:3A:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dcc6701-a64f-442b-a018-829dca8b617d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:4b:0d:41:d0:0a:3f:49:ad:cb:12:f5:b7:05:b9:63:fd:0a:
         11:94:be:07:01:d4:44:f4:fe:23:f5:87:2c:56:12:09:90:ae:
         a7:22:80:97:fc:86:80:6c:66:dd:ad:22:b6:81:c2:90:85:df:
         d5:22:b5:33:f0:5b:9d:b0:ff:62:e4:01:80:d6:fe:33:a0:43:
         cd:52:28:7e:ed:2a:77:2f:1f:97:ef:87:bb:5a:ec:57:4c:a6:
         da:fb:42:13:6e:45:f7:2f:04:9e:ba:f7:0a:b2:c7:a2:58:9a:
         25:5c:9e:5b:b4:25:90:5e:94:1d:36:1c:be:bb:7e:13:09:6f:
         c1:cc:f3:60:1c:83:c0:23:14:51:aa:c5:c0:a0:cc:a3:91:de:
         46:a6:ce:88:d3:9e:97:de:e5:b6:ec:f3:76:22:75:85:19:b7:
         75:fa:de:04:3c:fb:d7:42:12:65:a3:76:d8:20:3e:88:41:63:
         7c:32:de:ac:cc:c3:0b:05:4c:bc:f5:73:17:ab:70:50:d4:0f:
         e3:7b:18:9b:0f:5a:ad:0e:9a:f1:f9:d4:0d:8d:1b:17:d1:f0:
         c7:a3:f0:6c:96:61:85:09:94:d9:17:df:cc:18:a6:ec:de:38:
         4f:73:24:f4:b6:62:b7:4c:52:06:e8:72:9b:02:3e:b3:1d:c1:
         bc:9f:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:48 2024 by rpki-client on console-ams.rpki-client.org