Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa
File:                     82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa (raw, json)
Hash identifier:          2Q28/bnQU4LwCzhQ42scu83+qrT/ttI1+rwK+zgXHXw=
Subject key identifier:   F8:A9:C0:1F:B6:03:24:12:2F:E4:84:EF:21:FE:F7:AF:F6:D4:94:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A211D84DC41654609F7F1C53233D62C2B628225
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        162.250.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:21:1d:84:dc:41:65:46:09:f7:f1:c5:32:33:d6:2c:2b:62:82:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=0bd7038559697285dee8472e714ea68bd980837a9910e274785ef1a5000429ff, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:05:b9:32:59:50:6d:2d:a3:d2:d4:75:ea:
                    b9:96:53:0f:96:7f:db:16:f6:a2:4d:c5:4d:73:7e:
                    79:c5:03:ed:76:6d:ef:bb:27:23:c2:7d:84:df:2f:
                    0a:e6:16:6e:2e:e9:5d:1c:de:2c:e9:ed:c0:16:9b:
                    11:18:d5:ad:4a:de:65:00:c5:a9:ba:72:0c:4c:75:
                    f2:84:21:f0:dd:05:d9:49:e4:c8:8b:4a:cf:d5:a5:
                    9e:df:fb:80:5b:a4:90:69:92:d9:7c:65:d5:fc:f3:
                    95:0f:05:e7:ea:19:a9:8a:e7:48:cd:a8:49:bb:35:
                    f0:b9:d4:7b:7a:4f:d2:d0:43:cb:50:5f:f3:50:40:
                    05:7d:d8:73:da:cb:46:19:fc:34:d6:d7:0f:05:5a:
                    98:49:26:0b:f4:15:05:c5:04:b1:3d:9b:14:ca:88:
                    a3:73:32:a5:f5:63:9c:d4:df:a9:c1:00:87:ee:72:
                    87:3c:41:de:aa:ce:c5:bc:d5:89:bf:b4:10:c9:dc:
                    fd:38:44:19:aa:00:63:70:17:c4:8c:09:98:2e:c8:
                    3d:74:ef:22:f6:5f:d6:e1:d1:2a:58:0b:d3:ad:7d:
                    e9:e1:8d:e7:fc:5d:bb:02:5a:51:3c:a8:dd:26:1f:
                    c2:05:8e:86:b6:0c:60:11:4e:f9:b0:91:4c:a6:f9:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A9:C0:1F:B6:03:24:12:2F:E4:84:EF:21:FE:F7:AF:F6:D4:94:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:a1:7c:a0:ed:9e:0c:99:93:ad:ff:76:7c:8f:a0:db:46:14:
         df:5d:0b:95:88:d2:e7:aa:8e:b9:23:7c:8e:d1:5b:5b:5f:8d:
         21:24:1f:04:d2:23:75:c1:80:8d:9c:ce:7b:b8:31:89:4d:ef:
         ea:14:ad:0e:40:c2:39:c1:08:a6:82:27:83:74:93:b2:62:4a:
         32:eb:40:f6:ab:28:0b:fe:a0:49:2f:cc:17:c7:b3:54:3f:d2:
         a8:58:51:82:24:e0:18:97:54:b6:88:17:fd:6d:9c:91:15:71:
         b1:67:77:4d:9f:3b:27:28:49:f2:ca:e3:bf:60:fa:97:a2:0e:
         b1:a2:13:5a:98:3a:dd:15:8a:c3:2b:2a:a9:c6:08:16:49:08:
         56:e0:2c:bf:44:02:e4:57:d6:3c:c5:11:b4:5c:50:1c:5a:a9:
         e8:ce:37:5b:80:64:a4:f9:52:84:88:dd:e0:b5:dd:6a:6c:ad:
         03:81:8f:86:96:0e:6f:e0:09:a7:47:67:2f:47:42:60:40:37:
         7a:80:dc:6e:3c:5b:ae:d5:11:f7:a2:e5:54:e8:86:a0:4b:9f:
         c9:ba:be:ca:c9:65:91:6f:b7:1d:73:35:b4:1c:4e:3d:94:07:
         f8:22:53:6e:ed:0e:e6:e3:51:c5:7c:ec:67:dd:24:78:98:b8:
         d3:43:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:49 2024 by rpki-client on console-fra.rpki-client.org