Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83112f49-230e-4af8-abdc-ddcc9f9f0c19.roa
File:                     83112f49-230e-4af8-abdc-ddcc9f9f0c19.roa (raw, json)
Hash identifier:          +o3KfDj0Z+Bk4gz6V/OyCQKSBs9/RYi7nJuPQqTVpcA=
Subject key identifier:   77:D8:D1:87:4C:23:BE:3B:AD:1B:AE:E4:48:23:C7:36:CD:61:94:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06B315D5F359DC25321813D43EC5B4940E837A7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83112f49-230e-4af8-abdc-ddcc9f9f0c19.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        104.144.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b3:15:d5:f3:59:dc:25:32:18:13:d4:3e:c5:b4:94:0e:83:7a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=17eb606e8497b1eb47e38edfb6b92cc6568415aebc8d1bf32243ab1ec0e9fd85, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:80:68:c2:ac:3e:6b:98:78:5c:44:bc:fe:
                    f9:57:7e:14:55:b5:ca:c3:77:61:82:2c:30:06:cc:
                    e3:d9:ef:e3:36:20:34:f0:7e:9a:79:a5:54:2b:43:
                    48:71:19:79:d2:de:17:c0:48:d8:f6:52:5b:fe:0c:
                    d0:57:69:aa:97:b9:2e:0c:0a:e7:15:db:07:20:c3:
                    f8:9b:4c:c6:1b:e7:ae:b1:a4:e6:0e:40:be:cd:26:
                    d6:32:33:b1:52:17:0c:02:da:08:d3:95:10:27:82:
                    64:28:72:dc:e5:0f:72:86:a4:46:93:14:e5:0e:58:
                    f8:1a:7b:b1:87:1d:7a:da:b9:d2:c3:d4:64:65:71:
                    73:e5:5d:26:ea:07:7d:20:df:27:72:6f:ce:0b:d6:
                    86:2b:e7:94:48:b1:ee:91:63:c4:16:1e:59:62:70:
                    21:36:a8:84:32:58:d0:14:3e:d2:0d:99:de:ed:b1:
                    59:ea:1c:76:7e:c1:89:75:a8:b8:c3:a7:95:25:29:
                    95:cf:39:96:81:4d:6d:a3:e9:e6:50:25:79:47:fb:
                    37:38:b7:46:00:d2:18:78:c4:bd:5f:d7:61:4b:6b:
                    95:0b:aa:03:83:e4:d0:4c:d8:91:8a:b1:26:5f:5c:
                    aa:42:ca:ae:44:39:1a:91:80:a8:cd:2d:47:30:25:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D8:D1:87:4C:23:BE:3B:AD:1B:AE:E4:48:23:C7:36:CD:61:94:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83112f49-230e-4af8-abdc-ddcc9f9f0c19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c5:af:a5:e9:a2:7c:3d:06:fd:80:4a:43:cb:cb:e2:42:e8:a2:
         2a:c9:c8:c1:4c:9f:f9:55:b0:37:0a:9b:b6:77:70:2d:fb:27:
         44:3c:31:65:ce:75:5e:2a:f9:b8:92:49:85:ae:d4:ec:7e:20:
         f1:6b:7c:10:7b:fd:2c:01:55:45:9e:84:7c:48:61:1e:7a:c3:
         dd:cf:be:62:fe:fb:14:66:91:b1:d2:63:69:b1:26:92:44:e9:
         ba:89:7f:05:9e:93:e4:9b:76:50:1d:aa:aa:83:bb:e9:0b:ca:
         44:2e:83:02:c9:f0:73:97:10:aa:98:bb:7d:7f:88:cc:86:93:
         0d:81:bc:1a:3a:26:f6:9d:26:22:ea:af:3b:a5:22:9c:cc:9f:
         7a:5a:65:80:99:e1:80:67:6a:07:b1:fa:b5:ed:96:55:60:81:
         3e:8b:16:e5:ea:d6:30:c4:7d:3d:d7:27:21:89:50:09:9a:e7:
         f1:b1:e4:a6:0e:da:12:27:9d:cb:ee:b9:a8:d6:7d:0b:6b:b9:
         00:21:eb:b4:eb:7e:38:19:e2:0b:80:24:ef:74:fe:87:da:11:
         75:3c:3f:05:36:2b:a7:6d:24:4c:3d:20:94:f3:6b:25:35:7b:
         dc:d4:23:d7:0a:cc:7a:78:79:84:da:24:b3:dd:05:22:40:68:
         33:fb:ae:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:13 2024 by rpki-client on console-fra.rpki-client.org