Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cfedb9e-6000-4578-9d26-14ee27ba4e37.roa
File:                     8cfedb9e-6000-4578-9d26-14ee27ba4e37.roa (raw, json)
Hash identifier:          R12DUXXnqmTuK/Z6Jg5LT1ayxSe1uTMl03wlxVcKGQU=
Subject key identifier:   92:6A:13:50:F2:05:10:EE:25:CD:E3:04:E8:7F:03:64:42:FD:FC:51
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39D6915EF4DB3B04493E58B492B1BCC878931F8D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cfedb9e-6000-4578-9d26-14ee27ba4e37.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        128.11.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d6:91:5e:f4:db:3b:04:49:3e:58:b4:92:b1:bc:c8:78:93:1f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=962206124ffe29a9c2d8f62fc45aeed5e41fdb86f9c9da3d2668cef2030b4357, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:96:e0:e2:a9:7e:f8:12:9e:03:35:6a:59:
                    ac:fc:c4:f4:66:83:54:72:d4:fe:18:c2:47:3e:d5:
                    2f:5c:74:ef:1b:dd:38:99:39:bb:72:a6:02:ef:7e:
                    26:eb:00:a7:ac:a3:e4:0f:77:72:af:f2:e9:a0:21:
                    15:97:3e:36:4e:07:48:52:e0:ca:df:3b:b1:7f:ed:
                    f2:3a:cf:da:92:a2:2d:8d:d7:4b:87:e3:5b:20:f1:
                    4f:9d:a1:6c:c9:c9:52:2c:d6:b5:95:01:d4:a3:e2:
                    e1:b8:be:3b:cd:cc:83:4c:fa:28:09:74:1a:52:d9:
                    79:af:6f:96:7c:45:d5:14:3d:af:41:32:4a:9c:de:
                    76:a5:89:db:f0:f0:61:9f:55:61:11:83:97:76:bc:
                    ff:ce:e5:f8:60:cb:fc:2c:76:87:52:c5:3c:be:06:
                    3b:01:91:78:69:19:f3:e7:fe:c6:dc:ea:d4:6b:70:
                    88:25:ca:99:61:cd:2a:5b:65:49:b1:cd:24:2d:4b:
                    63:69:42:68:35:b5:8d:6b:9c:c7:4a:c4:8b:33:95:
                    13:76:da:b0:f4:10:fe:55:d8:40:6d:91:d2:96:fa:
                    3a:50:2e:70:58:0e:f6:d5:5d:8b:7b:c8:13:01:2c:
                    ec:7a:22:d7:68:d1:7d:b5:32:cb:53:95:89:94:5b:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6A:13:50:F2:05:10:EE:25:CD:E3:04:E8:7F:03:64:42:FD:FC:51
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cfedb9e-6000-4578-9d26-14ee27ba4e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.11.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:dd:91:f4:74:1a:02:2d:c9:46:45:17:b1:ad:bf:c5:19:e2:
         0b:af:0b:b3:11:97:37:0e:2f:1e:73:c6:e5:e7:c1:30:c5:fa:
         87:ab:ab:07:e6:b4:38:0b:7a:5a:a5:86:2c:30:14:ea:ef:f4:
         7f:be:6e:24:1f:a3:69:07:67:60:88:43:e4:39:69:3b:2a:15:
         6e:d7:e8:7f:4d:4d:86:48:49:d4:45:ee:84:3b:f9:0b:47:87:
         44:4b:f1:7e:c2:99:86:d1:9a:b8:aa:6e:3a:1c:67:73:fe:b8:
         6a:ae:e1:0a:6d:01:60:a0:1d:78:46:fd:c9:7b:b9:98:b4:06:
         75:fe:1c:96:47:93:6c:3b:6d:c3:0d:0c:b0:38:e0:7f:d6:9b:
         30:fb:7e:6c:a4:c6:38:ef:c5:b8:d9:55:72:8d:04:5f:ec:c2:
         c0:f9:71:7a:ce:15:df:58:a9:55:cd:bc:26:ac:75:4b:26:69:
         c2:3b:79:f7:b0:f2:4d:8c:50:31:a5:34:f9:4a:86:6b:99:a6:
         7e:4f:19:05:6f:7d:a9:e7:e0:d8:ed:87:4d:2d:ac:93:16:35:
         ce:32:75:f7:16:61:5c:93:6d:ea:8b:b2:70:e2:57:e8:04:8a:
         15:4f:2f:fd:b7:be:e3:30:b7:a6:a6:dd:b8:6a:ec:2b:84:9a:
         ad:d3:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:53 2024 by rpki-client on console-ams.rpki-client.org