Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fe9bbbb-267f-4b67-95d2-28977cbcaa6d.roa
File:                     8fe9bbbb-267f-4b67-95d2-28977cbcaa6d.roa (raw, json)
Hash identifier:          s4G42/UZXmFEK2NkIDrbAYyY7l8G0NQsxFwWokcTOpI=
Subject key identifier:   4D:08:F7:86:12:09:42:40:D7:6D:66:2B:ED:20:03:72:00:23:EB:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31A3A518738568130E7A311F0C2552A5D6355993
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fe9bbbb-267f-4b67-95d2-28977cbcaa6d.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        99.151.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a3:a5:18:73:85:68:13:0e:7a:31:1f:0c:25:52:a5:d6:35:59:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=dc0ed538098e727e014eba98a997f992dc062e5f3b9c32ebdc30bec814a6a2b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:58:f3:df:48:f3:a4:4c:aa:18:62:35:da:
                    b3:db:c8:ab:65:03:db:2c:ed:99:73:4c:d3:a1:be:
                    70:99:4a:97:44:b3:9b:52:f0:94:32:21:13:0f:24:
                    c6:54:8f:8b:e3:0d:6c:d5:8b:52:21:c9:ea:62:1e:
                    49:c2:d7:f7:b7:88:24:46:49:cb:65:d6:3b:17:91:
                    16:6d:49:03:d7:1e:b8:f8:33:63:fb:ad:cd:db:52:
                    b7:2f:c7:71:fe:5e:33:bc:e7:bd:19:08:bb:c2:8f:
                    4a:6d:81:ac:72:da:ad:a2:ce:72:3f:96:7e:7c:3b:
                    51:66:19:b5:4a:e0:62:5c:3e:cb:f3:58:c1:42:7c:
                    5e:5a:16:06:33:1e:00:4b:da:29:09:ef:12:12:3a:
                    a0:90:ed:8b:08:79:98:90:12:f2:76:59:9f:af:16:
                    dc:2c:28:bb:33:88:d7:d2:28:e4:42:65:b1:02:ac:
                    0c:1f:0f:b8:1b:df:21:88:35:d0:98:4c:70:79:c3:
                    cc:7f:28:9b:fc:3d:8c:7a:ee:ca:74:4b:77:b7:26:
                    7f:b2:8a:e1:01:12:1e:d0:59:ee:a4:df:82:3e:45:
                    79:82:ce:8c:95:f7:78:ba:06:71:74:5e:71:fb:32:
                    5b:ea:99:79:b6:8c:4a:fc:82:74:c7:23:a8:6d:01:
                    77:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:08:F7:86:12:09:42:40:D7:6D:66:2B:ED:20:03:72:00:23:EB:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fe9bbbb-267f-4b67-95d2-28977cbcaa6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ae:5f:7c:a0:3a:09:ea:2b:8f:c6:a3:53:1f:bc:6d:0c:86:0a:
         0f:28:cb:19:c7:72:19:5d:48:c0:6e:b8:c8:03:ed:6f:31:d6:
         53:a9:20:b5:f4:23:52:21:39:08:25:70:58:41:67:40:0d:c7:
         11:e7:20:d2:53:1e:73:4e:f0:68:43:42:80:4d:e4:a9:d5:3f:
         06:31:04:81:2c:9a:f8:60:a0:57:8d:98:f4:16:ae:b3:35:18:
         25:87:63:3a:8b:c5:0f:4f:ab:f2:ee:0f:35:b5:f3:aa:ac:8d:
         60:58:d8:64:26:c9:33:a6:da:40:3b:82:07:0e:4d:d9:c3:ca:
         c2:b2:02:b2:ca:3d:5f:6a:f7:37:87:a9:78:92:e5:e4:3d:f5:
         67:d9:1f:37:47:8b:29:d0:24:2c:0e:dc:fa:fd:9c:cb:2a:8f:
         d4:8d:f0:64:50:0c:03:c4:7a:53:a4:ef:6a:0a:b3:4f:c6:0b:
         a7:5a:2f:72:78:d3:85:41:59:95:11:95:6a:12:00:60:9b:8f:
         7b:1c:4e:6f:ba:1f:5e:48:04:f2:18:4d:2d:3b:52:b3:30:41:
         92:db:a9:3e:71:c7:ad:42:2c:5a:f0:04:02:18:34:d7:51:7b:
         81:30:c2:74:52:f4:db:94:ec:3f:30:e3:21:c5:4f:09:53:06:
         60:48:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:18 2024 by rpki-client on console-ams.rpki-client.org