Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97ebdcba-db86-4ea2-8b43-07a8e5ad35aa.roa
File:                     97ebdcba-db86-4ea2-8b43-07a8e5ad35aa.roa (raw, json)
Hash identifier:          BwR4oHN1lEsAsKLlyEG3NFHZixMmVF5qY+FlT2kBKh0=
Subject key identifier:   E9:64:2B:C3:CC:75:E2:15:92:9E:76:3A:24:B3:2D:91:59:CC:5D:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B3D8C3B893C1AF4FF6C240EFA7CA3A2994123DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97ebdcba-db86-4ea2-8b43-07a8e5ad35aa.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        205.187.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3d:8c:3b:89:3c:1a:f4:ff:6c:24:0e:fa:7c:a3:a2:99:41:23:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=e9a1f51d4235e5012b21f92e10e1ea2624c2b748f495ebd5b98bf4fac116a31b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e2:cf:aa:88:8a:e7:bb:d6:0a:61:fb:1b:42:
                    af:f8:eb:29:e1:1d:e4:3d:33:fc:90:3e:b1:ae:b4:
                    06:76:16:c3:ca:9b:81:cb:ea:bf:ab:b7:cd:f3:5f:
                    4c:26:4f:1e:69:33:9f:ee:3b:18:2c:33:d4:f6:33:
                    cc:75:0a:15:ef:c5:6c:35:f7:52:af:97:16:b1:f3:
                    55:ed:1a:f3:af:ba:68:a6:6b:f3:67:6f:04:d1:94:
                    ac:60:6d:34:1e:86:cf:ad:48:6f:50:ce:41:b4:3e:
                    67:f6:46:bc:9c:6b:29:c6:0f:c7:3b:7b:21:d4:a2:
                    d4:e3:68:10:13:fa:d9:ba:1f:ae:3d:08:87:a4:67:
                    35:b1:aa:14:ae:fb:2d:e3:4d:c4:03:88:ae:f7:29:
                    97:70:32:f6:ee:a4:b9:2d:4e:60:d3:f0:0b:3c:e5:
                    4c:bc:83:15:7c:ec:92:2c:22:34:be:f6:51:d9:4c:
                    40:f1:0b:97:a8:bf:4b:c6:b6:04:e9:b0:3d:68:c6:
                    db:ec:26:46:00:6c:49:a9:87:0d:47:11:1e:f7:5c:
                    3d:0f:42:12:86:80:a1:71:f4:f7:ca:e3:4b:bc:47:
                    f9:14:b4:65:94:f5:3c:94:66:5d:ce:1d:6d:a1:eb:
                    39:25:0b:cd:ff:c6:bc:dd:75:1a:db:4e:e3:39:c1:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:2B:C3:CC:75:E2:15:92:9E:76:3A:24:B3:2D:91:59:CC:5D:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97ebdcba-db86-4ea2-8b43-07a8e5ad35aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.187.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:83:d2:b7:25:14:fa:ce:a5:e2:38:85:db:c4:a7:41:73:7d:
         6f:72:c8:da:08:2c:78:0f:8a:45:8a:bc:bc:6c:4b:e1:fb:22:
         7f:cb:ab:f7:24:86:0d:c0:27:57:24:72:52:22:14:5d:49:84:
         04:2c:6c:6d:a3:a2:d9:4a:41:f1:cb:56:df:e8:12:17:8b:82:
         9d:95:d0:0f:92:4f:a9:1a:1d:f4:18:e8:83:17:f4:a0:d6:af:
         e2:5d:6d:e9:a0:f7:d3:fe:70:f8:f6:ed:b3:91:d0:bb:59:9e:
         43:48:12:d6:0a:cc:c2:fc:7d:b4:91:3f:fd:71:ff:43:80:5e:
         69:b0:19:ad:d0:21:15:2d:bf:74:59:7c:0a:df:41:a9:77:48:
         c0:e2:4c:41:9f:6c:a9:f6:ea:26:12:3b:36:60:25:65:7f:bb:
         f6:4d:40:af:37:a9:cd:a7:a0:f9:16:fd:b6:ea:45:da:77:21:
         1b:27:b0:16:40:14:2b:34:5b:48:21:4a:d3:7f:a7:1e:b3:7a:
         4e:3f:a0:e0:c9:12:57:5f:eb:4d:77:0f:34:db:42:45:ef:a1:
         41:19:8b:86:f8:00:04:dd:a3:fe:94:d4:b7:9e:14:bb:fb:29:
         77:14:f0:98:c7:53:a8:4c:12:26:2e:43:e9:8d:55:2a:7e:1d:
         f6:aa:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:18 2024 by rpki-client on console-fra.rpki-client.org