Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4cd15fa-81ee-4976-b600-934f1f36a677.roa
File:                     a4cd15fa-81ee-4976-b600-934f1f36a677.roa (raw, json)
Hash identifier:          MDSAnKlZR02Fn33pytT+ODR3F0jp8T6cls4ptTZFCyg=
Subject key identifier:   4B:2B:F9:8F:99:40:97:D3:01:CA:99:75:4F:C2:D1:F3:85:C2:A4:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36BA60C194E3683D0EF4B8AAFF8E9F64156AE36D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4cd15fa-81ee-4976-b600-934f1f36a677.roa
Signing time:             Wed 30 Oct 2024 00:00:00 +0000
ROA not before:           Wed 30 Oct 2024 00:00:00 +0000
ROA not after:            Wed 04 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        148.73.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ba:60:c1:94:e3:68:3d:0e:f4:b8:aa:ff:8e:9f:64:15:6a:e3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 30 00:00:00 2024 GMT
            Not After : Dec  4 23:59:59 2024 GMT
        Subject: serialNumber=e46ee595a5dad667debb5b0001790d5646fc08c47e711f2c181c62c1af96afe8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:3b:22:60:59:09:9a:69:f5:b6:f8:ef:55:
                    00:46:ea:25:d0:a4:ea:2d:06:75:5a:09:1a:7e:dc:
                    38:af:18:9f:e1:5a:c7:e3:7c:ba:4c:39:3c:37:21:
                    b0:63:03:ee:e1:37:37:7c:64:74:e5:67:58:92:99:
                    4b:4d:a5:e9:30:ba:cf:ed:90:de:77:7b:ba:86:3d:
                    85:96:cc:86:56:92:3e:36:86:94:25:1c:80:3d:1e:
                    46:b0:f9:16:34:ce:3a:9e:2a:51:5e:c3:6c:f1:e6:
                    65:42:cf:98:b7:ef:df:40:15:e7:ed:fc:aa:0d:c4:
                    b9:0e:f2:9d:94:7e:eb:c8:61:0d:53:77:59:76:f7:
                    03:e9:c7:8a:6e:2e:21:e3:6b:3e:4e:7f:d6:8f:50:
                    de:08:dc:36:13:16:6b:19:73:4f:fd:ce:58:db:aa:
                    7d:61:ef:15:11:79:64:3f:f6:d4:0d:aa:c5:46:7f:
                    3c:3e:6c:9d:9e:89:e9:67:e4:08:87:43:b8:fd:f7:
                    de:ec:87:13:fc:b2:43:17:2e:72:08:5a:b3:d5:2b:
                    41:31:fc:4a:de:d3:08:31:f3:d1:43:b2:13:7b:72:
                    d5:2c:64:2d:81:83:21:fa:08:f5:ab:88:79:2b:af:
                    55:8b:e9:a0:47:d1:c0:4f:90:d9:ed:53:d7:b2:3a:
                    f0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2B:F9:8F:99:40:97:D3:01:CA:99:75:4F:C2:D1:F3:85:C2:A4:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4cd15fa-81ee-4976-b600-934f1f36a677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:8f:2a:03:60:6d:6f:ff:39:46:14:ee:3d:e1:1d:86:46:fa:
         a3:9a:2e:0f:c1:00:b4:11:9b:13:8b:95:3c:81:71:27:2f:63:
         6b:54:fe:a2:4f:84:6f:77:5b:99:96:d1:dc:c8:a5:00:ee:29:
         dc:e8:7c:ce:50:e8:dc:9b:bf:ef:b2:6a:a4:6e:82:d0:91:d6:
         83:fd:97:56:06:5b:f2:42:30:c0:d4:74:fc:46:0f:85:09:9a:
         b5:83:db:95:36:06:c9:53:f2:e1:3d:2e:9e:d1:92:83:7b:b4:
         38:82:91:0a:5e:30:38:f3:b8:35:74:2c:8d:b0:85:2c:50:24:
         f9:07:6f:a7:e4:5d:ee:a9:f8:4c:cb:bf:6f:63:7d:bd:6c:f2:
         22:94:bd:88:81:d2:02:21:ca:a3:b8:49:ad:5e:6a:12:d1:3b:
         0c:0d:c4:15:f9:ff:c5:e2:28:70:1e:62:8c:f8:0d:7c:d0:49:
         ed:99:ef:b9:43:0a:7d:53:9f:06:28:5f:9f:eb:b9:72:4b:2f:
         e3:18:7a:a5:be:6e:d0:d5:8d:98:ce:2b:24:ff:77:01:79:7a:
         26:3a:43:3e:61:98:9d:a2:47:35:8e:d9:5a:ef:23:73:1b:46:
         8c:be:34:b3:ff:47:4a:9f:b6:49:a0:a7:75:e4:a5:42:96:6d:
         92:a3:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:21 2024 by rpki-client on console-fra.rpki-client.org