Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4c433a1-52bd-4a34-af35-a61c38d2ae00.roa
File:                     b4c433a1-52bd-4a34-af35-a61c38d2ae00.roa (raw, json)
Hash identifier:          xOSVVC6ezGnkgzAuMXbuU9TskyHyNiVTQlEHm2IwlRE=
Subject key identifier:   84:3E:22:81:F4:7D:96:4C:9C:A3:75:0B:CB:02:52:8F:A8:6C:AB:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24269DC81C6BA4D4C3A6D32C25F1ED6B4B7F4320
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4c433a1-52bd-4a34-af35-a61c38d2ae00.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:26:9d:c8:1c:6b:a4:d4:c3:a6:d3:2c:25:f1:ed:6b:4b:7f:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=941ceac5a25db411c05c6c5da3aa541dd3e330bf57c13cafbee0a0f0925133dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:ca:1e:84:9d:14:b9:0f:de:db:74:2c:8e:
                    5f:d8:e8:fc:fa:72:95:68:36:ac:24:ec:75:ba:ed:
                    ba:42:5a:23:72:4a:ec:9c:be:3d:12:94:c8:1d:b5:
                    8e:28:ae:ca:d9:76:65:c7:ce:28:db:cf:38:ee:61:
                    73:ba:eb:20:31:0b:9d:e8:22:71:00:3e:e3:43:f5:
                    00:43:5e:c3:82:63:73:cd:13:de:f1:9e:bd:70:69:
                    b9:d8:9b:85:ea:12:fa:ad:56:ef:dc:bc:45:3c:01:
                    38:bc:ac:f2:eb:61:93:05:25:21:6f:2b:71:ce:93:
                    b0:15:ec:aa:79:c3:93:fd:db:71:f1:69:a2:ef:3f:
                    e3:e0:d4:40:d1:40:03:98:17:b9:23:f7:14:c3:82:
                    02:b6:ad:52:f8:9b:c0:38:be:eb:88:16:95:3c:30:
                    3e:5c:d5:88:36:2c:08:69:84:59:4a:2e:9e:45:a6:
                    66:01:22:50:c1:01:ac:d6:84:49:9a:4a:3c:a7:77:
                    f5:3d:ed:d3:8b:66:7b:26:a5:e4:55:21:01:5b:ee:
                    5a:ec:5f:45:e3:20:bc:39:7b:12:d8:87:66:71:0b:
                    6d:bc:6b:9e:0a:11:c9:54:e8:3d:c9:7f:ed:99:a5:
                    94:12:26:c6:88:dd:f9:e4:6d:45:fc:72:df:e1:75:
                    2a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3E:22:81:F4:7D:96:4C:9C:A3:75:0B:CB:02:52:8F:A8:6C:AB:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4c433a1-52bd-4a34-af35-a61c38d2ae00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:24:7b:62:dc:76:27:05:23:24:5b:89:7e:66:cf:5b:a5:
         27:ce:b4:58:52:bd:13:15:0c:d7:ee:46:c1:a3:8b:6b:99:f5:
         9d:d1:59:1d:43:5a:41:c7:97:9e:e5:7b:56:37:53:24:06:d4:
         ea:1d:4c:20:cc:eb:e0:83:f4:53:fa:ee:31:52:b7:86:73:05:
         50:b6:50:ef:ce:9c:42:98:4a:95:9d:ef:f7:c1:6f:67:1b:17:
         13:e8:5e:3d:32:74:ca:33:86:87:09:4c:cc:c0:f5:26:42:fb:
         56:80:b1:76:d9:74:57:40:04:30:0f:5c:d4:90:cd:96:ef:01:
         a7:11:20:e5:52:fe:a7:41:2c:4c:ca:28:f0:12:b6:b5:93:a9:
         1c:98:9a:18:74:6e:a2:3a:ce:2a:ca:e3:af:dd:67:88:28:8d:
         e6:b6:d8:24:c3:62:d4:dd:e4:c9:e6:e4:76:3e:c8:4a:19:45:
         21:23:0c:d7:5a:37:54:9f:03:07:09:c6:e2:49:5e:f7:cd:7d:
         c5:44:18:f8:97:46:d5:a3:bd:1f:f1:7d:61:cb:b6:2b:8b:5b:
         99:ce:19:89:23:6d:c6:83:19:14:36:13:95:7a:81:37:53:7f:
         85:fd:39:e0:8a:22:15:95:d5:73:b0:19:ef:db:b9:fc:e0:8e:
         1b:8c:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:24 2024 by rpki-client on console-fra.rpki-client.org