Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb763c3-75d1-4003-98de-26bcf0ef2670.roa
File:                     bbb763c3-75d1-4003-98de-26bcf0ef2670.roa (raw, json)
Hash identifier:          YzUnfJncSML0OwnGbfyO1Kb/AimJo2CV0lR6k2/5MSM=
Subject key identifier:   27:BD:B5:41:A1:0F:3B:7B:FF:60:A7:56:CB:A0:D0:30:37:18:67:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4562BA54F730A0F8ECDDDD8E51CFFF99452D8A51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb763c3-75d1-4003-98de-26bcf0ef2670.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        79.73.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:62:ba:54:f7:30:a0:f8:ec:dd:dd:8e:51:cf:ff:99:45:2d:8a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=b346a0fd1fedc273c28a6f2dd881d3c00803efbaa30cb36feefe94b9e111b297, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:ff:a9:43:c2:f2:ae:8f:3f:83:47:2c:78:
                    a5:f1:31:66:65:ca:ae:84:1d:5c:5c:b3:07:d1:9f:
                    d6:3c:40:00:46:11:44:b7:75:b0:63:74:05:57:a2:
                    ca:d5:18:fc:d0:98:18:e7:30:c6:ec:84:e1:7f:ff:
                    36:de:51:41:17:64:e9:1b:6e:e0:81:f1:11:8c:76:
                    2d:b3:c2:0e:8a:74:2d:6b:bb:7e:79:33:23:07:ad:
                    9b:93:d3:6f:3b:50:11:5f:4d:37:e5:64:14:85:82:
                    75:ab:a7:69:61:12:67:6a:14:01:54:da:e3:bd:76:
                    27:36:19:c6:73:cc:99:5f:6d:03:b5:9d:75:99:2e:
                    12:63:3f:1c:69:88:c0:79:c3:c7:a6:9e:09:e1:0e:
                    97:eb:68:42:7a:6f:9a:2e:8d:88:bd:4e:e5:cd:99:
                    96:28:bb:a6:19:8e:ed:51:ae:dc:8c:f0:0c:e3:7d:
                    6f:d5:03:23:7d:62:95:84:07:84:75:c3:f1:ee:31:
                    32:a5:07:47:22:0e:2d:59:dd:dd:55:a3:b3:ac:35:
                    74:9f:39:ef:3e:cf:1b:1e:e5:e4:00:80:cb:c1:25:
                    9e:78:70:df:31:81:b2:95:9d:9a:51:24:ad:e0:05:
                    97:c3:93:1b:27:69:41:8f:a1:f9:c1:89:8c:05:13:
                    19:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BD:B5:41:A1:0F:3B:7B:FF:60:A7:56:CB:A0:D0:30:37:18:67:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb763c3-75d1-4003-98de-26bcf0ef2670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.73.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:26:32:cd:48:86:35:1f:2a:78:00:18:d1:a7:ad:30:2a:1b:
         1e:06:91:02:e9:28:2a:bf:e3:8c:cd:f7:95:5e:b9:72:78:02:
         0c:9d:2a:51:98:1c:60:dd:dd:6b:42:27:bf:8f:c5:1f:7c:54:
         89:17:16:4f:b0:6c:ed:82:d8:cf:bb:12:f1:22:6f:55:cc:c4:
         2e:07:2c:5c:42:d9:08:48:aa:35:52:fb:8c:d2:03:44:37:cb:
         40:92:c0:c2:a8:dd:f8:f7:b4:5f:d9:f6:57:e7:26:96:12:43:
         8e:46:81:12:1d:56:f9:64:14:c3:1a:77:f7:47:e3:6f:29:bf:
         2f:d3:69:d8:dc:04:13:a6:95:c4:07:a9:37:98:0d:d2:7b:91:
         7a:60:3f:8f:48:f5:1e:61:5d:d9:18:d0:7a:80:33:48:60:19:
         5b:1f:7d:84:11:4f:ad:97:21:50:70:71:8e:47:41:1b:ee:ed:
         38:fa:20:3e:f4:03:92:28:18:89:5c:dc:23:10:f1:f6:60:aa:
         4b:7e:4a:a7:af:ed:f7:a1:a8:d7:37:7b:fa:39:dd:6f:13:ec:
         45:54:29:ca:85:84:b4:2e:6d:dc:c1:84:fb:00:08:33:f4:6a:
         6c:7d:22:1d:c5:3b:b1:88:16:1b:7a:fb:50:88:33:33:c2:a6:
         2c:d7:8d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:26 2024 by rpki-client on console-fra.rpki-client.org