Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa
File:                     c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa (raw, json)
Hash identifier:          qQvuINNaw58ASYGJHdJap2fv37wu3P5QvZLxHoCEZ/Y=
Subject key identifier:   E7:AE:7C:D1:A9:60:F0:EC:D8:6E:B0:47:C5:3C:79:5A:31:89:86:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DD819DA91FDDB89E4769B752FFE346251982FEF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        93.75.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d8:19:da:91:fd:db:89:e4:76:9b:75:2f:fe:34:62:51:98:2f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=accc67b2c25f39a123a86c2609656af09c83beb96215ba23d3fc6e6d4bd04889, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:93:18:17:30:d3:d4:0f:91:cf:cb:09:6b:
                    5d:a7:ff:87:ba:9e:fa:46:2d:a4:26:d3:89:c9:84:
                    14:77:98:82:b8:52:5c:19:3f:c7:70:ec:df:41:4c:
                    6d:db:50:e4:ea:e8:ba:d5:44:c6:5f:41:f5:39:88:
                    10:63:08:ca:be:9a:59:6b:9c:4c:73:17:31:9a:94:
                    bc:36:de:25:93:57:e1:34:da:1e:c0:88:84:61:d8:
                    ad:5e:c3:61:48:f6:de:01:ce:a6:e9:8b:ac:aa:8d:
                    b4:82:fd:28:d1:56:44:ca:1d:9e:54:19:a0:e6:61:
                    43:9c:3f:0f:2c:ee:68:a3:95:85:68:dc:be:86:32:
                    90:9d:e2:a6:a5:f1:57:c8:06:5c:b9:0b:6d:10:48:
                    51:8b:84:1e:ae:b5:94:5e:40:da:ee:d1:b3:a5:8b:
                    7b:cb:1c:4f:93:5a:2b:18:96:a8:5c:b7:3a:cf:80:
                    21:58:b5:12:f0:67:3c:cb:55:fc:7f:c3:a3:e5:34:
                    98:4e:2f:63:c6:1b:b8:30:92:e8:e5:68:55:0d:5f:
                    19:07:48:59:09:c6:60:51:ea:b7:e9:84:93:90:d5:
                    5f:a2:f1:55:fa:27:ef:cd:2c:7c:3d:d7:c5:a2:25:
                    11:3f:de:80:52:f1:1f:53:75:7a:41:93:66:d6:09:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AE:7C:D1:A9:60:F0:EC:D8:6E:B0:47:C5:3C:79:5A:31:89:86:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:6f:6e:15:db:fa:8f:87:3d:1d:57:01:91:84:c0:96:d9:c5:
         44:5e:d9:c2:d7:bc:25:d7:13:36:6e:c9:d0:37:4c:c0:de:be:
         52:56:19:94:ff:ee:5a:04:a3:0d:ab:92:2e:3e:29:b4:a8:6d:
         e1:89:0d:04:ad:8b:1b:a4:e1:a4:37:cc:aa:08:b8:82:99:4b:
         a0:16:9a:8e:a3:e5:8b:82:3d:d7:41:0c:9f:4a:49:ed:01:9c:
         35:53:90:0b:78:01:40:7e:b8:45:a9:68:b4:36:20:a9:33:26:
         3b:2f:28:a1:37:14:4b:a5:1f:5f:5e:59:d5:5a:b6:0b:4b:4b:
         21:60:52:ef:91:51:d9:4c:b4:70:bd:c9:77:52:e2:33:f8:f1:
         09:2e:64:f7:6d:9f:88:09:81:66:0f:6b:e3:4b:88:49:2c:4c:
         c4:7b:c3:cb:9a:0a:5c:90:80:95:33:f7:ce:99:1e:37:5a:5c:
         93:69:92:a2:2d:9b:34:01:17:3a:41:10:69:24:08:ba:71:73:
         b0:a9:25:b8:32:41:84:fd:37:0a:b4:5d:e1:75:b4:1d:18:a2:
         76:3d:7f:9f:a1:f8:0e:95:c9:4c:f2:e9:2f:18:0f:20:95:0a:
         a0:66:5b:ce:03:cb:ef:1e:c0:37:45:d9:3b:45:85:00:2c:4f:
         05:0c:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:29 2024 by rpki-client on console-fra.rpki-client.org