Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9379183-2f78-494b-8d27-201a280c0f46.roa
File:                     c9379183-2f78-494b-8d27-201a280c0f46.roa (raw, json)
Hash identifier:          ghIY82jnU3T+n7KfIeA/oyRtin/t3XQ7Q9OllQ0kAGg=
Subject key identifier:   9A:66:88:14:BF:59:8E:73:A0:CE:B0:EF:5F:89:82:FC:7E:24:A5:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D0F7C91D3F274EAD34999597049CC4D2CF9B305
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9379183-2f78-494b-8d27-201a280c0f46.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        207.127.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0f:7c:91:d3:f2:74:ea:d3:49:99:59:70:49:cc:4d:2c:f9:b3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=0e04c4d6393d10098724427512489f4744afc48684f197aef9ea978c084e0f75, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:67:55:13:44:2f:d6:98:df:b1:c3:eb:ab:
                    48:01:16:f7:7f:4c:6e:4e:ad:47:c1:5e:d3:8b:e9:
                    9c:98:9a:76:37:b1:79:21:fe:12:0a:c9:99:00:dc:
                    82:3e:ae:f8:ed:3c:00:75:ee:50:5e:a7:ea:64:78:
                    b1:42:03:7b:d2:09:82:67:48:f4:b4:89:ac:08:0d:
                    75:39:76:8d:63:cf:f4:c3:27:c6:85:08:1b:1f:25:
                    c3:91:12:25:6d:27:3e:30:15:39:2a:53:27:82:94:
                    2d:fc:94:e1:ca:72:84:5b:f2:10:c0:eb:37:e7:7b:
                    2a:ff:9a:1c:b5:26:bd:5c:20:c6:c6:4b:cd:72:9c:
                    32:d1:24:32:00:f7:76:55:d8:0d:a9:93:55:6f:91:
                    4d:da:1c:35:46:c0:33:d9:fa:cb:81:d9:c0:c5:96:
                    41:03:87:ab:84:6c:e7:57:c6:6f:a2:3b:aa:22:64:
                    8f:55:c0:30:47:7f:b0:a4:f9:eb:09:ee:3c:b4:f2:
                    5e:60:83:b4:aa:c6:64:80:41:3b:e7:3c:78:4e:b5:
                    a1:0a:e4:d1:eb:5f:80:35:1b:5b:7c:d2:bd:16:54:
                    92:3c:44:e3:2f:24:95:e5:24:08:ae:3a:ff:e2:5c:
                    18:18:26:ba:32:1a:87:87:2d:73:24:ed:56:b7:83:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:66:88:14:BF:59:8E:73:A0:CE:B0:EF:5F:89:82:FC:7E:24:A5:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9379183-2f78-494b-8d27-201a280c0f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.127.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:99:2a:8a:2f:6d:8c:2b:69:62:b2:b0:54:e5:d8:42:95:
         f7:68:70:23:0c:bc:b8:8c:58:5a:91:c7:e0:29:ec:cf:64:dd:
         64:b0:96:53:38:ed:97:9f:0a:99:bc:d3:e0:e8:56:f8:00:0f:
         e9:b2:f2:7d:69:39:6c:a5:01:1b:cb:8f:a3:c7:43:35:b5:ba:
         9c:13:7a:05:20:32:26:cd:16:c0:b7:65:bb:83:9a:90:bf:3c:
         a4:c7:eb:86:1b:b4:3a:9c:8b:cf:ca:d2:ff:74:b2:95:35:c2:
         f6:16:80:16:40:ed:25:3b:9e:7e:18:10:39:64:7e:49:34:43:
         ed:52:dd:5f:b2:1a:66:2d:9e:65:c6:0c:dd:32:82:67:51:71:
         14:e8:82:46:fd:88:5c:f5:7a:52:2d:03:ad:8a:91:f3:e4:b2:
         31:ef:44:85:96:bf:30:fd:a8:e0:15:94:94:d9:18:1f:57:48:
         25:30:5c:56:03:a3:83:6f:1e:a3:30:33:94:07:d8:cc:62:20:
         e1:d1:2e:c7:58:48:2e:0c:23:2a:ca:14:5a:e8:de:f4:1e:45:
         51:e3:0a:d5:e2:e6:47:c6:89:5d:da:9a:68:fe:0d:28:b0:0c:
         26:c4:94:b1:03:f4:23:d9:d2:bd:59:e8:0e:b4:c8:3d:fc:c9:
         9b:bb:80:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:30 2024 by rpki-client on console-ams.rpki-client.org