Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d29ee9cc-fef6-4997-8f86-3e5259bb60ad.roa
File:                     d29ee9cc-fef6-4997-8f86-3e5259bb60ad.roa (raw, json)
Hash identifier:          yhpDOQNJmoSVew+Y1omxDB+74ppf2/KAWG+2mZWww2Q=
Subject key identifier:   E7:6D:45:BC:7E:46:18:84:C6:6B:0F:A2:1D:A8:EF:A3:70:B0:54:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04794E856B4A27265619F7075A889FE07E281C86
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d29ee9cc-fef6-4997-8f86-3e5259bb60ad.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        65.37.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:79:4e:85:6b:4a:27:26:56:19:f7:07:5a:88:9f:e0:7e:28:1c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=12c5923df33f348cd0a2615e5a5eb844832b165588e9a3cce913918630eeb3dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:a9:0f:28:54:48:7b:04:26:71:0a:dd:98:
                    3f:29:aa:1d:4f:d6:ef:bb:a5:a9:07:15:83:b6:5e:
                    41:ea:7c:c1:2a:3b:31:1f:db:5d:ac:bf:e7:14:2e:
                    bc:61:d9:ff:ab:c0:de:ce:69:87:aa:8b:7c:72:4c:
                    5f:4a:85:86:ea:47:46:db:64:e6:c1:92:6a:91:f2:
                    36:b3:c1:62:4c:80:29:e4:18:5c:7b:9f:8f:7d:0d:
                    a9:a5:23:18:34:bf:94:57:3f:87:50:60:c3:64:d0:
                    bf:22:e1:51:54:35:3e:f6:fd:d7:03:08:51:3e:94:
                    14:c3:f2:a2:e7:69:cc:4d:27:bd:3a:72:be:97:ef:
                    9b:1f:48:51:e8:b4:15:9d:ba:d8:55:5b:27:a4:3f:
                    c3:bf:83:e4:d9:60:98:d5:79:ee:74:b3:60:f1:f2:
                    a8:c7:4b:2f:a4:45:63:89:46:60:cd:3a:d9:a7:97:
                    8f:21:13:20:d6:3e:5d:02:74:0e:19:20:3f:47:2d:
                    b0:b1:fe:62:9e:75:a6:b2:91:17:71:bb:ef:90:54:
                    da:10:90:08:2c:9c:7a:55:2d:ed:ed:df:a6:17:80:
                    d6:44:48:04:4c:93:8d:29:de:2d:39:e8:56:9c:31:
                    e5:a2:78:30:24:f3:f5:1c:1e:61:4d:17:04:04:00:
                    bc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6D:45:BC:7E:46:18:84:C6:6B:0F:A2:1D:A8:EF:A3:70:B0:54:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d29ee9cc-fef6-4997-8f86-3e5259bb60ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:95:70:78:6a:61:5c:74:40:15:71:48:c8:3c:ea:07:da:32:
         09:01:f3:86:e9:a6:b6:13:05:e2:ac:4b:bf:47:5d:3b:49:5e:
         6c:73:26:1e:54:ea:c8:4d:df:96:d2:93:ae:2c:66:d2:d7:ed:
         03:dc:3d:7c:21:87:03:0c:ed:83:98:16:e1:af:af:e8:5e:26:
         f7:9c:c1:3f:1e:e5:02:b6:58:d0:e7:5c:4f:bb:49:29:7b:40:
         13:32:61:17:67:e5:0f:59:85:e9:25:81:fc:53:b4:21:4d:b3:
         05:49:1d:5a:8d:2a:cb:bf:74:98:6e:14:23:e6:be:cb:c7:4d:
         16:7b:d7:82:7a:9d:2a:e4:ce:b9:90:2b:81:38:c2:b0:45:dd:
         5e:f5:f3:e7:81:46:23:f5:34:6b:46:33:5d:82:ce:c4:b0:cd:
         07:99:a3:04:2d:db:d8:a8:36:27:7e:ca:f7:75:e3:d9:5f:7a:
         a2:14:d9:62:16:93:56:08:7d:1d:64:19:55:8c:92:1f:66:ed:
         55:80:c3:d8:49:9b:cb:ed:f4:8d:4a:fa:9a:cb:8e:f2:bb:ba:
         32:54:26:8f:5c:2f:f4:e4:07:ad:a8:21:0d:fd:3d:36:8a:ab:
         1f:b3:66:9d:e9:1e:c0:df:14:6d:44:93:d0:25:a0:18:84:40:
         92:e5:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:32 2024 by rpki-client on console-fra.rpki-client.org