Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc1d5baf-aa6e-4c1f-9f89-83b1ff1395ea.roa
File:                     dc1d5baf-aa6e-4c1f-9f89-83b1ff1395ea.roa (raw, json)
Hash identifier:          0Y1wXzqszfmd+EwBXiCI0Rjt7o+9/RaQ6J3iCq9RgRE=
Subject key identifier:   C0:E4:C5:43:AD:3F:B4:3F:46:04:10:19:BB:00:53:10:9B:AD:E2:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       615580169635DA41BCB6BAF6C96982DE2D38CC7C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc1d5baf-aa6e-4c1f-9f89-83b1ff1395ea.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        96.0.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:55:80:16:96:35:da:41:bc:b6:ba:f6:c9:69:82:de:2d:38:cc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=2d50affdd9398e3cc3afd1e48a4c0d4935d5fd3f642c53d36ecaa8f4bda0944f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:21:5e:f7:e3:d9:78:f8:52:0c:55:f8:5f:
                    88:9d:85:b0:3a:12:20:a1:50:ef:f7:0d:07:e9:2d:
                    d0:a2:77:88:b8:a2:aa:6d:e9:94:a0:12:c8:f2:95:
                    9d:d3:62:5e:86:40:bd:f8:35:52:25:f6:d0:75:61:
                    0c:cb:54:7e:60:b0:2e:cc:be:e4:45:f3:1c:89:dc:
                    74:cc:37:f6:58:d1:00:c5:7d:93:50:be:2c:32:fa:
                    f3:09:40:0a:8f:3a:15:aa:00:9b:49:47:54:de:b9:
                    66:de:b9:10:21:90:82:c0:66:27:44:d3:e5:d7:9a:
                    68:fd:c3:07:9f:36:70:40:ec:f7:42:80:c9:51:17:
                    b4:fa:83:56:96:cb:8d:1c:87:ac:e3:e7:52:34:30:
                    bc:6a:03:11:30:96:d5:86:d5:1d:85:8e:11:35:f7:
                    c6:4a:01:70:82:c8:07:e7:9c:12:fb:8d:0d:d5:b2:
                    35:58:cc:0a:59:e3:81:d6:a9:13:bf:63:97:ba:e5:
                    86:1e:d7:6b:8b:70:ad:02:13:14:a0:c7:69:16:52:
                    94:d7:bd:cb:04:8e:5f:ea:d5:08:ca:2f:4f:41:3b:
                    8b:c8:dd:8d:e3:ae:82:7f:54:68:ba:5b:0a:31:2a:
                    a8:e3:3d:1c:7e:8b:e2:01:0a:e0:6f:ce:37:c2:56:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E4:C5:43:AD:3F:B4:3F:46:04:10:19:BB:00:53:10:9B:AD:E2:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc1d5baf-aa6e-4c1f-9f89-83b1ff1395ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:99:f0:a6:0d:3b:23:9e:a8:90:24:bc:7a:24:cf:34:5a:9e:
         c0:8e:c4:4f:50:11:33:89:eb:3f:d6:94:1a:f2:1a:93:e2:f4:
         c3:96:f6:41:fc:9f:e0:23:54:9d:7e:78:6f:5a:38:a8:9e:89:
         77:78:d5:e5:37:34:9b:f2:ab:1c:d2:25:e0:7c:23:84:67:2f:
         92:6e:05:fb:6c:6e:e8:fe:33:f9:cc:fc:6e:2f:ef:d9:56:57:
         3c:00:84:4c:94:02:42:eb:18:7c:c7:20:47:ea:7c:c2:73:1a:
         b7:1b:2f:3b:e7:cd:7e:7f:12:6e:f7:f2:33:f5:85:d5:0b:c8:
         94:cd:39:97:25:5d:6d:ed:21:d3:93:60:98:a3:8d:d0:f3:8b:
         af:14:fb:61:33:cb:56:83:46:41:f5:85:40:d1:8c:04:87:c0:
         95:81:ec:23:cf:d7:a5:83:18:fa:56:8b:1a:b9:79:3c:66:d8:
         69:52:12:06:72:d2:d9:95:fe:62:eb:4c:11:22:34:74:00:77:
         96:06:cf:53:36:f7:91:65:87:5f:85:60:04:6d:c1:39:1d:b6:
         de:1a:02:39:69:20:67:45:8b:01:ce:66:e0:8a:c4:78:e4:f6:
         1e:89:13:50:b9:4e:ec:ba:3d:52:82:63:72:94:9a:17:9e:4e:
         a0:21:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:35 2024 by rpki-client on console-fra.rpki-client.org