Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e667b7e1-5dc4-4746-8d88-876fe7eccbc9.roa
File:                     e667b7e1-5dc4-4746-8d88-876fe7eccbc9.roa (raw, json)
Hash identifier:          +/2ag6a3YPMvUhyKYab8FEvD/1FPFkqHBJ5K43hl1e8=
Subject key identifier:   E2:CC:80:0C:09:F1:CE:D8:4B:5A:85:DF:6F:3A:DB:1A:97:0F:B6:75
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22ABFE4C2AE17846AE8C6B6B1278B99D7DBB0401
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e667b7e1-5dc4-4746-8d88-876fe7eccbc9.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        204.126.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ab:fe:4c:2a:e1:78:46:ae:8c:6b:6b:12:78:b9:9d:7d:bb:04:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=186f1e2d6c882bc0dc8c5b40630145d3488bcedb1260299fdb0cf095da40bb6b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9b:ed:ac:f2:17:04:df:7e:6f:8a:a3:74:4e:
                    02:35:12:5c:07:57:af:fc:0c:88:7b:ab:02:ca:28:
                    39:66:df:c1:0a:6f:ef:b2:89:d9:11:52:0e:40:51:
                    93:e5:5f:c3:4a:c3:b4:86:21:60:92:36:6e:1c:91:
                    68:0b:bf:c5:8e:cd:34:a0:a9:71:9e:bd:84:8c:ed:
                    86:8d:af:20:e1:3d:84:96:1b:ab:f5:37:40:1e:fe:
                    fe:04:32:76:97:16:e4:3a:fa:c9:a7:ef:6c:4b:62:
                    3b:d3:1a:96:24:cc:3f:23:61:e2:4c:5e:7c:2a:98:
                    a3:ff:c1:a4:de:0e:b1:ff:44:ee:24:1f:0b:83:56:
                    b0:60:1a:01:12:75:f0:f7:3d:df:63:9a:67:e2:df:
                    34:6a:ae:0d:6d:5e:2a:e5:23:12:0d:a3:98:bc:c3:
                    81:fb:cb:13:ce:60:40:c8:16:1e:35:a7:82:35:9b:
                    ca:61:7f:9b:e7:50:33:06:0c:65:e9:ed:96:ac:41:
                    20:00:e9:ad:ab:36:99:db:5c:a8:ad:45:9e:cc:94:
                    08:ee:43:79:1a:93:fc:b2:9a:2f:6b:2a:d5:ee:ce:
                    ae:a5:26:be:18:d5:fe:04:c3:da:3b:ca:fa:c8:47:
                    ec:b1:96:38:93:63:e6:96:4f:68:b8:b2:8b:2e:38:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CC:80:0C:09:F1:CE:D8:4B:5A:85:DF:6F:3A:DB:1A:97:0F:B6:75
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e667b7e1-5dc4-4746-8d88-876fe7eccbc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:7c:7e:67:d7:55:2c:9d:13:b2:4c:91:1b:e4:4f:66:d6:
         de:38:38:a6:e6:87:36:6b:ea:90:77:80:1d:56:6e:17:67:60:
         1f:da:52:28:e7:b5:f1:05:47:0a:17:fb:57:12:bb:97:d8:ab:
         29:9b:00:9c:a0:e1:0f:20:0e:7a:e3:f2:8c:ef:f4:78:c1:1d:
         9f:b4:8f:b0:4d:8e:a1:78:69:94:e3:df:3a:b3:8e:f8:85:e8:
         89:2d:00:07:d7:00:63:68:af:9f:f6:80:09:27:be:41:14:3f:
         45:f2:de:a3:2f:b6:0e:cc:86:d0:fd:a4:73:b0:22:a7:8f:6c:
         be:c4:2b:51:6b:df:a5:fc:f5:f0:7b:8f:a9:f1:87:bf:00:fb:
         ad:32:70:f6:83:5a:4d:ff:7f:22:dc:ad:3d:12:3e:23:74:68:
         ec:41:da:2c:59:50:f3:43:87:2f:8a:53:22:88:78:04:35:e3:
         c1:0a:32:0b:69:44:b9:e1:f3:03:29:1b:54:84:b2:c6:c3:51:
         8a:ea:10:33:de:bb:86:97:c1:3d:30:6f:9e:52:24:3a:da:f2:
         d2:e7:ca:5f:36:66:2b:85:90:0f:ae:c1:29:4d:49:2e:4b:5d:
         1c:f1:f8:59:37:c6:c7:cd:b6:ef:27:89:3d:30:b7:64:46:b3:
         0c:80:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:37 2024 by rpki-client on console-fra.rpki-client.org