Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeb1d4d2-1879-46f8-af87-0433419ac09f.roa
File:                     eeb1d4d2-1879-46f8-af87-0433419ac09f.roa (raw, json)
Hash identifier:          BDbwjhJSNbRfxKbQkjOr9TE7uLIqRaCxu7QtvmggE/8=
Subject key identifier:   03:A8:37:5D:B4:6F:66:2B:59:A8:4E:C7:0C:94:BC:1E:F3:74:4C:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44869247D127E84E0E3299D78B95A412F2B8C1AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeb1d4d2-1879-46f8-af87-0433419ac09f.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        5.60.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:86:92:47:d1:27:e8:4e:0e:32:99:d7:8b:95:a4:12:f2:b8:c1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=9d2632621461d7cec3a4a6c1cf42fb39ac4513c7cc5cb371cf141c1013188532, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:83:91:66:6d:a7:c2:8d:1e:f4:5b:3c:4a:
                    7f:00:b9:30:99:b4:bb:68:94:17:0f:d0:99:83:4f:
                    5c:6c:e5:41:98:b2:f0:b1:e0:8d:c7:0f:a3:6b:33:
                    c8:93:d6:25:fa:65:d1:86:35:cc:01:6b:b4:5e:a8:
                    96:fe:a6:36:1b:d3:77:c2:dd:59:71:5f:0d:ba:cc:
                    34:17:5f:df:f0:8d:b8:67:b7:36:79:9a:a7:8b:68:
                    ec:87:bc:01:bb:82:a8:2a:a4:a4:7c:ac:b7:72:6b:
                    71:93:92:6e:72:f0:70:26:0b:f8:2c:9a:b3:63:74:
                    d3:10:25:e7:27:5d:7a:bd:e5:47:ee:9c:f0:98:d9:
                    e9:2a:5a:79:8b:81:f9:69:de:c7:2c:21:93:8b:b9:
                    05:bf:ef:33:d0:87:af:10:34:46:17:e2:f4:0e:9f:
                    fe:a9:d3:b1:b1:8d:b6:73:46:93:75:df:8b:19:74:
                    10:6b:ab:9d:e6:b6:b2:fd:50:e6:0a:25:f7:fa:6f:
                    dc:e2:69:98:d8:49:01:00:6e:85:8d:42:c0:da:5b:
                    29:30:03:ba:c1:b1:9e:7f:20:a2:fa:01:f4:1d:24:
                    17:60:2d:1c:18:7f:49:76:58:a6:42:9c:5e:ac:e9:
                    29:f3:67:f9:c2:e6:c0:4e:3b:42:8d:1a:fb:93:5e:
                    11:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A8:37:5D:B4:6F:66:2B:59:A8:4E:C7:0C:94:BC:1E:F3:74:4C:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeb1d4d2-1879-46f8-af87-0433419ac09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.60.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:b9:89:38:19:2a:e8:fb:ee:8d:2d:82:03:45:61:56:f2:f2:
         42:8f:9d:64:fc:ce:d3:46:ef:81:f5:46:4a:a3:e0:16:a2:54:
         5e:2c:0d:4d:4e:b3:cd:64:aa:a8:46:76:87:ec:65:25:a9:22:
         29:51:2a:63:01:bb:e5:15:85:a9:e1:b3:67:22:10:72:33:97:
         5c:11:f9:1a:71:ec:65:b6:16:13:e2:a5:3c:2b:a5:8c:89:d5:
         7c:3a:4b:30:65:58:84:12:40:97:ee:4f:32:9c:19:46:da:1e:
         da:e1:c0:a4:d9:af:84:b7:db:80:31:cb:95:07:16:8e:bc:66:
         eb:d1:c6:47:c4:f4:70:a9:6f:af:72:32:c6:bd:97:38:e7:0a:
         e1:d0:ba:90:f5:f1:53:69:19:a0:9e:f6:03:0e:87:1e:52:e1:
         e7:47:1d:a3:84:57:d0:c3:4a:69:1b:92:88:09:56:69:97:6d:
         d7:70:06:ed:58:33:bf:d0:84:d4:d9:bf:35:85:92:8d:a6:18:
         53:82:64:3b:25:c8:47:2b:83:a2:6d:cd:d7:57:22:e3:a2:cd:
         1d:dd:42:5b:dd:a8:4e:9d:3c:59:ea:c3:90:74:2e:69:b8:60:
         31:8a:8e:40:f6:78:bc:25:a6:07:d0:0b:fc:b2:09:0f:a7:56:
         e7:a4:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:01 2024 by rpki-client on console-fra.rpki-client.org