Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd70cf4-435d-4bd6-ba55-8ab417338137.roa
File:                     efd70cf4-435d-4bd6-ba55-8ab417338137.roa (raw, json)
Hash identifier:          zc1K5WLGzB3EesCxlsz8lHUS2dcqBS6x2wbxqseJg9E=
Subject key identifier:   18:CA:F2:AF:94:C0:33:02:64:9E:F6:A8:76:6E:68:F2:8D:65:36:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E873D6E2CA6D93FA77E249F17585EDE0F6E07FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd70cf4-435d-4bd6-ba55-8ab417338137.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        206.133.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:87:3d:6e:2c:a6:d9:3f:a7:7e:24:9f:17:58:5e:de:0f:6e:07:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=3b72f30f51aa6ed90dd78de372e156ba9e9293ee7eea0f92f294bba224e5d57f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:51:4f:3c:48:97:a8:33:bb:8a:01:3a:a6:
                    65:9c:f7:69:09:66:3e:30:b5:9d:f7:9b:6e:c9:84:
                    a6:d7:47:4a:63:c2:71:56:9e:10:c5:22:a0:3b:2a:
                    21:f8:8e:6d:fd:d7:fb:a1:03:c1:a7:c3:f3:6d:64:
                    cf:c1:94:c2:46:3c:84:d7:45:a8:df:f6:1f:d8:d4:
                    fd:5c:c0:08:0d:2f:40:51:24:46:c8:eb:5e:5f:f8:
                    09:6e:ee:ea:f1:f3:87:84:d2:56:1c:8b:1a:7e:00:
                    d0:30:e0:8e:33:6b:5f:cc:6a:f5:ab:a7:8b:b5:57:
                    dc:f0:c1:41:8f:a4:bd:18:24:d6:da:5d:0f:ea:57:
                    1a:a4:bf:95:94:0a:ce:28:9f:7c:05:44:e7:d3:ae:
                    f9:20:64:95:d8:71:01:53:a2:1e:9d:fa:1e:75:3b:
                    0c:a5:8d:7b:cd:33:f6:bb:a6:b2:5d:26:e3:a2:6f:
                    71:d4:55:03:7b:22:2d:28:48:3a:99:2f:bd:99:1d:
                    5f:ab:86:01:3b:59:e2:c7:e0:22:db:73:26:1d:1f:
                    35:60:e7:de:9c:e8:ca:1c:54:bd:22:99:f2:f9:66:
                    d8:00:4a:89:eb:7e:db:ac:b1:4f:57:26:32:0a:ce:
                    6a:88:f1:ae:31:cf:29:a1:93:da:c8:1f:24:0a:f5:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CA:F2:AF:94:C0:33:02:64:9E:F6:A8:76:6E:68:F2:8D:65:36:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd70cf4-435d-4bd6-ba55-8ab417338137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:44:40:dd:5a:fc:fd:e2:05:84:b4:23:1e:4b:8f:ea:17:
         6f:bc:00:05:dd:dc:9c:7b:01:b3:63:3a:0b:ee:8a:19:ce:d5:
         98:15:6b:42:ba:1a:e0:ad:aa:2e:1f:5c:32:a3:2b:43:fa:91:
         23:5d:8b:02:19:9a:30:bc:44:b8:e2:1f:fc:44:5f:ec:cc:3a:
         87:5f:10:e7:f1:ac:cf:31:8f:ad:4a:0e:44:0b:b9:aa:66:58:
         ac:f5:06:ad:2b:5b:8f:21:4b:73:1b:c8:91:77:4e:0d:ff:f7:
         08:98:73:44:64:65:3f:92:fb:47:e8:68:f0:52:dc:8d:a0:57:
         5c:9c:47:46:e0:35:1d:72:45:e1:0c:ee:8c:81:4b:a7:b4:9c:
         81:e8:fe:62:f4:0a:e5:b6:d3:15:00:d7:06:f2:05:68:87:63:
         bf:e3:93:a9:fb:ec:01:9f:19:98:05:07:cc:79:1a:b7:35:b3:
         b6:fb:29:d6:36:e1:af:13:bd:d7:55:0d:ee:fb:5a:44:4f:ab:
         ce:33:50:04:66:5a:73:83:ac:28:1c:21:72:07:ff:cb:5a:d0:
         12:fd:14:3d:e7:28:ee:5a:17:38:f9:46:29:ff:54:27:47:bb:
         0f:50:df:6e:ac:81:1a:c1:83:ff:cb:dc:15:41:15:ca:f5:52:
         60:95:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:40 2024 by rpki-client on console-fra.rpki-client.org