Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f34633b7-d77c-4e54-b4b0-4193ccb0d219.roa
File:                     f34633b7-d77c-4e54-b4b0-4193ccb0d219.roa (raw, json)
Hash identifier:          h32Xr5/fH8Nm9GfiOG9Oum/kxIWUZekiSxbTTU1VYkg=
Subject key identifier:   D4:40:62:74:A0:9F:83:83:8B:8A:5F:C6:5D:C5:72:E9:E0:42:57:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2EAF8A11F96220FE0C98C5F898C4CCD3A476D475
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f34633b7-d77c-4e54-b4b0-4193ccb0d219.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        207.94.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:af:8a:11:f9:62:20:fe:0c:98:c5:f8:98:c4:cc:d3:a4:76:d4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=3afef5004efb05f1ca4b75c239bacf42e5a024319af859fe810ffd7bcf924dfa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:88:e9:66:3c:31:97:9d:8e:bb:e1:47:35:
                    5b:a2:63:0f:dd:eb:7f:5a:e8:fc:1a:55:7c:8c:16:
                    12:3d:72:12:bf:ce:3d:89:fe:35:6e:cf:21:20:7a:
                    39:be:ec:4b:2e:29:d4:50:62:b1:3e:14:7a:24:9d:
                    08:c7:5e:53:9d:a7:23:f6:89:a1:a2:ff:65:65:d6:
                    00:e1:90:4b:eb:98:7e:9f:8c:39:28:b7:72:7b:5a:
                    3e:a5:91:89:d3:40:9a:77:61:63:bc:dc:f9:80:a2:
                    d4:69:6a:44:d1:cc:02:54:c9:5f:e5:12:ef:49:3e:
                    df:e1:62:13:b5:ae:c8:a4:7d:d5:fd:e9:32:e8:e2:
                    c2:c2:f0:1c:a9:13:cc:a0:33:ec:d3:9a:97:2e:11:
                    42:b7:bf:af:99:97:10:50:39:7d:65:33:0a:aa:0a:
                    89:6f:b2:23:9b:99:b8:e1:a2:46:78:9f:6b:df:77:
                    bd:d7:7f:0d:42:be:f2:3d:4e:3e:b7:cc:f9:de:85:
                    eb:9e:08:25:37:dd:4c:3d:7c:7f:2a:0b:f1:6e:d5:
                    84:bf:b9:fb:dc:eb:3d:17:c2:3c:3b:b0:e9:8e:c1:
                    08:d3:14:fc:01:e8:d0:7b:69:76:40:e2:0b:c6:cc:
                    07:3f:79:cd:24:35:c2:70:47:5d:1b:98:07:a7:a6:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:40:62:74:A0:9F:83:83:8B:8A:5F:C6:5D:C5:72:E9:E0:42:57:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f34633b7-d77c-4e54-b4b0-4193ccb0d219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.94.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:fc:64:18:3d:be:0c:d5:a2:57:44:89:0a:5d:83:78:4f:71:
         31:6e:20:ba:be:d5:be:96:8c:dd:51:11:9f:a3:0e:06:07:54:
         c8:29:e3:b8:a1:2a:8a:7f:b0:f9:33:4c:61:95:f2:78:ad:72:
         35:94:65:10:78:31:25:f0:71:d3:11:38:fb:0f:fd:55:02:5a:
         50:93:5d:3c:45:7f:a9:b7:5c:93:64:16:2b:45:c7:e3:5b:e7:
         0e:30:c7:6d:d9:cd:9c:e4:fa:44:59:94:fc:74:39:06:d1:6f:
         e0:33:94:bb:56:4b:01:c8:a5:3f:ac:3f:e2:2d:9a:2a:6d:9e:
         b1:8e:fb:2e:c5:50:4b:8f:3b:09:9b:83:91:87:46:a1:51:a2:
         1b:8b:91:9e:14:f4:8f:12:fc:50:19:58:9e:0b:0e:f4:bc:82:
         fd:f7:19:34:14:b1:b1:aa:0e:c4:f3:3a:df:b2:85:ac:d2:9d:
         1b:92:30:c4:30:69:4a:98:48:09:6d:7f:96:b4:18:46:e3:5e:
         5a:c4:4e:a4:bc:b7:e9:bb:d9:ca:60:81:e3:2b:e3:c0:27:3a:
         48:3c:64:a7:31:b4:9e:c2:a1:8e:c9:36:88:ae:39:27:9b:bc:
         1b:d7:e7:b9:14:1e:51:fe:a7:62:9d:00:9c:19:40:7c:a4:24:
         7f:50:e9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:41 2024 by rpki-client on console-fra.rpki-client.org