Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5e50aff-8ab3-4634-aab6-0294eb13cd2a.roa
File:                     f5e50aff-8ab3-4634-aab6-0294eb13cd2a.roa (raw, json)
Hash identifier:          5+mC9xBgT1zvgbf7ttDQjuCNpfeguz0hLvmvfR0x8rw=
Subject key identifier:   7D:E2:7F:24:55:ED:50:93:D1:AF:69:28:C3:41:6B:3E:DF:9D:08:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A1D382437BCF7D23CFAA86CF0D537323C8556E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5e50aff-8ab3-4634-aab6-0294eb13cd2a.roa
Signing time:             Sat 05 Oct 2024 00:00:00 +0000
ROA not before:           Sat 05 Oct 2024 00:00:00 +0000
ROA not after:            Sat 09 Nov 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        77.121.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1d:38:24:37:bc:f7:d2:3c:fa:a8:6c:f0:d5:37:32:3c:85:56:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  5 00:00:00 2024 GMT
            Not After : Nov  9 23:59:59 2024 GMT
        Subject: serialNumber=167cb50abc3172b89f6ffb2e2be5a7856a726293a7af9e049be4e36feaf24462, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:bc:57:e2:72:14:21:39:43:c4:69:4f:d3:
                    78:84:b0:1c:1a:2c:49:32:78:ec:2a:80:c3:61:b1:
                    ea:7f:02:fc:8a:d3:d7:aa:41:e3:8c:a7:c7:86:73:
                    b0:b9:63:fc:b6:4a:5d:fa:b0:c9:7a:79:bb:22:2d:
                    ec:78:bd:6a:f8:0a:7d:b1:32:38:54:9f:66:92:f6:
                    cf:17:18:08:e1:7d:30:87:2e:f5:47:ca:c1:a9:0f:
                    43:40:22:20:89:46:f3:01:ec:63:72:ab:c7:49:b2:
                    86:3a:7e:5f:53:3c:97:5d:9e:eb:18:1f:a8:0e:cb:
                    b2:c9:3e:2e:23:e0:02:50:9e:2c:e4:7a:9f:72:62:
                    5e:c7:9c:0f:0a:ea:4a:e5:a1:46:f2:e3:d1:60:a4:
                    a7:e1:f0:57:93:fa:75:84:4f:ce:1c:cd:2a:00:16:
                    58:4c:b3:2d:6d:cc:15:cd:f6:48:47:47:46:8d:4b:
                    03:04:6f:7d:71:f0:51:5c:e5:08:a1:67:66:45:90:
                    32:4d:92:29:ed:9c:60:87:bb:12:0e:07:2a:b8:3c:
                    79:ba:02:4c:5b:b4:9f:81:56:c1:e2:07:cb:db:92:
                    fb:20:8a:4c:4f:ef:cf:71:a0:15:ec:1b:91:2b:3a:
                    72:26:5f:ff:1d:cc:32:d1:b9:d4:2e:7d:17:1e:9c:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E2:7F:24:55:ED:50:93:D1:AF:69:28:C3:41:6B:3E:DF:9D:08:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5e50aff-8ab3-4634-aab6-0294eb13cd2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.121.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         81:a2:ee:09:d2:99:16:bf:d3:47:33:70:dd:0b:bc:a3:7e:50:
         ee:74:3f:28:76:4f:8c:18:af:39:e4:0e:85:f0:13:85:8a:5d:
         ba:3c:3a:36:a5:1a:1e:81:49:5d:bc:1d:fb:44:6e:b6:9f:e8:
         58:dc:2f:85:50:f8:d2:d5:b1:e3:74:7f:46:d7:7f:29:38:a4:
         28:62:b7:24:5b:5a:db:85:e1:08:2e:73:ec:33:5f:d4:36:ae:
         af:d5:36:27:5b:4c:95:26:7b:eb:85:35:32:0f:54:3e:d3:55:
         4f:ef:49:29:6a:bb:3a:05:51:d1:e1:8d:11:38:17:d2:d4:87:
         c1:39:9f:b4:c0:0d:ac:e5:2c:f3:7a:ac:65:a1:41:e8:0a:31:
         8a:05:b1:64:e2:1c:72:b9:96:d1:94:b2:54:f7:24:b9:20:ff:
         fc:fa:72:16:99:ed:0e:2a:7d:4c:7b:15:d0:73:57:66:31:48:
         dc:2a:28:cc:51:96:00:cb:8c:3f:c1:b5:83:44:fd:c1:e9:1d:
         a1:f4:7e:ea:f0:30:80:b3:e2:2e:8b:9e:00:80:47:af:77:37:
         6a:d2:60:ce:12:49:07:c7:4e:9d:e7:a6:96:aa:e9:56:d3:e4:
         89:d6:b1:9c:01:65:33:26:33:91:ff:50:2d:a4:69:01:b1:f7:
         b2:58:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 00:47:17 2024 by rpki-client on console-fra.rpki-client.org