Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f91999a5-5bfa-4baa-94df-c344a43f2398.roa
File:                     f91999a5-5bfa-4baa-94df-c344a43f2398.roa (raw, json)
Hash identifier:          t3sEfIwCH5S4Q0TA3bx9Vu+enZvfwTyWwqLmp8E2Sj8=
Subject key identifier:   3C:1A:AA:4B:06:3D:57:80:B1:7B:CD:EF:33:79:5C:E4:08:D6:6B:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F4667691A6F933E41B2A397C93E42F858417A35
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f91999a5-5bfa-4baa-94df-c344a43f2398.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        134.127.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:46:67:69:1a:6f:93:3e:41:b2:a3:97:c9:3e:42:f8:58:41:7a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=d5aed809a0828a6f4574637f0938428b66659e1dbcf0aeb74f6ec7a58681ba52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:da:cf:4e:c2:3a:40:e1:e9:4a:c9:0a:38:
                    45:6d:43:81:8d:a6:c4:d0:bd:56:64:6f:6c:fa:f9:
                    38:a5:56:48:59:f4:c6:42:06:2b:7a:37:fe:c5:68:
                    6f:f0:d3:1d:de:1c:9f:dd:fe:ec:ab:b3:86:13:32:
                    2b:e1:df:c9:0b:8e:e3:73:4a:b1:bc:db:ad:2f:83:
                    34:09:02:2f:ce:c9:92:76:1a:fe:9a:25:05:21:3f:
                    08:c4:b3:24:3a:ed:0c:b2:ef:b7:13:29:b4:ec:3d:
                    0b:de:33:d3:df:2d:19:dd:f1:4b:4f:73:5e:71:19:
                    27:09:b2:e0:f0:31:8b:3e:5f:00:75:e7:54:85:67:
                    76:ed:8f:49:15:49:fb:76:53:d5:45:94:1f:81:73:
                    e7:17:6b:ed:5e:57:bf:3d:05:8a:54:44:c4:09:76:
                    bb:26:05:49:2e:f9:2f:f4:e3:76:c0:4f:a0:8e:d0:
                    5f:32:26:2b:4f:bf:2b:b2:c4:5e:50:75:13:3a:e8:
                    27:19:3e:93:30:22:1f:83:6d:f9:9a:5b:2b:37:6d:
                    37:80:b1:28:db:65:05:71:88:56:92:ad:d8:10:5f:
                    d0:02:78:3c:ba:24:eb:b7:c2:43:62:ac:56:45:27:
                    f4:52:80:6e:ca:38:8a:a3:a6:62:89:81:39:aa:0e:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1A:AA:4B:06:3D:57:80:B1:7B:CD:EF:33:79:5C:E4:08:D6:6B:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f91999a5-5bfa-4baa-94df-c344a43f2398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.127.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:24:7e:8e:fe:f2:af:12:cd:d1:db:55:da:96:10:7e:ef:5b:
         88:9f:84:53:85:71:bb:94:f1:b6:03:97:10:a0:70:15:c7:89:
         af:c5:0a:5e:23:5d:e9:ca:5b:d6:08:e2:fe:44:c9:01:b2:66:
         75:44:ee:c1:9e:0c:9a:01:16:0a:48:a9:c2:8a:f3:1b:84:b0:
         22:fb:d3:d5:9c:b6:d9:9d:48:1b:19:26:92:49:88:6f:af:30:
         ce:07:ea:e5:66:e3:cb:bb:38:fe:a9:94:f2:ea:a9:ab:c1:a6:
         07:a2:f1:00:12:a2:56:8a:aa:bc:55:b9:bf:f6:a3:ba:a4:10:
         6d:ee:a5:bd:3d:7a:29:b5:b8:b5:7b:5f:4c:c3:ff:ca:a4:55:
         00:8b:c0:05:af:51:be:77:47:91:d8:f2:3a:89:08:4b:33:94:
         37:fa:24:a6:7d:60:8f:c0:d1:f7:8a:68:b8:f5:85:c9:8a:b5:
         6b:f1:47:69:ea:24:72:43:13:b5:a2:5d:98:fb:62:68:50:09:
         1c:aa:7c:b0:98:57:37:3e:c0:a4:b1:2d:27:4b:6f:9d:a1:c0:
         35:ae:b1:0f:07:59:c2:93:6b:ba:87:01:9b:3f:2f:ab:87:af:
         0b:1e:e9:8b:66:af:27:b0:cf:1c:06:fd:44:97:7d:61:0a:03:
         60:8b:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:26 2024 by rpki-client on console-ams.rpki-client.org