Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc41999a-d2f1-49ae-9640-c7e54e6b92a8.roa
File:                     fc41999a-d2f1-49ae-9640-c7e54e6b92a8.roa (raw, json)
Hash identifier:          gjj6EUNjDo4z0MRM/n1QOivuPqdS8s2qcaYCrexAPqM=
Subject key identifier:   DD:80:71:A9:D4:FE:C6:0D:6C:7F:0F:91:2F:2B:33:8F:A9:23:56:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36071B9BBB0EEFEBC5DDDC0E0223741BD8F29D29
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc41999a-d2f1-49ae-9640-c7e54e6b92a8.roa
Signing time:             Thu 14 Nov 2024 00:00:00 +0000
ROA not before:           Thu 14 Nov 2024 00:00:00 +0000
ROA not after:            Thu 19 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        35.50.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:07:1b:9b:bb:0e:ef:eb:c5:dd:dc:0e:02:23:74:1b:d8:f2:9d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 14 00:00:00 2024 GMT
            Not After : Dec 19 23:59:59 2024 GMT
        Subject: serialNumber=82ce11a379bd0d1def5627f91db01c81f7644a8cc23aec29dc2f126dab36bbaa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:5f:7b:38:0c:d4:ba:44:2c:71:e4:ff:9d:
                    96:dc:bd:10:19:2d:40:a0:11:dc:0a:8b:1b:4f:38:
                    36:71:13:b7:55:43:9b:af:d5:39:1c:49:19:88:10:
                    7f:48:52:7d:34:82:85:fe:0a:15:41:89:8d:68:1e:
                    c0:fd:79:26:0c:e0:a2:ec:8a:f9:69:9c:62:91:06:
                    e3:e4:34:ef:d9:07:42:e1:3d:52:3b:4f:21:66:9b:
                    95:d9:6c:bf:d4:ab:05:8f:74:e2:c1:e0:9a:2c:7c:
                    38:63:33:fc:a6:47:2a:1e:3f:95:b7:0e:cc:f5:11:
                    d2:11:3a:fe:4c:78:d4:73:60:18:f7:55:e5:35:14:
                    0a:c0:cd:61:94:14:39:43:96:78:b5:ae:84:f2:c1:
                    f2:4b:e4:14:71:e7:08:3e:a9:93:ef:04:9a:87:88:
                    81:a8:34:6a:4a:98:74:be:7c:c9:6a:e6:ff:5d:a4:
                    13:cf:8d:9f:9e:02:8b:82:d4:16:ff:d4:42:2f:c7:
                    14:bf:d6:a7:bd:42:22:45:72:70:6a:4c:5b:21:be:
                    93:4a:7a:c2:1d:df:1d:57:7d:9e:84:e7:02:b7:be:
                    ec:35:26:fa:c6:77:12:85:c8:78:7c:96:1b:30:b0:
                    80:89:21:6b:ad:9e:af:e6:d9:13:e2:81:3b:70:34:
                    2d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:80:71:A9:D4:FE:C6:0D:6C:7F:0F:91:2F:2B:33:8F:A9:23:56:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc41999a-d2f1-49ae-9640-c7e54e6b92a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.50.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:94:b3:b8:c1:12:50:aa:b9:17:89:1e:41:a8:72:03:59:fb:
         23:c0:05:73:8c:97:c1:93:33:6d:24:2d:33:7f:2d:53:03:8f:
         e0:a0:a2:71:00:94:30:e7:97:d8:78:9d:4a:e2:2b:3c:04:2b:
         9a:f5:5d:76:7c:e6:21:f0:a9:e3:ab:a8:6d:04:f3:27:4f:ea:
         c0:f0:47:ea:25:f8:dd:14:78:04:9d:a5:e6:95:bd:56:77:36:
         49:05:2e:04:64:40:57:a0:8b:d4:8f:4c:13:08:f6:64:53:fe:
         1b:d3:eb:08:b8:3a:6e:d1:ec:a0:f4:ad:bc:c1:87:af:76:1c:
         7d:1f:0f:f3:06:d9:97:e4:2b:84:df:d5:99:e5:f3:32:86:88:
         1e:b4:96:f7:6f:31:d6:4e:d7:ac:42:0f:7d:be:3a:0b:7a:f8:
         46:5c:a8:09:ae:24:b2:6a:a3:ca:3f:4a:0d:b4:4c:09:3c:46:
         42:d0:35:96:7d:ad:67:a3:4d:e8:0a:e5:dd:e2:56:fd:9f:e8:
         96:aa:75:a2:21:b8:52:db:0a:b0:61:6c:02:c5:3a:27:76:9f:
         44:40:00:91:86:cc:a6:74:45:03:b2:be:6f:de:bc:d9:36:3d:
         32:3a:40:bf:34:e3:6d:06:d2:91:79:0a:ec:9b:03:5a:9e:1d:
         44:17:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:19 2024 by rpki-client on console-fra.rpki-client.org