Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa
File:                     784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa (raw, json)
Hash identifier:          8mbckqS0RKwlc0AmBOX9QH9cS4doHED2ijmRouL6jDU=
Subject key identifier:   F3:CC:A6:74:CC:9B:DE:95:99:85:E6:3A:88:74:08:25:33:B3:A9:04
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       75ED3ED6E31E4CA2D1061A0109A599005FBADB22
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        96.127.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ed:3e:d6:e3:1e:4c:a2:d1:06:1a:01:09:a5:99:00:5f:ba:db:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=9e1870bf76dbef5c9a4c5807b949757becf1b9f1c996a7d42eb66ee50caf39a3, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:53:03:5a:ec:d2:ec:a4:e6:dd:2a:a1:0a:
                    58:0f:67:42:0c:60:05:c9:e1:3d:db:f8:05:be:d4:
                    4f:1c:b2:e8:78:26:7d:b7:5d:af:9b:c7:f0:ce:85:
                    0d:c3:ea:13:68:89:1c:00:e5:1f:e4:b2:c8:a6:88:
                    ef:5c:21:f2:f1:bb:5a:0c:5e:d2:3d:54:2d:35:b2:
                    72:ef:a7:a1:89:ed:39:4c:17:93:41:1f:1a:0b:aa:
                    5f:68:5e:f9:db:bf:f9:db:ba:9c:f4:81:0b:11:2d:
                    87:54:25:b6:34:5e:5a:5e:4d:78:2a:a6:e4:56:b8:
                    dc:26:60:14:84:67:df:78:aa:da:aa:01:ca:84:82:
                    29:76:49:77:f4:13:ee:3b:6c:e4:48:a6:c1:b6:07:
                    f6:83:b3:6b:92:c5:59:68:af:77:3b:d6:c5:b2:2c:
                    e5:af:dc:f5:34:7d:57:75:0d:62:40:f2:1d:e6:e9:
                    60:e8:b4:db:99:c9:fb:86:80:34:f3:c4:ad:41:18:
                    4e:61:7b:cb:d4:7b:7c:fb:ed:27:fb:7b:e5:3d:fc:
                    8e:c7:9c:a9:45:9e:87:0c:c2:c6:4e:b3:ac:7d:8f:
                    7f:dc:14:e9:1c:1c:0a:af:2f:12:5c:59:9d:54:70:
                    38:08:a7:94:3b:8d:2a:1c:e6:f4:26:10:67:0b:a4:
                    f8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CC:A6:74:CC:9B:DE:95:99:85:E6:3A:88:74:08:25:33:B3:A9:04
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5c:ad:c5:38:4f:16:6b:49:4f:7e:37:6a:9e:b0:4b:bc:db:03:
         5b:5c:42:be:e4:92:2e:91:9a:85:0a:ae:95:83:a1:0b:d0:4c:
         86:f0:70:47:3f:67:62:f4:48:46:87:f3:78:f4:2c:22:32:e0:
         ad:06:1e:ff:4e:72:fd:58:b0:95:91:39:5e:29:2a:9f:be:db:
         dc:01:d3:64:7c:d1:bc:85:c6:8a:1f:5c:00:ea:65:4a:e1:bc:
         47:2f:48:6a:e6:d7:72:7e:04:92:fe:c6:c6:81:26:d7:4c:4d:
         89:17:ef:fb:24:ae:fe:59:c3:cb:63:09:da:03:1d:be:ba:64:
         12:80:03:71:bf:7b:d3:c6:84:4f:f7:2a:32:20:77:1b:c9:71:
         33:c3:ed:d2:42:17:30:c7:c5:85:e0:77:c1:42:47:22:ab:2f:
         3a:aa:94:7d:f8:40:df:77:61:e0:cf:4c:ff:c1:97:c9:2c:bd:
         fb:97:f7:59:01:fc:d7:15:a5:66:a0:6f:e2:80:b1:4b:3c:82:
         7a:43:7e:94:91:9c:b7:e3:53:7b:08:01:46:bb:b3:10:64:16:
         f7:7e:0b:d0:78:cb:45:3e:c3:06:6e:29:b2:51:fc:30:d9:26:
         81:8d:e4:89:49:71:d9:15:8d:2d:39:c9:b8:78:c5:93:8c:6b:
         4f:26:dc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:32:34 2024 by rpki-client on console-ams.rpki-client.org