Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d712a7-f3ce-497e-aae6-90aa99ab8e9f.roa
File:                     69d712a7-f3ce-497e-aae6-90aa99ab8e9f.roa (raw, json)
Hash identifier:          rvCXUK2XFXFky5tEwebSuxKxggo7vT53Hpd6K/2k2Pw=
Subject key identifier:   BF:3F:B7:6A:09:15:13:E0:8A:03:DC:6A:61:18:1C:5E:A9:17:34:2F
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2EAF4151C7A0C3EA828143DA824CFB659F8E18FF
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d712a7-f3ce-497e-aae6-90aa99ab8e9f.roa
Signing time:             Mon 02 Sep 2024 00:00:00 +0000
ROA not before:           Mon 02 Sep 2024 00:00:00 +0000
ROA not after:            Mon 07 Oct 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:af:41:51:c7:a0:c3:ea:82:81:43:da:82:4c:fb:65:9f:8e:18:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep  2 00:00:00 2024 GMT
            Not After : Oct  7 23:59:59 2024 GMT
        Subject: serialNumber=ec27db83a7e01315023ba1128bbaea335ec3d20f4edc5f8b52f9a941739cfd59, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:e4:b4:fc:ff:33:99:1b:cf:95:d2:9e:8f:
                    38:dc:da:c9:ab:02:41:8b:d6:a7:e5:88:e2:41:3d:
                    fa:6a:57:9a:0c:9a:96:ed:f7:cf:85:f6:ef:7b:98:
                    c8:74:59:25:2e:6f:64:39:e0:2b:97:3f:66:47:09:
                    33:1c:7a:dc:d7:8f:85:21:3f:7c:64:11:9b:f3:47:
                    78:e0:c6:15:64:7c:8e:48:ec:50:1a:57:8f:5a:c1:
                    68:c2:f9:86:95:c3:74:f3:79:00:dd:3c:be:4a:3c:
                    53:e0:d5:6c:f1:9e:18:23:12:5c:bd:6b:f0:7c:fe:
                    91:f7:2f:96:da:31:c0:ce:9d:cb:58:e4:a3:81:db:
                    5c:4b:8a:67:ef:bb:4c:c3:a7:24:2f:c4:68:93:d6:
                    08:25:99:99:23:37:92:d0:7d:bd:cf:13:bf:b4:dc:
                    70:ab:ba:44:57:e4:00:eb:b7:ba:30:4d:2e:52:55:
                    e0:8b:fe:56:c1:54:f0:13:6f:38:b0:18:a0:d9:94:
                    19:62:ce:56:0b:5b:d1:44:e3:d8:1d:44:82:e0:86:
                    50:bd:19:38:88:77:e9:64:b5:55:92:91:bd:ef:9f:
                    67:cd:ad:27:d1:67:53:5f:7c:4c:7b:a8:bb:19:8e:
                    27:de:78:e8:9d:dc:0c:0d:8a:16:bd:5c:28:ec:0f:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3F:B7:6A:09:15:13:E0:8A:03:DC:6A:61:18:1C:5E:A9:17:34:2F
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d712a7-f3ce-497e-aae6-90aa99ab8e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:36:c8:48:89:bd:92:c5:ac:1b:96:90:bd:17:23:a3:f2:ab:
         c3:c9:8a:51:ea:58:fe:39:e1:50:a5:a2:4c:3d:9d:a3:80:de:
         7d:d5:8a:20:8b:2c:dc:38:3e:2f:2f:87:72:b3:fb:ba:8b:ae:
         b6:bc:24:07:2f:30:08:9f:7b:ba:37:f7:c6:e3:9f:ff:cd:fe:
         d4:0c:5b:57:e2:5b:44:66:75:ba:4f:77:58:36:ec:5c:f8:c3:
         eb:be:37:f5:42:52:d7:9f:c8:67:a0:91:25:ab:51:cc:05:c8:
         93:d5:84:bc:5e:93:29:f9:75:89:58:40:ce:24:f7:a7:ab:fd:
         85:9d:20:9f:8a:8b:db:8b:1c:8f:4b:04:48:2f:48:02:d7:55:
         90:6f:e7:4e:89:88:30:1e:e7:49:45:76:24:1f:54:64:11:c1:
         13:9e:7d:03:4c:bc:ca:17:fb:33:b6:70:8d:a1:c7:4f:57:ed:
         93:28:55:f9:3a:a8:73:10:17:75:c9:df:3a:85:ec:2d:7d:94:
         11:76:7d:c9:86:a6:5d:4e:f1:95:c5:7b:75:4b:f0:56:67:e9:
         89:8d:d8:47:59:f7:06:e2:f9:7f:d8:44:3e:8b:e2:29:9b:f4:
         05:ca:c6:0e:38:69:c5:73:40:c1:64:30:41:b8:fa:41:30:3c:
         32:cb:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:41:12 2024 by rpki-client on console-ams.rpki-client.org