Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a60eded-a7e8-4c0f-b13c-d04bb244a35b.roa
File:                     7a60eded-a7e8-4c0f-b13c-d04bb244a35b.roa (raw, json)
Hash identifier:          ZPGVN8eE9E+EQyXvQQgCSerEbyNSh6Wf3FdvG8p2pLk=
Subject key identifier:   AC:87:E4:62:D8:2A:14:32:D2:8A:B2:D7:DC:51:10:59:36:08:26:5E
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       285BA9078A2981502261607F3FC2F528E24BFFC4
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a60eded-a7e8-4c0f-b13c-d04bb244a35b.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        173.82.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5b:a9:07:8a:29:81:50:22:61:60:7f:3f:c2:f5:28:e2:4b:ff:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=0bd79fc46c39dd76168a5002e37e25c5c2fa2f0870512c2a68c33e988d7d3915, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:f8:b2:93:96:e9:f1:e5:df:b4:1f:20:ea:
                    5d:6b:0a:9a:3e:08:92:c8:71:e1:ef:b1:f0:66:89:
                    c0:8e:4d:45:f9:4a:95:cc:e4:4e:0b:85:c9:51:2a:
                    53:24:70:a3:a7:5d:ce:3e:10:a0:25:01:45:46:04:
                    0d:6e:e9:01:ac:d2:a9:4f:d9:99:16:ca:e8:9b:99:
                    2e:fd:6a:fb:0e:dc:5f:84:45:9b:09:56:9a:50:23:
                    ba:43:67:a7:30:3f:f7:e1:b1:c9:0b:31:dd:16:58:
                    ac:fc:d6:1f:05:78:c0:41:69:bc:7b:6a:a7:52:4e:
                    b4:84:3e:e5:10:6c:f5:cd:a3:44:3f:3d:26:1c:4c:
                    c7:a8:80:4d:4e:e2:2a:21:5b:f6:62:e8:20:cf:c4:
                    45:5d:73:36:64:1a:83:6d:a8:26:4b:86:35:2e:4d:
                    d9:a5:01:95:12:18:83:7d:8d:b1:19:e5:5e:ad:4f:
                    6d:31:0f:e3:99:72:5f:fb:3c:1e:30:c9:b4:78:26:
                    3a:fe:5f:11:59:68:47:a4:94:93:ec:e7:0d:36:e5:
                    4a:64:44:5d:63:c0:f5:51:22:b9:98:b8:11:b0:fa:
                    7d:08:97:c8:d3:58:58:9a:0e:e0:02:e7:0d:9e:f3:
                    ed:f6:fc:80:13:b9:e6:f6:9c:70:cb:34:5d:ff:9a:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:87:E4:62:D8:2A:14:32:D2:8A:B2:D7:DC:51:10:59:36:08:26:5E
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a60eded-a7e8-4c0f-b13c-d04bb244a35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:70:9a:44:ba:d6:33:31:89:42:0f:61:54:06:57:7f:7f:
         64:ef:09:f6:0c:2a:02:0b:59:cd:3c:da:f2:55:0f:bb:89:61:
         83:22:63:ec:e6:56:7b:8b:9c:cf:e0:19:4a:81:dd:76:ef:15:
         f0:df:a1:63:19:81:31:d0:e8:47:75:eb:66:b7:30:c1:fc:7a:
         bd:f2:ac:57:f0:4d:9a:32:7e:3c:df:52:fa:a7:c3:ce:06:dc:
         e0:51:c2:11:81:a8:27:ab:03:29:23:c0:0f:f1:28:10:b5:55:
         f0:88:a5:6a:24:8c:61:fa:ca:44:51:db:83:fc:ab:73:b2:1b:
         83:a4:17:3d:a1:47:59:9e:21:e1:3a:94:17:89:77:5a:f9:c4:
         0d:42:e5:8a:80:97:ad:4e:a6:00:5b:ed:7d:06:2e:c8:7f:2b:
         fe:83:1b:97:d7:f0:08:f3:42:b2:bf:38:fd:0d:43:56:85:7f:
         02:75:9c:37:a3:40:6f:b1:55:83:9e:f4:ea:c4:6f:9f:e4:26:
         69:8f:7f:bb:cb:fa:c9:54:3e:78:11:a1:95:4f:6c:d9:56:3f:
         8b:c1:bb:74:a6:51:d5:65:52:64:b8:88:a3:8e:12:31:92:86:
         aa:f7:6d:24:0d:75:fb:3b:bf:12:22:58:9f:ce:5f:70:74:e8:
         76:bc:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:48 2024 by rpki-client on console-ams.rpki-client.org