Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d0c428d4-96a3-4df6-b260-bb2067e0ac20.roa
File:                     d0c428d4-96a3-4df6-b260-bb2067e0ac20.roa (raw, json)
Hash identifier:          zJhReiTXDms23VWD7Wp7Jl5bZeJSL80hZ70igW9PVHY=
Subject key identifier:   BA:7F:EE:6D:DD:21:CC:76:1C:36:25:23:2C:9E:4B:95:50:F1:C4:42
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       788779D39F9692D1E79240DCAD31CE3A2B34BE09
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d0c428d4-96a3-4df6-b260-bb2067e0ac20.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:87:79:d3:9f:96:92:d1:e7:92:40:dc:ad:31:ce:3a:2b:34:be:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=d7866f68ef8a00c5146fa8267f9289106bc95736439b9204656bce7fec87e980, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d9:83:9a:10:b1:1e:31:13:8c:0a:66:37:dd:
                    e8:c2:af:2a:8d:d1:52:bd:2f:78:cc:2d:63:86:69:
                    1b:e0:d7:ec:fb:e6:01:02:cc:d8:b7:e7:55:9a:22:
                    08:7a:6e:fe:61:a7:e4:64:20:44:7b:f0:49:31:ad:
                    86:1b:b4:ed:50:66:f6:50:93:94:2a:d4:8e:1f:2a:
                    e5:f5:a4:d7:23:d8:25:20:4f:8f:49:0e:be:a5:c7:
                    23:b4:b8:17:dd:17:7b:e7:b1:e4:ab:92:18:35:26:
                    73:89:ef:93:21:21:f9:72:90:9d:e0:e0:67:e5:7e:
                    27:04:16:4c:64:e7:bf:2b:20:bf:0a:46:fa:e9:ca:
                    0d:9c:20:e4:b8:59:30:77:83:62:2c:4a:6e:31:b7:
                    29:70:48:17:d7:07:e1:20:3d:07:a5:3e:da:0d:ac:
                    1b:cc:fd:bc:2b:28:64:5d:0f:00:c8:34:1a:16:27:
                    e4:75:38:70:02:58:3f:f6:83:2f:cf:ac:75:6c:3a:
                    59:0d:cf:e9:02:7a:a4:93:8d:1f:f4:be:d1:89:f2:
                    81:87:ae:72:ac:ea:eb:4a:6c:57:b0:7d:52:4e:56:
                    1a:4e:64:bb:dd:73:4d:ae:0b:f6:dd:d3:73:aa:4c:
                    54:70:0d:13:a2:cd:0b:a5:20:80:3c:b1:2c:f7:5a:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7F:EE:6D:DD:21:CC:76:1C:36:25:23:2C:9E:4B:95:50:F1:C4:42
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d0c428d4-96a3-4df6-b260-bb2067e0ac20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:cc:99:1f:7e:50:71:78:98:97:7b:e0:af:75:b7:0f:6b:
         9d:b6:19:5f:72:25:88:a2:c3:cd:13:c8:4c:a2:27:02:a4:8c:
         8d:6c:da:7c:be:07:c1:e1:9a:e6:19:9e:81:3e:46:9e:7d:da:
         bb:ed:e5:c7:9c:4e:21:e1:09:52:8c:ed:ed:8f:1a:8e:5f:34:
         06:87:62:34:dc:91:5d:54:59:15:46:eb:74:d7:57:11:46:17:
         d5:22:1e:03:d1:f1:2e:2a:99:56:7f:ca:52:74:d0:24:65:e8:
         23:63:e8:51:1a:49:3b:c1:c5:ef:f4:ce:e2:1e:26:eb:1d:51:
         6a:16:93:ba:4c:d2:23:0d:b4:30:1e:49:0a:51:f6:9e:1f:14:
         e1:48:58:82:f1:86:f0:f0:e9:64:18:3a:46:17:e5:46:f4:1c:
         6c:f3:12:35:46:76:bd:b6:c4:22:74:8a:f8:25:06:c1:67:b4:
         90:7b:83:e9:e3:13:33:9a:f4:9d:08:f8:9b:5d:8a:d4:fc:5b:
         bc:75:17:95:82:96:b3:b7:54:5b:85:7f:43:4a:6a:cc:fe:5d:
         da:05:92:a1:f7:02:0e:44:e5:40:32:a7:3e:df:c6:34:de:fe:
         a1:b6:ba:4c:26:14:88:1a:e8:d7:53:de:0d:53:2f:24:15:14:
         be:8e:52:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:49 2024 by rpki-client on console-ams.rpki-client.org