Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/081b564f-a20d-4020-8e48-df23e862eaa0.roa
File:                     081b564f-a20d-4020-8e48-df23e862eaa0.roa (raw, json)
Hash identifier:          PKeXLIqs/Tzw4KOMLc7WsSzs0lGemdccy8gK3kckUAI=
Subject key identifier:   1E:13:F3:FC:3E:9D:89:DD:BB:A9:BE:3F:10:57:24:21:61:EC:33:A4
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       5A4E3E1C41AFA3546003F27A0203A3149DB50E36
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/081b564f-a20d-4020-8e48-df23e862eaa0.roa
Signing time:             Sat 09 Nov 2024 00:00:00 +0000
ROA not before:           Sat 09 Nov 2024 00:00:00 +0000
ROA not after:            Sat 14 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        216.221.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4e:3e:1c:41:af:a3:54:60:03:f2:7a:02:03:a3:14:9d:b5:0e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov  9 00:00:00 2024 GMT
            Not After : Dec 14 23:59:59 2024 GMT
        Subject: serialNumber=690d83a6e60c526b30a628dcd926a7e6d98ad1cddf1c94f23c01985dba358b26, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:d0:c6:30:97:37:5c:ec:10:b1:8c:5d:3e:
                    11:a6:5b:ba:1f:4e:58:09:17:de:d1:28:d2:fe:4d:
                    19:6c:21:ec:1c:42:ea:e2:9c:9f:f9:a0:ad:95:25:
                    f8:63:69:8b:62:ee:c6:86:68:11:1b:29:4f:14:72:
                    4f:93:fe:de:06:d2:c3:7b:1a:0c:5d:6d:bf:fd:c7:
                    1f:93:0f:52:d3:9b:12:59:55:64:a7:e5:49:d2:a3:
                    7d:25:20:f8:c5:17:67:58:13:6d:a0:52:fa:03:05:
                    71:9c:c2:7a:1b:b1:f1:45:68:d6:fb:f7:a7:d5:04:
                    48:01:c8:36:de:62:4b:f6:18:67:5b:aa:8c:24:f6:
                    56:55:1a:96:b9:53:e6:02:4a:c2:0f:fd:ca:7d:c2:
                    a0:29:bf:6b:c1:87:65:b2:8b:47:3a:82:49:18:6d:
                    a2:4d:13:5f:4e:f7:26:f8:e0:b1:8b:06:76:cd:3e:
                    14:70:29:e6:8e:9d:88:fe:ba:1c:7e:c4:92:16:a4:
                    41:fd:a5:85:25:28:ad:14:a2:8d:ed:71:6e:48:db:
                    cc:a4:a2:0f:30:84:51:60:33:69:4c:e9:2c:b7:3f:
                    c7:0b:21:26:aa:9e:4d:f5:e1:da:27:26:cc:06:d1:
                    d8:a1:13:c7:db:d1:05:1e:0d:28:b4:44:ca:16:65:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:F3:FC:3E:9D:89:DD:BB:A9:BE:3F:10:57:24:21:61:EC:33:A4
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/081b564f-a20d-4020-8e48-df23e862eaa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.221.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:f5:37:f0:0f:21:46:5e:f3:f7:9a:6e:ab:7d:22:0b:02:f7:
         3f:9a:77:94:e5:00:ca:0f:63:07:10:b9:1c:11:27:b7:7d:ec:
         c5:1f:8e:b5:fc:6d:49:43:f5:df:ac:d3:bb:f2:1e:11:61:01:
         16:b4:ac:bf:a5:96:c4:e4:01:ab:a0:10:d8:94:04:8c:cc:20:
         43:b1:9c:59:b0:73:94:63:18:6c:02:db:19:75:5b:e6:6b:8f:
         b8:a0:34:a8:6a:4a:3b:0d:1f:2d:04:c6:d0:4e:ae:7d:0d:e7:
         4b:6c:d8:38:56:c5:bf:87:93:51:bc:0d:4f:91:01:c7:35:c1:
         74:70:55:f7:90:85:cd:36:1e:7f:e3:e0:b8:c4:93:45:5c:56:
         4c:58:05:3d:7e:e2:05:2b:29:62:b3:2e:22:2f:37:5f:90:b0:
         72:03:03:0f:d8:a1:e2:9d:9c:1d:74:11:11:ef:c8:35:40:60:
         60:c2:63:ea:7a:94:5a:10:0a:64:bd:f4:db:10:0a:23:d1:90:
         6b:b8:64:7a:4e:a8:bc:9b:61:91:3d:60:a1:e2:7d:3a:ab:cf:
         1f:6d:0b:e4:c3:9f:50:6b:ea:54:0e:28:27:f2:79:99:2f:5c:
         22:e2:c4:1d:21:1e:c5:ee:52:d9:46:06:a9:d8:20:15:4b:37:
         14:3b:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:38 2024 by rpki-client on console-ams.rpki-client.org