Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5445d11e-52a9-4731-8647-9a8be823a511.roa
File:                     5445d11e-52a9-4731-8647-9a8be823a511.roa (raw, json)
Hash identifier:          cmOYErFA1mOONioTTM/NeIXcKXMS+z6G+DYNGU9HOzU=
Subject key identifier:   76:3B:21:4A:6B:BD:C8:3F:EC:C0:39:1B:A0:81:6C:37:32:18:F4:DD
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       78BE12E35BCEFBFFF472A184E2808CA2BF713092
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5445d11e-52a9-4731-8647-9a8be823a511.roa
Signing time:             Mon 11 Nov 2024 00:00:00 +0000
ROA not before:           Mon 11 Nov 2024 00:00:00 +0000
ROA not after:            Mon 16 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.246.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:be:12:e3:5b:ce:fb:ff:f4:72:a1:84:e2:80:8c:a2:bf:71:30:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 11 00:00:00 2024 GMT
            Not After : Dec 16 23:59:59 2024 GMT
        Subject: serialNumber=899a2546136a907c0d504c7ee83dda907fdb69b2e6fbea474ea54376e31c4c25, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:56:28:5a:93:f9:ab:d7:f8:22:42:17:28:
                    c9:35:1d:50:b8:ef:49:1d:ed:cf:36:e4:8f:8a:a7:
                    83:3e:8f:e8:75:f6:d4:49:89:12:e3:f4:f1:5e:bf:
                    ce:7c:c1:fb:30:c0:f2:36:81:6c:99:bd:4a:98:ff:
                    98:03:5d:29:ec:62:a5:17:db:e9:0d:c1:76:34:49:
                    ee:23:2d:45:74:f1:ac:8a:27:0d:e3:74:e0:9b:fd:
                    35:e1:22:ae:0e:ed:b0:e2:43:0d:64:2f:11:8a:b9:
                    f1:cc:99:a9:0e:5c:9a:7f:f6:4d:16:50:ee:f1:69:
                    5d:55:29:a4:6d:65:5a:3e:64:56:89:1d:b4:d5:13:
                    51:ee:97:69:27:b6:42:2b:88:4d:17:27:6b:7e:40:
                    49:8c:40:8e:35:ec:17:b9:a3:93:19:00:89:90:b3:
                    bf:52:d9:d2:a7:2f:06:bf:7f:0a:ad:c6:a6:35:e5:
                    93:88:7c:8f:ed:43:a4:79:71:f7:fe:4c:57:4f:b4:
                    07:ea:4a:32:88:0c:1a:ca:dc:f9:fd:df:75:9b:6d:
                    1b:19:2b:4a:e5:f3:09:9e:70:a0:ec:25:45:76:2c:
                    20:0c:b2:cc:b9:a0:2d:01:d1:2e:fd:b6:e4:e4:b6:
                    44:82:94:73:bb:94:0d:38:cb:db:b3:5d:ed:a1:a5:
                    58:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3B:21:4A:6B:BD:C8:3F:EC:C0:39:1B:A0:81:6C:37:32:18:F4:DD
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5445d11e-52a9-4731-8647-9a8be823a511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ab:4d:6d:61:bc:47:8a:b4:c7:c1:64:35:ff:02:75:96:a1:
         a6:f1:60:2b:e5:13:d4:26:81:3a:b2:e8:23:48:09:a7:5e:b5:
         b9:f1:71:62:34:d3:02:87:67:3b:83:6b:8e:ca:bf:94:23:6b:
         d0:fb:f4:97:3c:6a:9b:86:2e:b4:0c:30:2a:fa:eb:8b:42:1e:
         f0:ab:52:f7:c2:bc:5e:c2:ac:f5:8c:93:47:c8:05:61:f1:5b:
         62:ad:91:4b:cb:bd:b4:7c:7b:17:2a:b0:54:b5:f1:e2:21:43:
         1f:6d:6a:85:1e:2e:1d:55:d9:6f:7c:3f:b9:7c:59:c3:e8:bc:
         b8:3a:22:38:ad:d6:12:7e:a7:38:e6:d3:c7:63:b8:15:9e:d3:
         69:c3:ef:67:52:4f:69:51:49:05:27:33:43:30:e6:1f:4c:4c:
         80:a8:4a:23:22:10:6d:15:23:0a:d9:08:2e:61:d9:d8:47:1f:
         8c:95:5f:7e:c1:00:44:9e:c5:7c:6f:b7:d1:68:f7:cc:c4:1d:
         d3:00:59:35:76:2e:b9:f3:f7:1c:bd:3f:56:f9:bd:01:07:bb:
         a9:f2:eb:fa:b6:06:9e:a8:94:4b:84:a7:78:32:2a:59:7d:35:
         6f:65:69:0f:ed:a5:94:67:45:02:94:92:f1:0d:ae:cf:c6:ae:
         a8:7e:29:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:32:37 2024 by rpki-client on console-ams.rpki-client.org