Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa
File:                     6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa (raw, json)
Hash identifier:          UZp91K8UNXlltPBmopAXBdntwFuKmMRuLTmnUloDoH0=
Subject key identifier:   B9:D6:C7:2B:6A:7F:40:53:40:97:A0:A8:B6:5C:0D:86:FA:B9:C7:51
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       1C5E37837F4E313D1A1EBF2C30F4CA6BDDBCE69E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa
Signing time:             Mon 26 Aug 2024 00:00:00 +0000
ROA not before:           Mon 26 Aug 2024 00:00:00 +0000
ROA not after:            Mon 30 Sep 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        206.55.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5e:37:83:7f:4e:31:3d:1a:1e:bf:2c:30:f4:ca:6b:dd:bc:e6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Aug 26 00:00:00 2024 GMT
            Not After : Sep 30 23:59:59 2024 GMT
        Subject: serialNumber=2cc7f87975baf0c5b0974a7e0698624aac3abffd7dddcae40007357798742a8f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:1e:09:3e:13:36:84:d1:bb:05:8d:fc:e5:
                    5a:d0:82:59:04:0b:ca:ef:dd:cd:f2:a7:34:55:4c:
                    bf:0a:b5:3f:61:4b:47:6c:e2:ae:90:94:29:cb:12:
                    1c:57:55:7e:43:07:e8:ed:ea:0b:ca:78:e5:9a:ee:
                    97:90:c4:98:37:a8:ce:cb:bc:ee:ba:97:e8:4c:81:
                    f1:b9:73:57:94:8e:9e:8b:54:5a:60:27:54:85:8a:
                    d3:0b:c3:ad:e1:f4:20:bd:55:fb:d0:db:2d:6f:77:
                    9a:a4:1d:8c:80:7f:cd:fd:4c:e7:a8:96:73:c0:51:
                    28:56:d9:5b:a7:0f:fe:d0:6f:75:e7:c4:d9:3c:68:
                    6d:2a:3e:30:6f:2b:12:57:fb:ff:88:73:ab:37:d1:
                    58:46:14:b1:c5:89:53:8e:10:ad:5b:c6:0a:01:7b:
                    8e:d2:ab:91:74:49:18:33:89:08:b6:c3:6a:e5:0c:
                    1f:10:43:39:52:61:8c:ef:24:bc:41:8f:27:32:3f:
                    49:9d:30:73:c4:ef:04:0f:9a:dc:d5:7c:54:52:df:
                    ff:97:c8:ab:8b:14:3e:11:78:1b:42:4c:c0:a8:b8:
                    e0:c3:57:e8:51:ec:03:85:9b:69:a0:69:d7:7b:ed:
                    7c:b1:60:a0:00:7c:23:88:7d:f6:6d:78:72:c6:5a:
                    ce:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D6:C7:2B:6A:7F:40:53:40:97:A0:A8:B6:5C:0D:86:FA:B9:C7:51
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:b0:80:c0:a0:15:ac:5d:e4:aa:b0:1c:59:58:9e:b8:ad:8e:
         23:47:c6:2b:c3:5b:9a:67:42:cb:39:dd:e2:ce:ea:ab:0b:47:
         76:7b:49:8a:93:c0:a0:4d:e4:af:5a:fc:99:78:d3:fe:4b:79:
         27:cd:5e:8e:27:1b:d7:c5:a5:a0:bf:c0:bd:7c:49:95:05:6d:
         32:ad:c1:4e:ec:ad:1b:4f:40:55:d8:5e:a2:3c:eb:3d:5c:06:
         12:4b:6a:54:b0:d1:b2:20:8c:d7:0e:4f:8c:90:c0:8b:08:f6:
         44:dd:b6:a8:f9:2d:93:db:c9:24:ca:d5:90:aa:01:36:ca:9a:
         19:8c:af:2e:95:b1:e3:cc:0a:fa:17:df:d6:69:42:44:d9:33:
         ac:c0:3b:3a:60:fc:b5:b2:ca:5d:c0:88:f8:c5:36:7f:f4:53:
         59:3e:5b:fe:b4:6a:6f:4c:36:cf:f2:31:b7:c2:af:0c:76:b7:
         24:22:b3:57:95:d3:96:e2:55:35:31:9b:c1:42:61:97:0d:38:
         f0:53:41:39:8e:3c:35:90:bc:b8:8f:fb:fd:d6:24:a6:e1:be:
         4b:75:e7:ea:7d:d4:72:0a:2d:0f:42:1c:66:0f:3f:b9:17:f2:
         5c:1e:01:5d:7d:df:21:0c:9e:30:ee:48:fd:d5:dc:e0:c3:65:
         29:7a:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:44 2024 by rpki-client on console-fra.rpki-client.org