Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa
File:                     84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa (raw, json)
Hash identifier:          iT6RyXnBWWqNi4G2YUqetSqNrNk6pfrPqs/YlUICDa8=
Subject key identifier:   3A:73:6A:A7:C5:7E:35:A0:E0:A2:E8:EC:82:C8:93:EE:47:9B:C5:5A
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       518D9DE38D49F516947908D159DF5E613AFAACE7
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa
Signing time:             Mon 11 Nov 2024 00:00:00 +0000
ROA not before:           Mon 11 Nov 2024 00:00:00 +0000
ROA not after:            Mon 16 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8d:9d:e3:8d:49:f5:16:94:79:08:d1:59:df:5e:61:3a:fa:ac:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 11 00:00:00 2024 GMT
            Not After : Dec 16 23:59:59 2024 GMT
        Subject: serialNumber=cf06ee7abb3d8751ba577db7f5dfa758b48052b290645ee7ee9778ecf04ccffc, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:e7:5f:69:9c:bd:a3:14:cb:17:1b:4c:e2:
                    c0:f5:4b:29:0a:7d:f8:68:b0:a4:53:f5:03:37:13:
                    15:7b:3f:4b:0c:73:86:30:e9:2d:c2:71:8e:ea:5d:
                    4e:15:01:d3:87:cb:ac:9c:db:f9:c9:4b:87:68:61:
                    c4:b2:c3:1f:a7:53:59:4d:f6:8d:93:6f:2a:fd:69:
                    0c:7d:23:53:3b:bc:ef:2d:21:56:54:45:8d:af:bd:
                    7f:dc:b9:1b:f7:16:af:39:36:8c:0a:60:a7:d7:41:
                    23:41:68:f1:00:62:5f:2c:2b:55:95:c3:07:2a:3f:
                    80:98:62:c3:20:ec:e7:72:94:f4:13:4f:d9:60:87:
                    3a:47:d3:b2:52:ba:8d:39:00:89:69:cf:ac:d9:dd:
                    64:1f:d1:71:ae:8a:23:df:32:76:a5:ff:a7:9f:19:
                    37:53:f5:4e:6d:2e:2a:8a:9d:c5:3b:c6:ef:fc:a9:
                    5d:3a:d5:9b:b3:10:ee:cf:4d:27:7b:ca:15:6e:e6:
                    d6:fe:d9:aa:1f:40:92:ae:c9:d1:b7:2e:88:f7:2f:
                    89:62:c0:fd:b7:34:6d:63:ea:17:8a:b0:94:2d:e1:
                    4e:09:a8:f2:40:7b:70:a4:37:e5:63:fe:ec:de:7d:
                    d6:27:82:56:21:3f:52:cc:0b:ae:c8:fd:97:ad:f0:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:73:6A:A7:C5:7E:35:A0:E0:A2:E8:EC:82:C8:93:EE:47:9B:C5:5A
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:65:da:43:78:09:5e:aa:1a:84:3e:e7:ba:9f:22:ec:e8:
         9b:86:76:a8:63:dd:68:88:e2:8e:62:70:64:84:7c:a5:73:43:
         b4:74:fe:21:0c:22:87:f5:42:0a:6d:1f:fb:67:3d:f1:22:22:
         d3:32:31:96:5d:55:96:61:7a:19:69:02:33:3a:0a:05:10:e4:
         1b:70:50:73:ac:c3:25:d2:fb:b4:a4:22:19:ed:36:1e:af:1d:
         d1:38:fe:c9:bf:83:79:11:6c:21:3e:c5:20:e3:90:2d:ea:37:
         d7:0b:0e:99:45:32:da:81:10:02:b4:3c:da:ad:ab:3d:4a:86:
         74:ba:38:b9:f7:c5:aa:10:b2:b8:44:9b:50:cb:59:17:bc:c2:
         1d:58:98:e9:92:12:80:a0:da:2e:11:31:d3:df:d0:8b:be:77:
         b9:9b:b2:c1:04:bb:98:dc:4d:82:92:9a:e7:e5:54:57:57:00:
         04:25:43:88:26:e8:80:6b:68:49:37:53:87:ae:57:54:8b:70:
         e1:b7:43:05:33:6f:60:fa:1c:27:f1:a2:78:05:6a:b8:8f:c9:
         5e:f8:f9:15:d0:52:e7:d0:16:31:cf:b5:ee:7e:41:77:c7:87:
         f8:43:e6:0b:42:dc:71:04:12:1b:94:0c:d6:d4:8f:b9:1d:65:
         11:36:fd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:38 2024 by rpki-client on console-ams.rpki-client.org