Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa
File:                     99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa (raw, json)
Hash identifier:          HQKX11qzHobZryAxuRTZ/cr6Dd+nvyTvwJtgu2sFEPQ=
Subject key identifier:   51:C4:9C:8F:36:44:61:D7:FA:62:B9:D8:05:D6:0C:49:11:C5:38:01
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       4F5CAC1749A4514E7E96260B3706A99BEA14D8F9
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa
Signing time:             Tue 27 Aug 2024 00:00:00 +0000
ROA not before:           Tue 27 Aug 2024 00:00:00 +0000
ROA not after:            Tue 01 Oct 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5c:ac:17:49:a4:51:4e:7e:96:26:0b:37:06:a9:9b:ea:14:d8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Aug 27 00:00:00 2024 GMT
            Not After : Oct  1 23:59:59 2024 GMT
        Subject: serialNumber=83597dcd7858d934b042e2ffa72aca59a5bcee21720c0963bca5dd9532413b36, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:02:f7:ca:8f:4b:cc:56:88:38:ed:32:13:
                    71:3e:07:47:cc:03:b4:ce:82:03:87:f4:8d:47:30:
                    34:30:cc:a8:7a:55:2b:f9:c6:c8:da:32:19:df:ff:
                    bb:02:aa:cd:01:16:a7:c4:0d:be:81:5b:d0:47:e7:
                    85:4f:b9:cb:a8:75:22:c7:65:ee:7b:4f:0c:d0:4e:
                    8f:06:1a:f7:f1:f9:76:47:0f:d0:01:88:fe:f8:cc:
                    38:c6:eb:b0:26:c2:e4:a2:9f:bc:05:34:1f:7d:d7:
                    22:a5:c4:2f:55:9a:c6:c7:8f:7c:67:0d:7d:dc:a0:
                    f5:4e:94:2e:6c:f0:0d:24:85:ff:92:6b:83:13:56:
                    0c:95:6c:8d:9e:91:1a:d5:92:14:33:97:85:a7:0b:
                    45:ce:a5:51:8b:35:cc:c4:e7:99:7f:3a:32:fa:9c:
                    0f:54:32:9d:04:60:6c:c9:5f:7c:2a:2d:47:d2:f8:
                    31:ed:24:6d:a1:46:c5:81:3b:41:9a:d5:b6:96:a6:
                    33:63:56:80:fa:3f:2e:9a:0b:26:5e:7f:ac:cc:17:
                    2d:ad:1f:13:33:d9:4a:e4:ff:08:e7:fd:45:1c:30:
                    cd:1a:74:bd:d8:01:e9:00:0b:df:f0:41:fd:3a:3c:
                    44:c3:dd:0c:85:e1:e0:92:db:b8:37:52:1d:37:b7:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C4:9C:8F:36:44:61:D7:FA:62:B9:D8:05:D6:0C:49:11:C5:38:01
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ff:a2:00:2a:f0:79:97:97:ee:65:66:61:35:33:fa:c7:a9:
         a8:cd:c0:96:f5:09:1a:69:f6:ab:55:11:cd:38:35:31:c0:31:
         05:d5:96:0b:65:32:dd:9b:96:6c:51:d8:65:25:16:04:09:8b:
         c2:7b:45:03:b5:47:ce:1e:dc:61:fc:20:be:f5:4d:ee:73:32:
         58:34:ee:66:53:83:4d:51:1e:75:7f:e7:7f:2d:38:be:20:38:
         53:58:f2:18:70:61:d9:46:f2:0f:24:fe:83:9f:4a:cc:3f:c1:
         89:6c:e2:b9:1b:85:48:8d:f9:6b:7a:bc:6d:71:0a:e0:bc:d2:
         40:ed:82:c8:9b:02:5f:53:9e:a5:60:ae:ca:46:21:65:b5:64:
         de:6f:5c:fa:ee:10:c0:c3:7a:b0:0e:18:b1:90:28:c8:2a:a9:
         cc:fd:24:02:02:29:e4:95:e2:fc:56:33:c8:b2:e4:83:74:a2:
         b4:ee:fd:be:ef:02:75:9f:48:83:c8:30:01:10:f3:ed:9f:ce:
         fd:a4:99:c2:71:e9:29:e2:37:db:88:e9:64:5e:2f:26:54:c2:
         19:7e:01:68:d9:e6:56:91:4b:50:29:cb:d6:ec:ee:29:55:15:
         e4:4f:7d:bd:4d:ee:5b:e7:ed:ed:85:92:5c:88:4d:fc:32:e4:
         3a:2c:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:44 2024 by rpki-client on console-fra.rpki-client.org