Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa
File:                     dda383dc-2bda-4b83-8178-05fa6ae6d942.roa (raw, json)
Hash identifier:          ZdEHcp3XSDWpaSda6TxXVTCRe/PQ+3PMmemBrVoIKZE=
Subject key identifier:   31:70:31:80:B3:CD:CB:17:B8:63:EA:4B:CE:F8:FE:9B:F6:36:9F:0B
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       06487822ACA73327343DF5E69B6CFDD7529D5127
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa
Signing time:             Mon 11 Nov 2024 00:00:00 +0000
ROA not before:           Mon 11 Nov 2024 00:00:00 +0000
ROA not after:            Mon 16 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:48:78:22:ac:a7:33:27:34:3d:f5:e6:9b:6c:fd:d7:52:9d:51:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 11 00:00:00 2024 GMT
            Not After : Dec 16 23:59:59 2024 GMT
        Subject: serialNumber=b327c62023d7b58c10dacb6e36b5b87130fc593feaf2cd07228e34105e42e396, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:49:91:e4:a5:e9:84:b3:c5:6e:85:6d:e4:
                    a1:68:e9:75:ab:3b:e8:ef:37:15:28:5b:0c:46:5b:
                    01:4e:dd:c1:35:ea:6b:fd:18:36:cb:9b:4c:da:b2:
                    74:fa:66:99:82:e6:35:eb:27:05:c5:8a:47:0c:d5:
                    fc:63:56:41:c3:77:6c:ea:86:be:21:71:41:26:34:
                    4b:fd:4b:9e:06:e3:6f:f6:42:77:f3:ce:03:4a:8f:
                    54:8b:f8:ab:a2:34:a2:28:e6:e4:60:ab:be:4f:a4:
                    77:05:79:ca:87:83:4c:33:21:3b:07:26:fc:ef:b9:
                    43:63:3e:6a:f2:88:d2:9b:53:76:3f:13:c1:f2:50:
                    9b:b3:15:34:27:b1:5a:e0:fc:f7:14:ba:7d:f6:74:
                    d6:c8:37:9c:71:6c:3a:f2:88:ca:a9:25:a7:82:c4:
                    f9:fd:65:da:21:ec:c5:9d:25:5e:3c:41:56:a1:80:
                    e9:87:98:6c:47:1f:77:ad:f0:3e:d5:7d:be:6d:6c:
                    8a:f1:3d:19:dd:5b:df:e4:05:8c:80:8d:e3:00:08:
                    3a:de:c4:70:f9:b7:d3:d7:81:a8:c9:d5:5b:84:69:
                    5e:fd:36:f0:cf:24:90:ea:fd:4e:52:d2:25:4a:72:
                    01:7c:06:ef:9b:df:94:1c:4f:de:cd:6b:ec:dc:f6:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:70:31:80:B3:CD:CB:17:B8:63:EA:4B:CE:F8:FE:9B:F6:36:9F:0B
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:31:35:4b:ba:46:31:45:85:18:58:57:89:bf:b2:ee:e9:80:
         11:29:54:c0:8e:6d:0b:2d:30:c2:1e:7e:42:3f:3c:74:1a:8a:
         ec:37:4c:24:ab:a8:51:5e:85:a6:c6:64:b2:66:9c:9f:3d:c6:
         bf:7c:0f:df:28:70:ce:a5:94:b3:ba:c0:09:e1:1a:69:38:d4:
         e6:cd:ed:4d:df:a2:38:63:3f:98:e8:0c:b8:37:3e:40:5a:1f:
         38:17:5d:87:76:6a:d5:68:b4:ba:b5:d0:9f:71:85:30:c2:16:
         5d:0b:fe:5d:5e:9e:95:0c:78:32:8e:29:06:df:4d:ec:d3:d0:
         5c:c2:7a:82:79:9f:89:94:15:26:60:0a:66:75:41:69:e8:f1:
         87:12:7f:c4:f5:98:27:26:60:2b:1b:56:da:c8:af:3b:47:90:
         df:73:de:73:35:69:e0:f2:92:4c:0f:53:52:7b:3d:a8:a5:05:
         53:77:a6:8a:05:6f:f9:45:b4:51:e5:2b:51:5e:62:21:24:ba:
         a9:c2:49:18:fe:6e:01:b6:ee:6f:e1:3b:1a:4e:de:3e:fc:4e:
         2f:14:a2:60:51:ef:8e:f1:cb:ad:6b:92:04:2a:49:f6:1d:b8:
         a6:8f:b1:03:00:db:ea:8d:6b:5f:c4:f5:b1:9d:ec:81:f3:12:
         6e:4d:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:38 2024 by rpki-client on console-ams.rpki-client.org