Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b9e3099-082c-46cc-bb55-b8cacf55412c.roa
File:                     0b9e3099-082c-46cc-bb55-b8cacf55412c.roa (raw, json)
Hash identifier:          t9871Nibud15GP/OAjUa6/+7QtwfPnhVuwTuly9UNSQ=
Subject key identifier:   32:73:EC:8F:59:45:75:BC:49:3E:90:FE:D6:A8:68:7F:99:74:C0:7E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       26D5BC7BE083EC0ADDA36D22F125F05E549AA6D8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b9e3099-082c-46cc-bb55-b8cacf55412c.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d5:bc:7b:e0:83:ec:0a:dd:a3:6d:22:f1:25:f0:5e:54:9a:a6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=e2b5dcdee99277959f6963312a212814c1dc731f3b66f97087cbe6eb53da2520, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:20:7b:b8:3a:e5:b0:75:38:80:54:db:ff:
                    8c:fb:24:0c:ab:3e:9b:e6:38:60:ca:b5:b9:b0:57:
                    aa:32:38:7d:91:9f:cc:82:5a:71:f3:61:83:26:26:
                    f5:c7:1d:fd:0e:0c:cb:9b:1e:a0:1f:6f:0c:b9:16:
                    59:d9:72:08:0a:bb:64:cd:88:f8:5a:bc:a0:d1:d3:
                    86:3c:3f:79:6c:27:76:24:a8:26:2b:e5:97:f1:85:
                    82:bf:f8:c9:80:37:a6:ed:54:43:d9:0f:fc:b9:f3:
                    c5:0b:37:e0:28:42:56:4a:6f:8c:bd:5a:7c:1e:2d:
                    13:da:65:f0:15:bb:5a:68:b0:6f:64:5d:2e:a4:cf:
                    79:69:73:e3:fe:3d:22:91:ef:d4:69:84:e5:47:69:
                    1b:cd:c4:5b:04:74:81:83:0d:fa:18:ef:64:47:1b:
                    53:8f:74:06:33:cb:e2:b6:eb:0a:ad:4b:93:c6:8f:
                    00:76:37:2b:ee:c7:a7:54:2c:4a:00:a8:6e:4d:98:
                    c3:06:bd:a4:f8:ad:9a:38:c5:12:55:24:26:89:d5:
                    a2:03:eb:f5:83:b8:3d:47:72:70:8e:08:bf:89:25:
                    10:01:6e:b6:d4:16:31:25:e6:15:ba:95:f9:92:b9:
                    e5:af:85:ac:11:ab:71:f3:fb:d8:39:29:f8:07:6a:
                    e5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:73:EC:8F:59:45:75:BC:49:3E:90:FE:D6:A8:68:7F:99:74:C0:7E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b9e3099-082c-46cc-bb55-b8cacf55412c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:ed:0c:48:6b:44:3c:c3:55:af:9e:33:7f:59:27:75:9d:a9:
         6d:f9:ab:9e:da:d7:37:fb:d3:c2:7e:a5:63:6f:ad:44:63:1d:
         8e:84:14:fa:1c:57:e5:17:6b:02:a9:9a:7b:1e:38:d7:42:53:
         3f:d5:06:d4:29:63:1b:aa:dc:70:b9:94:1b:de:a7:7a:b6:ef:
         a5:b4:7d:63:7d:34:9d:f2:93:2d:48:07:ea:fa:79:45:c6:f9:
         0b:60:49:f6:74:85:0f:6e:a7:a9:fa:00:9e:ca:c0:e6:5c:f6:
         e7:1e:76:d7:51:46:ef:24:f5:16:f7:98:d1:e5:4c:1f:e5:ad:
         e2:c8:b3:1f:fd:9a:11:db:5d:6d:6b:26:3f:ad:8a:75:82:7e:
         a2:79:0a:d5:b2:6a:58:7b:34:8c:91:f4:77:62:c9:1c:bd:86:
         78:a5:ef:d7:3b:3b:89:c3:32:9d:c3:63:d7:ac:27:12:b3:de:
         4a:a1:73:62:0e:56:ff:18:7b:f5:71:28:b0:19:89:40:ab:a7:
         dd:8a:28:f7:c0:42:f7:dd:56:97:4d:88:e6:f1:9a:a4:0d:77:
         e0:f2:44:a3:3c:a8:0b:29:07:79:64:88:f4:a3:0d:1b:73:1b:
         88:79:24:7b:5f:6b:56:62:80:f1:37:23:d2:f0:a5:13:39:27:
         fc:0b:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:15:21 2024 by rpki-client on console-fra.rpki-client.org