Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a25ebeb-a76b-40f0-b54b-f12d9eebbc92.roa
File:                     4a25ebeb-a76b-40f0-b54b-f12d9eebbc92.roa (raw, json)
Hash identifier:          qy5sOzwI/jJHSE1/s/HGmQfpqHWmqfi84HlNS5XySvQ=
Subject key identifier:   4D:B5:9B:DC:84:04:98:E7:CA:41:79:B4:29:35:85:C4:1C:8B:75:85
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       579E5D25FCF9F644D7E2993AAF3FB9133F0BE30E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a25ebeb-a76b-40f0-b54b-f12d9eebbc92.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9e:5d:25:fc:f9:f6:44:d7:e2:99:3a:af:3f:b9:13:3f:0b:e3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=0a4e9193727968e35fdbcfee35752be7430333824b77e1c6fbf12fa4fb158db6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:87:e1:8d:51:a5:72:f2:b9:65:7f:f0:66:
                    10:22:c5:7b:86:9e:1e:8d:32:3d:40:89:35:c2:d3:
                    09:05:dd:ea:a3:e2:ad:ab:c3:a8:63:38:85:fb:c3:
                    65:55:73:b5:b7:d5:3b:67:8f:b2:bd:a8:7d:2c:f2:
                    47:f6:09:6a:88:12:1e:88:c7:58:0f:a0:ac:ca:4e:
                    6f:60:53:15:99:56:e9:12:c5:4e:85:93:f4:05:72:
                    fa:86:8e:a2:e9:aa:77:c0:2b:77:e5:cf:e5:c3:2f:
                    51:1a:eb:6d:94:8a:90:0e:9b:57:66:35:f9:ba:a2:
                    c7:22:15:e8:46:19:51:8e:f5:a8:44:c8:fa:7b:dc:
                    9c:c5:01:c6:dc:de:dc:26:3a:db:f7:d9:a9:b9:c9:
                    16:54:1f:4d:9e:85:76:5c:44:80:10:15:eb:78:01:
                    f2:27:a7:b2:d2:28:f5:00:b4:1f:a5:8e:ba:07:e4:
                    e4:6e:31:95:15:05:9a:b2:52:c5:7b:83:d1:38:c4:
                    40:26:32:b2:59:df:3a:25:5d:ba:4d:30:9d:aa:d2:
                    ad:fa:ce:3c:5b:39:7b:f3:9c:91:46:d6:b4:72:9f:
                    d5:53:4a:74:ed:e6:83:21:d7:ed:fe:04:0e:6d:7f:
                    5e:c2:ee:b6:f2:c2:b7:8f:04:6a:f0:38:38:64:2a:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B5:9B:DC:84:04:98:E7:CA:41:79:B4:29:35:85:C4:1C:8B:75:85
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a25ebeb-a76b-40f0-b54b-f12d9eebbc92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:32:07:39:d2:aa:60:47:42:16:1a:6b:d9:43:7a:64:ed:
         c9:91:c7:b2:15:2d:b9:1e:82:26:ba:15:39:80:64:2d:1c:79:
         39:80:21:4c:70:02:0a:51:ba:16:27:1f:c3:f2:96:33:52:3e:
         e8:95:bb:12:64:f2:ad:d6:b8:24:30:be:2f:c3:24:a5:1a:74:
         39:70:25:36:86:8a:ec:0b:6d:4a:59:e5:8b:a0:16:d5:b0:d8:
         11:06:d9:9c:e3:4f:e4:e3:a0:4f:15:06:f5:ba:27:89:87:a7:
         45:bd:b7:ed:4b:fe:80:e9:13:e0:1c:67:b0:93:d8:f8:fa:e8:
         a9:79:1c:cb:af:41:dd:db:97:79:96:10:6c:d3:6a:c3:64:3e:
         bb:2f:d8:d6:d8:40:d6:3c:ba:31:c4:d1:a5:75:45:6d:2b:7e:
         27:33:98:16:88:fc:df:08:1c:b7:34:dc:e0:3b:47:df:b3:cd:
         4e:c6:51:35:b9:05:d7:83:d3:09:18:b8:95:dc:8f:7b:78:ba:
         df:20:61:68:f6:e3:b0:17:d2:10:ed:04:b9:5e:6f:5c:12:a1:
         7f:00:f3:8d:e9:84:32:c0:01:8c:eb:48:ab:ed:a1:6e:be:fc:
         fe:e5:1f:6f:90:64:8f:62:65:78:45:c2:8f:8a:0b:e1:3e:ee:
         78:50:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:20 2024 by rpki-client on console-ams.rpki-client.org