Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37642206-b359-4f42-9b1d-0e4948a40e7a.roa
File:                     37642206-b359-4f42-9b1d-0e4948a40e7a.roa (raw, json)
Hash identifier:          mteuEJ/cdakZgKCnxPIWzLb8eViiFUS+BCKNnuO3Ugw=
Subject key identifier:   A0:91:D7:86:BC:27:C7:1B:29:B7:46:1B:3E:4D:F1:09:99:06:58:C8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       278B8E401344C1DA85B8E736662BF62EB2633C79
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37642206-b359-4f42-9b1d-0e4948a40e7a.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.9.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8b:8e:40:13:44:c1:da:85:b8:e7:36:66:2b:f6:2e:b2:63:3c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=0bf8ba17000577ca10fe968060f34772fa18021ca2feaa22898c2ade46b16050, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bb:b7:e8:8e:64:8e:f8:2e:9c:f5:b0:7e:76:
                    52:71:ed:b9:1b:9a:ef:f8:04:19:3a:36:16:3a:09:
                    a6:17:95:67:b8:4b:03:74:4d:f9:f5:99:24:6d:03:
                    b7:0f:75:ff:59:af:66:9e:fe:76:61:9b:1f:9a:37:
                    7e:7c:30:a4:72:ce:ef:64:db:51:e0:3d:04:8f:03:
                    71:03:1b:8c:40:61:bd:d4:2b:0c:7b:97:f5:b0:86:
                    d9:89:12:5c:21:56:4e:4b:68:87:b6:28:dd:2c:7d:
                    38:58:ba:45:0b:63:10:d2:6b:86:81:8f:d8:e0:c1:
                    5e:63:53:48:66:f1:9c:88:1a:f6:39:33:0f:0a:80:
                    4c:5c:bd:18:76:b2:51:9e:79:74:3e:c6:9d:e6:be:
                    bf:87:e6:b4:db:50:e9:9d:c6:c0:de:59:f8:e6:95:
                    6e:23:05:ce:b9:df:9a:fb:68:13:0a:68:b6:66:a7:
                    3b:49:dc:70:3a:4e:06:40:b2:50:45:b9:51:05:f3:
                    7e:ac:6f:64:ab:ce:87:05:31:c5:8d:66:e0:6d:6a:
                    7f:f5:01:74:25:4a:ad:94:c3:a1:66:b0:2a:42:4f:
                    06:21:6c:c1:34:1d:12:ff:02:d1:95:ab:87:b3:c6:
                    13:83:5f:3b:04:f5:74:02:a4:82:51:29:3f:80:2a:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:91:D7:86:BC:27:C7:1B:29:B7:46:1B:3E:4D:F1:09:99:06:58:C8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37642206-b359-4f42-9b1d-0e4948a40e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.9.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:57:bb:d6:17:3f:a9:5d:ee:49:3f:6c:9d:90:1b:fd:d8:6c:
         ea:a4:09:6f:ef:f2:5f:1a:51:1f:c7:4c:4a:2e:cc:66:ea:46:
         98:c5:db:f5:ea:c2:3b:70:9f:cb:f9:9d:04:31:19:6b:70:e2:
         c4:7a:0b:14:94:7b:60:3f:b2:e7:bf:43:24:cd:81:62:b2:63:
         3b:6c:04:e1:d5:0d:8d:e4:11:99:34:d3:f6:31:e0:2c:18:8b:
         17:14:bf:da:fa:2c:15:a1:23:9b:d5:d1:e9:6e:6f:66:9c:59:
         06:ae:f4:4a:9f:af:6e:7d:6f:60:83:72:ae:f7:d4:41:b0:2a:
         4c:6e:72:59:a5:be:c6:b8:ce:af:92:1e:82:c7:62:a9:61:14:
         3e:1d:fc:63:ab:6c:44:87:4a:ac:ea:99:15:13:50:72:74:ba:
         ae:54:b0:f9:ce:66:33:2f:48:bd:41:45:67:fd:7a:a5:e8:e5:
         a5:ae:a8:9b:14:8b:68:8e:79:52:1b:56:42:25:97:06:ee:a2:
         fb:54:c9:5f:a5:3d:50:b2:0e:ab:5a:43:e0:79:ea:72:1b:55:
         54:37:04:a1:ad:f7:b6:f1:ce:4c:e8:4d:07:77:c8:45:05:67:
         a1:d0:77:4e:1a:3f:3e:a0:5a:15:34:a7:79:3b:70:b2:a0:c6:
         4f:6d:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:48 2024 by rpki-client on console-ams.rpki-client.org