Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3939e157-43dd-4f5b-8b28-c4dad173836c.roa
File:                     3939e157-43dd-4f5b-8b28-c4dad173836c.roa (raw, json)
Hash identifier:          DbdzRXaOux5HFX95gOwPWoVeL3kdyN1ACoeTW6fAdvg=
Subject key identifier:   8A:DC:01:85:EE:BD:BD:EC:1D:FE:D4:2D:7F:9E:03:A7:DC:06:36:B5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7E9772CFEF51AD2893D840FEA62C1E3CD596A830
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3939e157-43dd-4f5b-8b28-c4dad173836c.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        137.114.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:97:72:cf:ef:51:ad:28:93:d8:40:fe:a6:2c:1e:3c:d5:96:a8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=9532e8aed7d46d49f4a16670bfcb81f847736e88c6fd1dcac46252a97ea8baa9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0e:64:6b:5d:52:7f:61:ba:99:66:d9:35:e8:
                    1e:d6:0f:83:4c:5c:b7:74:6e:dc:89:0e:e7:03:67:
                    10:c0:a6:cf:1a:13:5a:ce:60:85:21:7f:eb:89:0a:
                    91:d9:6d:18:cd:f5:de:80:fd:b5:aa:ad:71:e1:6e:
                    9a:72:24:3b:c3:59:79:f4:7c:6f:e5:fd:c2:26:6f:
                    72:83:e1:ed:7e:77:cd:37:49:01:b9:83:26:d8:0a:
                    d5:2b:87:96:ef:18:25:2a:37:d8:11:2f:b0:78:65:
                    92:67:08:3c:62:a0:96:4c:a6:64:b8:2d:cb:89:57:
                    c3:79:fc:bd:53:53:e4:75:af:a4:7e:c8:00:6c:bc:
                    5f:1e:b8:64:bd:d2:55:1c:7f:2b:64:3d:a4:6d:14:
                    30:74:c7:fc:c9:5a:f6:11:9e:95:d3:26:cb:8e:6c:
                    f6:fd:f7:ed:3a:7d:65:4c:70:71:b3:02:37:3a:0b:
                    db:c1:b3:ac:d1:f8:fc:3c:8c:31:99:35:be:d4:ff:
                    e1:69:c4:d6:12:cc:c2:3a:92:4c:33:65:d4:0f:e4:
                    5d:23:7b:42:de:04:96:50:a9:fe:f7:c9:81:63:03:
                    a0:84:1a:1a:e1:5a:5b:47:6f:d8:6c:fa:ca:ce:7f:
                    0b:f2:c8:0b:55:70:8d:17:9e:03:5b:35:18:41:60:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DC:01:85:EE:BD:BD:EC:1D:FE:D4:2D:7F:9E:03:A7:DC:06:36:B5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3939e157-43dd-4f5b-8b28-c4dad173836c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.114.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:06:77:c6:8b:55:f5:49:bc:72:1a:ad:83:a7:7a:06:22:c9:
         23:e0:ad:e1:43:3c:a2:c0:7f:1c:67:74:66:1e:e7:da:1b:97:
         81:92:b0:7b:74:50:d6:ab:dd:79:ee:7a:b4:ee:d5:d9:29:b3:
         5f:34:d4:37:51:51:1e:0b:9d:99:65:ca:45:cd:fa:b5:de:48:
         0b:bd:de:95:91:53:f9:ee:6f:90:aa:68:3f:66:78:5d:c0:3c:
         fa:33:14:5e:a6:a3:0b:0e:17:e7:9b:8d:ed:ec:d2:7b:6e:42:
         23:5b:3c:e7:6f:e3:9c:a9:42:ce:8f:02:1a:d2:09:f3:60:b6:
         f1:06:e4:86:9a:a8:c9:49:3d:3e:af:7f:23:5c:f9:18:cd:86:
         6c:ef:d5:5d:81:56:6b:8c:56:c8:2e:38:49:46:6e:5b:23:80:
         36:c1:fd:59:86:76:e2:3d:59:a4:d3:bb:d1:bf:64:e6:fd:06:
         f3:4f:b8:33:1f:fe:b8:a8:44:f7:11:25:0f:bf:3d:ff:29:fe:
         23:fd:6a:f4:9c:c1:ff:39:1f:fd:88:95:ed:f5:76:95:af:d3:
         1e:5b:ad:d6:82:53:05:ac:f7:32:c6:df:b7:12:53:ab:1f:ab:
         11:33:98:29:46:11:ef:53:9e:60:87:dd:ee:76:eb:9d:8b:1c:
         a2:71:65:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:48 2024 by rpki-client on console-fra.rpki-client.org