Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/412dae85-acfd-4460-bb1f-3e3bb3e66241.roa
File:                     412dae85-acfd-4460-bb1f-3e3bb3e66241.roa (raw, json)
Hash identifier:          /cq5G6Pj2mfOIMGXij1VsQDuPFG9tIsC5DSXxh7icaU=
Subject key identifier:   92:30:B7:49:FF:D7:96:54:9F:69:81:50:F1:99:29:12:D4:F5:BC:8B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7AA92B38B58BB18E7042A479359F481640BECDA5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/412dae85-acfd-4460-bb1f-3e3bb3e66241.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        18.44.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a9:2b:38:b5:8b:b1:8e:70:42:a4:79:35:9f:48:16:40:be:cd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=f9320ad95a0889087e14c10b621c1ce6d7c49c098c2a0ffcb174c5dec148c413, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:3f:c4:a3:4e:cf:5d:8a:04:40:6c:bd:e3:
                    08:07:b7:bb:44:f2:0d:ea:45:85:0f:9f:21:c8:54:
                    42:c6:28:9e:42:fd:88:4f:91:70:ba:7d:37:fc:ad:
                    42:e3:87:ab:d2:e3:9e:8e:52:d3:0b:dc:7f:5e:61:
                    70:b4:0e:89:6e:fb:e7:8a:22:84:27:fa:ed:1a:60:
                    88:8f:b0:34:f4:88:74:34:c4:ad:5d:4d:df:d7:89:
                    31:81:90:da:1c:a1:d3:0c:0d:62:35:fb:79:d3:d4:
                    3f:37:ab:47:fa:e9:e0:a2:93:d9:cb:46:16:f9:74:
                    bd:30:58:dd:7a:a0:c3:f0:5a:0a:7b:fa:43:22:87:
                    59:a0:03:6b:29:74:fa:4f:ae:83:8a:7b:56:cb:51:
                    4d:6d:c6:af:54:a8:28:ed:bd:6a:9c:80:ae:2c:e1:
                    2b:12:b9:01:c5:1b:99:9b:ab:6e:87:ef:d9:15:af:
                    35:17:1e:39:6d:e4:e7:79:cb:c9:55:71:d7:61:6e:
                    af:3c:a4:43:10:31:da:55:b2:3a:0d:44:92:77:c7:
                    cf:48:e0:5d:a5:c4:ff:96:51:da:60:5c:a8:5e:74:
                    89:cc:f5:a7:ae:c6:f4:8f:b0:cb:d2:16:6d:57:95:
                    6e:8a:34:ef:9a:95:36:c6:3c:0f:f2:2c:ac:f0:8c:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:30:B7:49:FF:D7:96:54:9F:69:81:50:F1:99:29:12:D4:F5:BC:8B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/412dae85-acfd-4460-bb1f-3e3bb3e66241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.44.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:57:5c:5a:26:24:f3:8c:a0:34:0d:e0:6b:92:41:44:f7:b9:
         52:70:65:bf:a7:3a:43:10:1c:1d:95:00:c5:45:a6:8d:48:53:
         95:cc:c1:68:ed:e0:07:b4:5b:5e:54:7c:c9:69:11:eb:fe:ab:
         ea:1f:d4:eb:e8:08:de:3c:9e:e4:2e:f2:0d:21:be:61:f4:ac:
         a1:b8:14:dd:25:4d:ae:23:0d:5d:8f:31:0a:da:f9:8f:29:64:
         19:15:45:a4:07:43:ee:eb:e6:cd:14:57:26:c5:90:39:48:ca:
         2d:24:2d:7b:bd:4d:8f:c7:6d:9e:26:62:9b:fd:8e:9c:3c:f2:
         38:d5:3e:cb:26:d7:fe:1b:09:4d:a3:ec:9c:1b:b2:83:a0:95:
         f7:68:1d:16:04:5d:e3:9c:7c:23:4c:11:5a:61:85:5b:e8:69:
         a7:b7:de:91:30:0e:ab:81:3b:c7:4c:c2:1b:b7:25:be:48:dd:
         6c:21:ae:da:04:c0:4b:88:a0:dc:6f:c7:ea:30:9f:3f:ef:46:
         b9:05:8b:9b:69:ca:e3:de:76:1b:cb:30:09:f6:ed:55:dc:80:
         d4:dc:95:e6:37:97:e6:a6:a1:09:27:1a:52:70:7b:63:bf:fa:
         53:25:02:45:93:22:8b:0d:41:5d:87:89:ca:be:76:57:0e:27:
         23:8b:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:50 2024 by rpki-client on console-fra.rpki-client.org