Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4aacae32-c658-434e-a5a8-65d48ec5f2c0.roa
File:                     4aacae32-c658-434e-a5a8-65d48ec5f2c0.roa (raw, json)
Hash identifier:          tfElsClSbIeVF9l3xrgnzR+cyjioe7PM1WTQ3cpSdKw=
Subject key identifier:   B4:84:BC:4A:3D:CC:5C:E3:34:4C:08:48:B5:2B:DD:8C:9E:72:7C:92
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6E9D049C64F09597E0C209E06888F19853DA819C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4aacae32-c658-434e-a5a8-65d48ec5f2c0.roa
Signing time:             Tue 19 Nov 2024 00:00:00 +0000
ROA not before:           Tue 19 Nov 2024 00:00:00 +0000
ROA not after:            Tue 24 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        3.5.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9d:04:9c:64:f0:95:97:e0:c2:09:e0:68:88:f1:98:53:da:81:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 19 00:00:00 2024 GMT
            Not After : Dec 24 23:59:59 2024 GMT
        Subject: serialNumber=53fa7a60251f000ed012f4fcbac7af43d5762b511cb342a180421ab43d03b372, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:a1:44:fe:9d:b3:ea:97:dd:7e:7b:9b:2b:
                    f8:be:0b:ff:30:93:7b:5a:45:86:be:cc:3a:1c:3b:
                    29:aa:00:82:8a:67:45:6e:52:43:b3:52:52:a9:78:
                    73:9b:80:e5:38:32:51:3e:88:c1:01:a1:9c:5e:73:
                    89:53:2b:44:a8:50:8b:ab:2b:65:be:ca:e6:25:e5:
                    0f:76:d3:1b:6b:dd:02:6e:69:28:3e:43:9e:8c:95:
                    e7:76:5d:e5:e4:37:5d:c5:03:73:62:e6:e3:34:5f:
                    47:99:98:cf:b9:6e:65:6e:d4:88:5a:a3:5c:32:8e:
                    21:f8:0a:e4:aa:bb:aa:51:70:84:56:50:3c:cd:e4:
                    70:06:4a:3b:b5:8a:7a:85:84:ab:3f:4b:1d:f1:58:
                    61:af:67:21:81:a4:ff:28:37:96:7e:99:90:13:9f:
                    b9:60:33:ec:3d:9f:a9:d2:ed:6c:54:eb:f8:eb:9f:
                    1d:fd:b9:c6:32:1e:d2:28:cb:0d:57:fd:20:96:fd:
                    a2:86:28:74:d4:90:47:03:7b:ec:fa:d3:e4:4e:98:
                    ca:f7:ed:41:88:fc:97:2f:e2:b9:83:36:a2:3c:3b:
                    2f:e4:9e:04:55:72:ef:05:8d:70:1d:b8:62:5a:25:
                    4b:a1:15:dc:f0:42:a7:ef:bc:bc:dd:83:62:f4:46:
                    4e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:84:BC:4A:3D:CC:5C:E3:34:4C:08:48:B5:2B:DD:8C:9E:72:7C:92
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4aacae32-c658-434e-a5a8-65d48ec5f2c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.5.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:af:6f:4d:94:f2:4b:52:6d:06:8c:f2:43:13:17:08:87:be:
         72:86:ca:21:74:08:a4:16:97:8e:40:76:83:fc:83:29:03:c1:
         1b:62:76:5f:15:fb:6a:87:66:16:cc:f0:53:c6:e4:09:b8:59:
         e1:a6:43:19:ee:f1:e9:ca:d4:0b:1a:bd:aa:ca:19:a1:05:46:
         57:a8:b3:c5:05:df:1e:70:31:49:82:06:1b:3a:28:c5:d3:bc:
         e7:f3:9a:b9:3b:37:e9:a6:75:ec:44:b5:bc:f3:85:85:2d:6e:
         69:36:6c:47:f7:f7:88:be:22:56:ef:1f:a5:1b:32:29:09:53:
         fc:dd:50:73:fc:8c:54:ee:20:62:a9:a3:bf:a6:d0:ce:ce:a8:
         7b:bb:aa:53:78:49:6f:53:57:7f:62:f7:27:a4:21:8b:c8:df:
         4b:23:31:6c:af:53:ef:91:85:e1:bb:6a:a8:f3:62:b5:59:c9:
         1b:55:a0:38:f0:63:62:38:44:d5:3b:38:bc:31:39:7d:8e:88:
         8a:6e:62:5a:a8:fb:a4:b7:dd:1c:6e:58:22:10:47:9e:d0:79:
         ab:a5:9f:6c:65:fb:67:af:45:84:72:cd:aa:a7:71:3b:60:b8:
         ed:b6:e3:dd:04:33:86:c7:bb:93:e7:5a:ad:55:23:91:fb:36:
         e3:70:45:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:52 2024 by rpki-client on console-fra.rpki-client.org