Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c762441-67a4-4d84-9bb6-d3feec3c9100.roa
File:                     7c762441-67a4-4d84-9bb6-d3feec3c9100.roa (raw, json)
Hash identifier:          9u7b7GjoBT8wIv/LTq//PpDYg7yEUMuaxECFCRUL0wA=
Subject key identifier:   80:15:87:75:E6:31:3F:27:26:E5:EC:A1:47:F5:10:46:68:00:B1:93
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       784D769953A36871EFA525A73C0B9A6ED2EE0BD0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c762441-67a4-4d84-9bb6-d3feec3c9100.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4d:76:99:53:a3:68:71:ef:a5:25:a7:3c:0b:9a:6e:d2:ee:0b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=5d4857ce6cecd76b838157e5b4ce94f6074cfa1e553ef85232a1de31f62a04d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:03:32:c6:84:60:3c:f9:63:5a:9d:d7:e5:
                    eb:85:ab:93:5d:d0:fd:be:1c:78:69:11:fb:81:3f:
                    53:b1:b2:2a:9d:78:33:4d:7c:23:7b:1b:e4:46:f3:
                    0c:1b:4d:20:1d:0d:63:64:c3:bd:7b:9c:1e:a8:4f:
                    6d:62:c5:c7:56:fb:5f:31:73:47:f4:c0:59:81:68:
                    f7:cc:66:0a:08:09:e8:01:6e:77:8b:dd:29:d9:c7:
                    77:40:d5:07:64:4d:50:cb:99:67:d1:c0:f7:9d:df:
                    ce:68:22:fa:9a:72:99:69:6f:91:2b:74:59:7d:2f:
                    77:2f:cb:48:05:6c:af:77:81:0f:95:fe:6c:c5:04:
                    26:49:93:16:c7:7a:4e:94:c9:12:e5:c5:3f:00:d1:
                    30:2b:96:d7:92:cd:b6:c8:52:9d:3c:16:4b:58:40:
                    3b:20:5a:e9:59:4d:5f:1e:10:96:4f:dc:90:c9:fe:
                    73:2f:99:f4:83:1a:aa:85:30:75:dd:97:f3:de:b7:
                    35:a5:87:d6:60:1c:56:da:5a:f4:13:75:02:f3:5e:
                    13:bc:c4:91:1c:45:52:fe:7e:6f:7c:8a:4e:ee:54:
                    0d:6c:38:30:db:b1:c1:9e:83:73:af:f3:53:06:93:
                    d8:bd:8e:9b:d0:9d:20:40:57:cb:cb:41:b3:bd:8b:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:15:87:75:E6:31:3F:27:26:E5:EC:A1:47:F5:10:46:68:00:B1:93
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c762441-67a4-4d84-9bb6-d3feec3c9100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e7:ac:35:e1:9e:fd:54:ef:27:99:04:97:1f:17:1f:b2:2f:
         ea:33:e1:db:5b:9b:2f:ed:87:50:41:3a:f2:22:54:e7:36:44:
         69:bf:f9:64:71:9b:d8:fa:1d:2a:a8:18:26:98:73:85:5c:9e:
         44:d4:73:23:94:12:db:f9:41:5c:0c:94:b8:14:a5:87:2e:80:
         cd:a8:1c:f9:17:1c:ea:b4:32:c0:2e:a6:c9:98:ce:a0:73:46:
         3c:8c:46:e9:6b:46:8d:af:71:12:ef:0c:af:3d:a0:ab:36:3a:
         b9:44:9d:c7:5c:fb:36:48:e9:f6:31:f4:df:22:76:4c:97:a6:
         26:66:1b:28:86:26:05:c2:11:7b:c3:fd:ea:9e:46:57:86:7f:
         78:77:a7:42:8f:d6:b9:5a:df:76:f9:f4:d2:ea:fa:d7:75:9f:
         a8:48:07:34:62:63:70:22:bb:fa:fa:92:2a:f7:3b:22:52:56:
         65:42:c7:1c:92:6e:07:e4:03:9d:c0:0b:9e:a9:84:f0:3e:b7:
         c3:2c:ef:dc:ba:a1:da:c7:85:96:4d:36:37:2f:d5:f0:cf:c1:
         5c:4f:99:a3:2d:98:28:15:c7:e2:aa:7f:e4:55:f8:5b:e4:da:
         1e:53:a2:4e:53:8f:85:74:98:3c:0f:fa:e1:e2:6c:00:a1:e5:
         90:ac:9f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:11:23 2024 by rpki-client on console-fra.rpki-client.org