Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cffaece-f331-4e9b-84a6-dc84bad79837.roa
File:                     7cffaece-f331-4e9b-84a6-dc84bad79837.roa (raw, json)
Hash identifier:          VieqX6Y3nOGuTP1jSH8SS1QGAu4W932SbfY1p1g50XY=
Subject key identifier:   A1:19:D2:B9:5F:F0:D6:91:18:61:81:DE:C3:0E:59:F8:38:87:B9:4A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       75B221289EC3282F824710DC9B826B8D1B7770CA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cffaece-f331-4e9b-84a6-dc84bad79837.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        13.248.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b2:21:28:9e:c3:28:2f:82:47:10:dc:9b:82:6b:8d:1b:77:70:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=10e961982852812dc356325bc726551b1ef522205933b4ba7170e2817908b97c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f5:e5:87:81:cb:d8:3b:93:a6:9c:cb:fe:88:
                    74:48:3f:e1:fc:a7:b1:d8:0a:cc:33:58:b8:4c:12:
                    61:35:52:7d:7d:94:32:e1:7b:54:06:a6:37:22:95:
                    e9:68:7a:18:07:1c:02:f9:4d:6f:8c:a9:83:b5:6c:
                    3a:10:ee:ca:b5:eb:36:6c:db:5b:4f:fc:b6:76:70:
                    6c:f5:68:af:15:30:7e:e9:ca:bd:5b:ca:97:e3:78:
                    4a:24:1e:f5:4b:6c:71:2d:dc:e5:12:92:bf:58:47:
                    83:02:59:91:88:16:5c:61:84:c0:73:fa:7b:d2:5e:
                    db:9f:d8:e0:55:99:f9:56:f4:fa:50:4e:49:63:6a:
                    a2:fe:5c:26:04:15:91:3b:ff:4c:1a:85:20:3f:ed:
                    a8:6b:c7:35:11:91:db:87:42:68:1b:7c:2e:29:59:
                    fe:77:da:31:57:f4:fe:94:b1:72:fe:67:34:03:ae:
                    f2:dc:48:66:1f:ae:4d:07:16:71:8b:aa:93:60:56:
                    40:23:cf:da:4a:ee:5d:75:cd:b1:9a:d7:ce:2a:a8:
                    de:51:38:6f:02:6e:92:be:5a:6d:05:8e:e3:f3:15:
                    24:3b:56:23:f8:d4:d2:73:65:78:bf:2f:e1:31:4c:
                    1c:3c:e1:d3:8b:b3:7a:ec:8e:a2:ac:35:83:7e:a9:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:19:D2:B9:5F:F0:D6:91:18:61:81:DE:C3:0E:59:F8:38:87:B9:4A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cffaece-f331-4e9b-84a6-dc84bad79837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:83:12:3f:91:cf:96:90:4f:d1:bd:7c:a0:ce:62:80:63:0a:
         cf:5f:6e:38:db:6d:8c:21:b5:46:58:e9:9d:4e:99:55:97:6c:
         3f:c1:19:7b:e2:f3:44:8c:09:f5:e4:53:ea:1c:37:5c:9f:21:
         5d:d1:95:58:e8:5d:19:ee:4d:aa:e5:42:a9:e6:cf:74:00:0d:
         0f:30:16:9c:65:67:b4:7f:34:c7:52:5b:82:9a:c5:a4:91:d1:
         84:38:a8:44:10:28:c6:a5:6c:03:e8:52:63:08:5d:1b:98:d2:
         0e:f6:da:62:43:f7:aa:6d:eb:2b:29:aa:74:d3:8d:22:1b:a3:
         b3:f7:8a:00:c2:70:fd:6c:57:f5:e1:98:dc:e0:85:09:4c:a4:
         8a:e4:27:bd:f9:fd:11:ee:22:32:3b:4c:ee:63:8f:00:65:b0:
         62:dc:65:79:5e:f4:79:30:62:00:2a:f1:8f:39:df:b0:77:e2:
         27:b7:0f:2c:2b:bc:46:5e:10:4e:b7:e5:41:78:71:26:26:f8:
         f4:6e:63:7b:ac:29:8b:b3:21:3d:91:24:8d:29:11:2a:5b:1c:
         be:84:d3:81:a7:d7:70:10:1f:b3:ef:22:ca:6f:47:1e:f8:0a:
         dd:10:05:53:e3:ad:2a:9a:ab:a3:8b:fd:b0:7e:55:ee:5f:c3:
         f6:e6:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:05 2024 by rpki-client on console-ams.rpki-client.org