Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89c63ab8-272f-4e59-b2ce-cfe043dcd428.roa
File:                     89c63ab8-272f-4e59-b2ce-cfe043dcd428.roa (raw, json)
Hash identifier:          2kFEIoFr1zijAyp2+QaeGiHqbDqLYHeS+cqixcmIg/M=
Subject key identifier:   4D:58:4C:1C:04:4E:88:17:6A:75:35:4D:FE:3B:3E:E0:F0:A0:FC:17
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       286B5745EB6434E4FC57E570AF0D08DF93E4C3DC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89c63ab8-272f-4e59-b2ce-cfe043dcd428.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.30.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6b:57:45:eb:64:34:e4:fc:57:e5:70:af:0d:08:df:93:e4:c3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=4dab5fffbfdfe72e435056ab36acad08b2f905240770361d7e5962ca2cfe4d68, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:4b:b2:01:39:3f:27:68:49:b1:ef:c0:5d:
                    17:3f:7d:b9:8e:0b:cd:99:fc:89:d4:31:ef:04:93:
                    de:74:4a:41:47:45:db:f0:a8:e1:3f:1a:62:a8:59:
                    28:10:5f:92:7f:4f:be:e7:a4:fb:08:ea:4b:c9:d5:
                    8c:ea:72:23:3f:8c:f5:c8:74:b5:f6:15:db:c2:d3:
                    93:fe:37:e4:50:8a:95:a9:fd:5a:3b:db:ab:69:19:
                    21:62:9b:80:5a:1b:97:81:e1:fa:c8:84:e1:f9:ec:
                    0e:e2:b5:a4:d0:03:04:e7:29:8f:63:15:76:3c:1f:
                    25:2e:0d:12:e3:0a:64:58:12:12:0b:48:c6:72:5e:
                    00:71:e9:3b:7a:17:46:cb:ba:48:47:8a:99:09:22:
                    3f:63:04:1f:a9:b7:bf:3f:d6:5a:bb:5b:63:09:d0:
                    ca:a9:4d:46:13:c9:61:c4:0e:42:48:c5:d9:80:1d:
                    cb:05:53:11:eb:90:89:64:75:20:dd:76:65:58:89:
                    01:f7:54:96:82:0b:1f:08:57:a9:6f:72:45:2c:16:
                    00:64:0e:75:ef:91:50:b7:1d:7e:a5:35:82:49:d7:
                    23:19:22:cb:39:cc:e5:25:d3:4f:cb:91:48:55:b4:
                    8e:a5:5f:bf:86:e7:ec:57:9e:aa:db:78:69:df:7e:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:58:4C:1C:04:4E:88:17:6A:75:35:4D:FE:3B:3E:E0:F0:A0:FC:17
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89c63ab8-272f-4e59-b2ce-cfe043dcd428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.30.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:99:cb:6f:df:43:f8:a1:32:bc:e4:22:94:7b:e9:12:3f:
         7e:7a:b6:63:31:b8:5f:32:4d:35:88:ac:cd:c3:c5:cf:e7:81:
         9e:60:4e:66:8f:77:4b:fc:a1:84:97:a4:49:93:73:5f:df:3c:
         f7:a2:09:ee:fe:0d:fa:ae:44:1d:40:a2:b2:ab:cf:0a:47:e4:
         03:41:24:a1:80:dc:b9:f3:55:25:6a:6d:5d:ee:2a:f9:7e:b7:
         83:0f:08:69:eb:0c:db:28:79:0d:3d:47:eb:9f:89:01:b2:b3:
         21:92:65:e6:52:6b:da:48:71:58:73:72:f6:83:24:81:c1:c9:
         34:ae:69:9a:95:23:6e:4d:c3:8f:44:09:98:2d:b0:3a:41:ed:
         18:d6:37:4d:f5:78:b4:c5:f1:51:cb:16:a6:e5:c8:ee:e4:5c:
         64:28:bb:32:f8:ff:b0:a7:97:db:cd:55:25:8d:b5:1a:7a:ec:
         d6:51:d5:b4:74:77:8d:51:8d:31:71:be:f3:95:ee:f0:c7:4d:
         5e:a1:c3:93:93:41:40:c3:3e:c6:35:08:ce:53:92:ef:44:24:
         66:bb:4d:ad:0c:be:d8:36:23:36:26:0c:39:64:69:1b:08:42:
         d1:f4:30:92:63:97:1e:dc:2c:37:1f:0d:cc:30:32:15:73:49:
         0d:5e:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:03 2024 by rpki-client on console-fra.rpki-client.org