Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8b6fd36-589b-40c5-9288-1b40b3a97fad.roa
File:                     b8b6fd36-589b-40c5-9288-1b40b3a97fad.roa (raw, json)
Hash identifier:          r34giAQHI7aN+ns8t50KV7e127Jo26WuiZbuyJPm72o=
Subject key identifier:   A5:07:20:58:8A:58:FA:BE:A8:D5:BE:A5:E0:6E:F2:A1:60:1D:96:AE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       40D83F03AA058487616B221B6B92B24369C995E1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8b6fd36-589b-40c5-9288-1b40b3a97fad.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d8:3f:03:aa:05:84:87:61:6b:22:1b:6b:92:b2:43:69:c9:95:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=4cb39a04da63fe482bae198011847778401e1d6c5e11d78c5b92fe26394058b4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:55:3f:15:65:66:27:77:25:26:ae:4c:17:95:
                    79:85:e9:7c:e6:d2:a0:6d:9a:df:2e:32:6c:04:4b:
                    f9:a9:b6:57:15:bc:7b:e9:b0:88:07:19:ef:4a:0f:
                    7b:6d:bf:3a:91:dd:99:06:a3:d1:d2:d9:b1:5c:04:
                    e8:4c:84:78:6a:76:be:fa:0b:4f:7e:f9:7b:50:af:
                    7d:4f:b7:16:8b:c9:7c:c0:6d:03:ab:44:58:b0:9b:
                    cd:4a:57:0c:23:b1:e1:cd:4e:5a:c8:60:1a:78:41:
                    e4:91:37:aa:95:40:4a:75:2f:b4:70:db:a2:f0:7b:
                    9d:61:ac:39:8a:41:04:27:01:40:67:bd:02:48:d7:
                    28:72:6a:bb:3a:91:97:35:66:e2:29:e2:44:91:fa:
                    31:1b:c3:fd:37:2b:66:d9:6f:b5:1e:35:39:56:91:
                    f2:70:8e:67:ad:7a:b3:25:1c:bd:bb:0d:04:b3:c0:
                    ab:99:85:26:28:b4:94:5e:69:18:f6:50:9e:50:0c:
                    ff:a0:6b:1c:1f:35:6a:5b:21:8d:94:2b:da:3f:d3:
                    2a:4a:77:d5:93:6c:e1:86:b9:17:63:b0:91:51:98:
                    fe:85:d7:51:1f:9c:4e:39:d6:26:64:49:33:45:19:
                    19:fb:0b:7f:9c:7b:06:71:48:28:a2:14:02:6e:a3:
                    05:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:07:20:58:8A:58:FA:BE:A8:D5:BE:A5:E0:6E:F2:A1:60:1D:96:AE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8b6fd36-589b-40c5-9288-1b40b3a97fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:c7:63:94:dd:2f:29:87:ed:e8:1f:db:d4:a8:cd:3c:32:27:
         9e:1e:5b:56:03:8a:f4:97:92:aa:29:7f:d0:a5:7b:67:21:2b:
         e6:34:8b:fa:f0:ae:fe:e1:d2:5c:7e:43:df:4d:36:68:e1:27:
         af:4a:c0:4a:c4:93:ad:10:5b:86:1c:b5:51:cd:76:11:63:43:
         fe:79:6c:80:c7:34:e5:ab:8b:ba:22:28:88:6e:58:73:a1:60:
         1b:c0:3c:3b:15:f2:55:ac:e2:b4:d5:86:b0:7f:e6:b3:52:52:
         dd:9e:f1:9e:6d:68:81:4c:0f:9e:14:14:36:54:90:06:0e:b7:
         f4:ad:ed:cf:aa:b4:0e:53:2d:6d:34:0d:ec:95:87:f7:6f:ec:
         11:c0:39:58:f4:5b:00:b7:03:ca:f6:01:0e:25:17:54:68:e5:
         cf:bb:b3:60:76:0b:c1:1f:60:42:e7:c2:05:8f:bc:93:4d:6b:
         af:14:6b:c0:89:61:09:fb:e7:75:43:54:ca:38:76:1f:79:e6:
         85:2b:f3:5d:31:09:91:5d:1b:fd:ad:50:7a:21:06:6c:04:4c:
         e2:e2:22:c6:12:6a:cc:8b:41:9f:f1:99:e9:cb:58:29:85:62:
         e6:4c:a6:19:c2:25:7a:b6:fa:e0:b0:eb:53:64:28:e1:f5:7b:
         1c:af:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:44:38 2024 by rpki-client on console-ams.rpki-client.org