Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/beabef27-cdd1-47ec-bcde-24d2cedbea0f.roa
File:                     beabef27-cdd1-47ec-bcde-24d2cedbea0f.roa (raw, json)
Hash identifier:          bVg5impQdR3XfcFyCHpIZ86HnkYkWmpuL2u+mqluDBc=
Subject key identifier:   9A:B0:68:D9:31:DF:A4:D8:45:19:20:D9:0E:2D:A3:52:4E:53:67:FF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       564C79B35B9E657EEA918F89669BDCC8EB33F16A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/beabef27-cdd1-47ec-bcde-24d2cedbea0f.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        3.4.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4c:79:b3:5b:9e:65:7e:ea:91:8f:89:66:9b:dc:c8:eb:33:f1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=8e3207024784218f996786c300c3c4233551cdb0ec128fbc0082c12b44ff83aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:88:28:76:6e:11:87:9e:1c:6f:93:47:eb:
                    44:bf:62:fd:d7:8b:a0:24:ab:99:b3:49:2a:8d:67:
                    02:40:53:62:c1:3b:52:b5:1f:a7:0b:57:bd:fe:a6:
                    6a:e3:82:54:e0:32:3f:f9:f5:e2:aa:a5:73:ce:03:
                    5a:60:8e:c3:e1:07:db:c4:4e:75:e7:80:0c:0f:07:
                    8e:1d:c4:a5:92:6a:d1:78:1b:d3:03:a9:6b:f2:21:
                    4d:25:90:b4:33:54:c2:ad:8a:f2:50:cb:a5:83:49:
                    a7:53:64:36:f8:cc:0c:03:b3:20:ac:10:16:d2:ba:
                    42:bd:23:43:e3:74:f1:86:f6:ba:c9:1d:85:3d:a7:
                    22:ad:29:9b:b0:9a:1b:83:b1:ba:d3:bf:18:31:5e:
                    9b:76:95:5d:49:51:80:0f:6c:29:a4:4b:c7:d3:31:
                    37:92:1e:69:8f:7d:2e:fc:8c:56:80:1a:10:29:82:
                    51:aa:ca:1b:86:f2:db:ee:a5:55:2b:2c:0a:9b:8a:
                    29:51:0d:2d:07:d7:6c:be:f8:d4:55:62:6d:28:97:
                    0f:26:e3:a3:63:62:21:15:c4:07:05:26:7a:10:8a:
                    ad:b7:ad:82:7a:7d:a6:2c:0a:c7:b2:81:86:a4:03:
                    d1:97:f2:74:95:0a:48:8e:f6:27:e8:03:90:13:91:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B0:68:D9:31:DF:A4:D8:45:19:20:D9:0E:2D:A3:52:4E:53:67:FF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/beabef27-cdd1-47ec-bcde-24d2cedbea0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.4.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:f1:ad:0d:82:9d:67:69:fe:08:55:45:2b:78:a0:55:3a:fc:
         4a:9f:a9:81:dd:85:39:6c:8e:2a:0e:3c:84:fa:4a:93:4d:0c:
         1b:5c:3f:72:4e:93:e1:c0:f9:b2:02:b0:f2:36:32:16:c9:a9:
         92:63:71:71:17:11:51:ab:48:c0:b0:91:96:ae:59:70:b5:91:
         0f:e4:38:ba:0f:aa:9c:7f:fa:ca:ff:30:f9:0c:2a:e8:08:c0:
         4a:e1:55:41:46:f8:5e:4c:12:35:4d:fa:97:e4:08:35:c0:9c:
         09:72:d3:79:98:16:82:0c:e3:23:dd:9f:a8:d3:4c:59:d4:18:
         95:e0:eb:e0:e3:d1:b7:9f:85:3c:f9:e5:82:03:7a:d6:f0:fc:
         a4:3e:a7:b1:81:40:b3:b8:ee:ef:3e:1e:a9:ad:b7:d7:69:54:
         de:f8:43:8c:d8:6a:55:da:6d:98:94:92:87:a8:f3:e7:dd:40:
         84:6a:48:f8:a5:d8:3d:53:eb:25:d6:eb:40:5e:b6:40:4f:35:
         b3:42:09:da:52:1f:c5:ff:8c:a5:ca:e0:7a:14:c5:8d:0e:18:
         f6:39:64:32:74:b7:f6:e5:b5:9b:c7:71:ce:f3:2e:46:45:8f:
         48:0a:5a:27:7b:76:c3:68:80:84:29:f6:c3:13:ab:32:25:66:
         fe:d0:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:34 2024 by rpki-client on console-ams.rpki-client.org