Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8eb7c3f-f729-4c08-a203-7e1f1afe5e4f.roa
File:                     c8eb7c3f-f729-4c08-a203-7e1f1afe5e4f.roa (raw, json)
Hash identifier:          0mzMH56ho94t7zmA3n1Ssj+mveTVUQOyjU6CtuTNo9Y=
Subject key identifier:   81:F7:31:75:7F:B4:C5:D2:F3:46:D3:B7:C6:B7:20:AF:3D:FB:55:CE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       40465912D67B707A527319B0F7AE8A21F66F6682
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8eb7c3f-f729-4c08-a203-7e1f1afe5e4f.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.240.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:46:59:12:d6:7b:70:7a:52:73:19:b0:f7:ae:8a:21:f6:6f:66:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=93944b16980adda9461e2e7fc4222f0d31351d197dfb31460145a554dc95b0b7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:fe:c6:c5:30:4b:9b:cc:e7:c7:f3:63:57:
                    82:96:c1:eb:9e:2a:cf:21:ea:a3:e9:2f:94:b8:0f:
                    7b:d4:0b:e7:2f:d7:e6:29:5b:54:11:49:db:73:e4:
                    a2:83:28:14:92:ac:7a:47:2b:b4:be:ee:a6:19:44:
                    4f:90:f9:8d:34:c1:24:5d:77:17:70:c1:f2:8c:c3:
                    14:bf:c3:56:72:ce:8f:64:13:37:c5:aa:23:19:b2:
                    eb:c4:95:74:27:43:17:57:75:f1:90:79:13:67:f9:
                    e5:b8:c5:15:be:f6:7c:1f:3d:9e:40:3f:00:70:68:
                    ca:8f:23:2f:b7:4c:4e:9b:f8:ba:4f:4f:79:8b:a1:
                    ad:70:a7:5a:86:27:94:1b:88:11:71:01:64:c8:47:
                    1c:8d:72:e5:3a:e4:95:99:6e:bd:81:19:13:89:7e:
                    c2:33:62:d9:7a:71:e8:50:82:e8:94:17:55:d9:87:
                    7b:74:8e:f4:78:68:41:cc:42:f9:63:18:d0:66:c8:
                    49:f8:70:b4:58:f8:6b:37:7b:d5:07:16:ac:0e:d6:
                    82:4f:63:b6:08:e2:0e:ac:e8:ec:dd:91:d3:bb:8b:
                    cb:b5:25:41:d1:1b:75:08:0e:01:14:92:03:b8:0b:
                    53:67:ed:a2:9f:e4:e4:33:f8:b6:f9:a3:c7:72:48:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:31:75:7F:B4:C5:D2:F3:46:D3:B7:C6:B7:20:AF:3D:FB:55:CE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8eb7c3f-f729-4c08-a203-7e1f1afe5e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:61:bf:ff:ae:ae:d6:a1:b2:14:87:cf:42:f3:84:82:b2:
         82:7c:5b:50:49:13:32:24:89:fb:a1:93:cf:3a:05:52:fc:39:
         94:22:ae:0c:95:8c:c5:ea:a7:48:4a:8a:88:db:48:d1:c2:1e:
         b8:32:fd:b7:e3:98:b8:05:17:9a:58:5c:85:63:1b:ab:6f:ed:
         cf:a3:8c:6e:f4:89:d3:dc:0d:0f:6e:42:5d:e9:31:a3:b8:0d:
         fe:80:2f:a6:e9:23:5b:bf:cb:a2:4b:30:23:8d:7d:37:5c:7e:
         6e:c4:54:b6:85:59:a5:39:ee:6f:49:05:e0:40:2b:0c:c3:25:
         63:ae:69:c5:9a:38:a0:33:6a:e3:46:76:db:0b:20:99:e5:60:
         8c:a7:65:a5:a1:d5:94:99:26:23:e8:78:33:71:79:05:19:6e:
         ba:cb:de:19:d3:4d:87:e5:12:60:3b:b9:09:28:44:2a:a0:17:
         64:02:a2:dc:42:43:ff:92:22:70:73:48:d4:bf:ff:48:79:1a:
         6b:7f:e7:a2:93:18:10:58:78:e3:7e:c4:81:4f:5c:3c:d8:57:
         77:f0:51:c9:df:73:8a:0c:4a:7b:c6:6e:3e:ba:dd:e4:2d:25:
         31:7a:1b:28:41:e0:55:26:f3:8e:d9:92:65:64:eb:bc:c0:0d:
         d4:39:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:44:43 2024 by rpki-client on console-ams.rpki-client.org