Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbda8303-ddfb-4b25-bee9-3a02bb01f3ad.roa
File:                     cbda8303-ddfb-4b25-bee9-3a02bb01f3ad.roa (raw, json)
Hash identifier:          b8au4USawbzxi/CLB+giaQtiupZ6OkkmDJyKT3qarzk=
Subject key identifier:   33:99:F3:B2:70:CE:D0:84:7F:1B:57:24:9F:9A:93:B7:75:CC:E7:C5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       217508B072D6F85B3D6E10A97CB1DD1A1FC35AD4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbda8303-ddfb-4b25-bee9-3a02bb01f3ad.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        18.46.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:75:08:b0:72:d6:f8:5b:3d:6e:10:a9:7c:b1:dd:1a:1f:c3:5a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=582417696f429d8828d2cfafcacb3b2f39c0652201b2cbdf94701a79650e60da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:5b:59:ee:69:18:22:18:e0:ae:b2:91:cd:
                    f8:e7:4b:25:e3:7e:19:d7:87:73:8f:46:26:dd:cd:
                    28:61:9d:aa:57:7a:08:a2:bb:2e:d9:b9:e2:02:0f:
                    30:12:1b:d5:5f:61:34:8a:0d:e4:08:d6:0a:f6:91:
                    b7:6d:27:50:47:45:35:73:b1:f8:9d:08:79:3d:65:
                    fa:2c:36:10:84:f0:8c:d4:b1:10:2f:10:58:5c:05:
                    3a:4e:68:4a:74:6e:36:34:2a:fd:0b:c8:18:35:e7:
                    f0:33:86:40:9b:17:8b:09:e5:da:80:1e:7a:07:e7:
                    aa:b0:9d:73:ce:e4:66:79:85:41:eb:a4:e1:f4:2c:
                    e2:b8:39:33:b2:e5:0d:d7:0a:09:92:b0:02:3f:c2:
                    56:bc:a7:70:d8:14:b3:ef:1a:81:5c:ac:a5:00:26:
                    13:e1:f9:a7:da:33:38:67:7d:43:3c:18:94:59:52:
                    4f:fd:cd:d1:b3:e7:c1:90:35:cb:e4:09:37:f5:80:
                    98:7a:9d:66:56:01:b0:1e:e9:1d:8f:83:bb:f2:bd:
                    fc:a1:f1:a6:ad:07:f8:a2:22:66:99:db:57:a0:a7:
                    92:dc:de:b1:85:08:47:2a:98:3b:5b:45:ec:2c:4d:
                    00:cb:9d:9e:91:ed:eb:59:d4:09:ed:5a:78:76:d6:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:99:F3:B2:70:CE:D0:84:7F:1B:57:24:9F:9A:93:B7:75:CC:E7:C5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbda8303-ddfb-4b25-bee9-3a02bb01f3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:e7:1e:a0:ed:f1:ab:48:c8:4c:4f:67:b1:8e:c6:d5:c5:0a:
         c8:cf:27:ab:dd:a7:98:b8:0a:50:cd:94:c2:86:63:39:10:0f:
         c9:5c:4f:65:93:a2:12:fd:98:45:60:a9:6a:b0:66:12:4b:f2:
         1c:41:37:64:e2:c8:0e:64:e9:dc:db:d9:04:fb:9e:fb:55:76:
         aa:d2:5d:3e:1a:82:80:08:a5:d6:15:d1:e3:c4:9e:ac:98:42:
         27:7d:c1:30:3c:35:05:8a:e7:39:b4:f8:01:32:c8:90:0d:86:
         b4:bd:e7:d5:61:2f:35:aa:81:13:c8:82:73:b0:a5:16:e2:be:
         bd:d4:23:f3:0e:c5:8f:8a:ee:41:13:83:11:dd:9c:9a:14:1b:
         e4:49:99:df:76:c8:0c:83:46:df:ef:cf:d4:c2:ff:09:d4:2b:
         9f:1e:2e:7e:13:ef:9e:32:46:0a:1d:a1:17:63:a3:dd:e6:38:
         d8:88:1c:36:dd:08:44:1a:41:f9:55:4c:3a:d4:22:84:8b:87:
         f3:70:a2:cc:c7:c8:e7:eb:f9:7a:07:9b:5d:e1:b6:14:e1:4a:
         66:46:6b:49:ff:98:51:79:69:77:a7:95:cd:0e:c2:24:00:1e:
         09:44:7c:08:10:0b:da:75:4e:3b:1f:95:3c:34:c8:d4:b9:d2:
         5a:43:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:18 2024 by rpki-client on console-fra.rpki-client.org