Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de910143-28f9-425b-9787-775f9a9a88b1.roa
File:                     de910143-28f9-425b-9787-775f9a9a88b1.roa (raw, json)
Hash identifier:          CrBtZkD1YmKHqf7o8ZAF5vL41Lc+GiEPw+GLcXBYyEc=
Subject key identifier:   FE:94:CA:32:C5:1A:8D:33:F5:6B:EB:5A:C4:90:14:E2:4B:3F:0D:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4B1FF6B1F0BEF8A60E01162F2F5D31CF20EFEAFF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de910143-28f9-425b-9787-775f9a9a88b1.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        136.128.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1f:f6:b1:f0:be:f8:a6:0e:01:16:2f:2f:5d:31:cf:20:ef:ea:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=e94bde4df476b1fa5de0df8393a506c7591c9e4bc48d72292cfc379a99692512, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:25:2d:3d:5d:4b:ef:74:de:0c:28:6f:45:
                    cc:84:72:f9:98:6b:b8:ce:61:48:05:90:b6:73:52:
                    2a:d2:be:c5:28:e0:f3:b4:70:dc:38:cf:4e:f4:b9:
                    a5:24:96:b5:ea:76:fc:cc:3a:ac:ea:ef:e6:95:e4:
                    04:34:1f:85:70:b7:7e:a2:b5:3d:50:30:d6:f3:a2:
                    85:36:05:e3:6c:5d:17:85:58:5e:9b:55:d5:90:e1:
                    ce:0c:7b:a0:a5:73:b4:14:b9:d4:5e:86:7d:2f:e5:
                    f9:90:aa:3d:20:cc:94:1e:7b:0f:76:56:68:f1:a0:
                    63:ea:5f:87:08:da:2f:77:43:01:9c:a9:f5:ef:08:
                    62:03:52:e7:75:59:63:5a:bf:e4:75:a2:bf:9d:4c:
                    13:8c:d7:74:fa:69:26:10:8c:e9:03:b2:4d:3e:25:
                    0f:a0:a4:ad:a5:bb:1e:8e:d2:97:93:8e:7f:61:64:
                    d4:81:aa:dd:18:09:3f:e0:bf:44:16:1a:9a:87:94:
                    f8:59:57:58:56:63:23:72:e3:3c:cd:50:22:fb:84:
                    86:60:0e:9c:90:13:a7:52:c0:c9:6c:fb:a8:ea:38:
                    96:67:9c:03:14:c7:58:c4:ab:18:43:b7:48:98:5a:
                    f8:9d:c5:48:9f:c1:68:16:80:23:3a:fa:96:05:66:
                    38:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:94:CA:32:C5:1A:8D:33:F5:6B:EB:5A:C4:90:14:E2:4B:3F:0D:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de910143-28f9-425b-9787-775f9a9a88b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.128.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         63:e4:15:49:7e:4c:1c:bd:eb:6d:93:be:a9:67:6a:75:5e:22:
         f2:68:f2:4d:41:07:dd:14:2c:3b:8b:d5:87:a4:98:6a:38:e8:
         fb:54:95:bf:c8:fb:28:1f:31:10:c1:c9:a3:b8:0a:9f:3e:ac:
         c9:5b:b0:d8:1b:05:ff:9e:ee:30:c1:9a:c7:a5:44:2b:75:14:
         d4:c1:f8:84:4d:8f:90:ae:4d:31:6e:af:d0:b6:71:7a:81:e4:
         56:ac:87:07:ee:fd:96:2a:47:1c:8a:e7:e8:f2:20:cf:e3:b9:
         06:37:2f:75:81:0d:f2:b2:ff:75:16:e6:35:80:3f:10:2f:b0:
         ed:24:06:1f:9d:62:7a:1a:96:c5:d6:69:2a:fa:75:cd:04:2e:
         06:91:9e:39:85:34:d8:d1:1f:8a:2a:15:c3:fb:16:2a:60:fe:
         23:33:bf:38:55:8e:35:6b:99:7d:12:2a:31:99:36:fe:ee:be:
         aa:1c:aa:bc:61:71:42:29:5b:d2:f7:ac:ae:69:cf:dc:54:fa:
         40:c7:d2:ba:72:25:d5:b7:50:88:68:90:8a:82:fd:87:7c:f2:
         5a:0e:d8:5f:62:b4:c3:04:51:50:a8:8d:62:c9:d3:10:80:fb:
         1a:d3:23:fe:5a:6a:4a:c1:7f:ad:78:82:95:96:8e:a0:fc:6b:
         32:3c:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:21 2024 by rpki-client on console-fra.rpki-client.org