Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b7f039-670d-4e40-ba20-62ab63aa559e.roa
File:                     00b7f039-670d-4e40-ba20-62ab63aa559e.roa (raw, json)
Hash identifier:          3F2WNDrWSI6nwkTGQ8C+71vQ01o8jMbpvdVNBelfO1U=
Subject key identifier:   3A:5D:6D:CC:D0:C8:2F:B1:F8:31:21:9B:44:36:DC:A0:3D:33:BA:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       447A7A760ABBF7E41674DF046E0C365226917FD4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b7f039-670d-4e40-ba20-62ab63aa559e.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        54.26.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7a:7a:76:0a:bb:f7:e4:16:74:df:04:6e:0c:36:52:26:91:7f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=220771e4656233bd4fdd15c661ebd8c5b1df901b621aeef010e160cd8837f0bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:b7:33:69:1c:d5:17:59:08:43:4e:1a:dc:
                    be:8e:5c:7f:1b:95:78:58:48:de:a0:c3:35:e4:df:
                    7e:df:c4:c7:78:e0:f5:ba:ca:a4:f2:71:88:da:54:
                    f7:58:49:68:eb:93:33:fe:fb:29:d4:b8:46:41:44:
                    08:c3:2a:b0:62:e9:54:88:9d:bb:4f:4a:3d:e5:d6:
                    8e:81:4a:8e:27:18:26:6a:f8:69:64:a1:88:6d:90:
                    ce:d9:e7:6f:f2:42:71:25:b8:6f:3d:80:a0:98:7b:
                    7e:06:7a:f1:6d:51:c5:13:d5:88:50:10:e7:9b:20:
                    3c:5b:b5:4b:fa:b9:5d:1d:c1:7b:85:94:32:72:17:
                    c3:94:1f:8a:87:35:a4:f2:a2:ee:63:07:b6:82:f4:
                    c9:96:f1:b9:a5:56:ba:65:14:3f:e1:05:b8:29:9f:
                    cc:3d:90:de:e5:aa:bf:50:f8:18:a0:3e:8b:16:e6:
                    39:54:03:43:be:40:56:e4:7a:c1:94:5a:a4:fe:d1:
                    b0:7b:8d:73:8e:98:3b:31:35:47:bd:42:77:ea:ba:
                    64:a2:87:e4:52:3b:a7:7e:ac:5c:3e:90:cf:be:e3:
                    49:a8:95:6d:01:cf:68:2e:95:23:ad:f9:40:ab:3a:
                    70:6e:c3:d4:92:ec:44:1d:94:eb:3a:ab:e0:30:73:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:6D:CC:D0:C8:2F:B1:F8:31:21:9B:44:36:DC:A0:3D:33:BA:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b7f039-670d-4e40-ba20-62ab63aa559e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:58:e4:16:e1:99:fb:5e:ef:42:cb:0f:89:62:d3:f4:ea:e6:
         65:3e:66:7e:73:2b:d7:98:be:15:a1:83:fa:8a:21:f5:a7:3e:
         36:b3:7f:46:a4:d8:31:d3:b2:55:78:90:dd:c2:f4:82:6d:b2:
         f3:34:f0:e4:72:68:72:e5:05:ad:02:f1:7c:53:f6:ef:0d:b7:
         0e:9c:40:a4:7f:79:ba:1e:ec:3c:c9:80:3d:43:e8:0c:f6:c4:
         c6:b9:30:67:44:51:0b:8a:7d:49:71:62:70:bd:f3:cd:bf:2f:
         04:8a:89:cf:30:d3:eb:46:0b:f0:37:15:ff:17:be:a6:eb:fd:
         73:7c:5b:b9:71:18:0d:f7:da:52:80:f0:08:7c:fc:da:b2:3c:
         fc:8a:a7:66:a6:c4:72:79:64:3f:f9:81:aa:24:c5:f2:35:23:
         63:d9:7f:da:fe:a8:ad:a7:38:57:ac:87:d6:95:31:46:93:87:
         3f:b2:af:44:e6:c1:14:ad:31:ca:a3:82:4d:d3:36:58:45:96:
         77:05:08:8b:04:51:29:46:c0:0b:60:a4:7a:fe:65:c3:4f:9f:
         a1:56:9d:1c:e0:3e:62:40:b9:57:04:c4:cc:13:92:de:0e:4d:
         df:45:e7:36:fe:78:71:bf:2d:e0:76:f5:bf:1a:b3:18:ca:0b:
         dc:3d:e4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:38 2024 by rpki-client on console-fra.rpki-client.org