Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a6c871c-d068-41bd-bc97-d16b24f27195.roa
File:                     0a6c871c-d068-41bd-bc97-d16b24f27195.roa (raw, json)
Hash identifier:          Qg/9br14G+rZeMvBQcnzBlQP18/5J3S0R0frayKPWFE=
Subject key identifier:   64:D8:68:5F:C8:59:29:7A:35:51:8C:54:9B:BB:D2:00:9A:CD:36:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77D86156D0F068AAA2403DF5ADD02D3483F88EA7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a6c871c-d068-41bd-bc97-d16b24f27195.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        15.175.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d8:61:56:d0:f0:68:aa:a2:40:3d:f5:ad:d0:2d:34:83:f8:8e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=484c662ff6b60ade6f3fea6e9a5c3221bd13538e7b7587dfd1223b9a20f28f28, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:cb:e9:4a:d4:b0:ca:3c:22:fc:df:58:c5:
                    22:9d:ed:93:1e:d8:8e:7a:f2:0d:c4:4f:0c:8b:5b:
                    b8:5c:6e:0e:f7:f4:1b:b8:0c:df:09:38:61:d9:b5:
                    41:ff:c1:a7:53:c8:58:33:c7:05:2d:d8:d2:d0:bf:
                    23:91:24:9c:4b:02:60:3d:59:d8:e7:22:d0:23:53:
                    75:4b:7e:99:65:8f:bc:a8:e8:2f:65:de:a4:fc:60:
                    b9:87:f4:be:da:3c:b6:44:84:f7:87:09:6a:b0:0e:
                    3d:f7:f6:bf:33:79:b0:57:53:71:1a:fb:29:85:28:
                    b3:de:85:6a:31:f4:d7:66:a5:85:5e:58:2f:00:7b:
                    11:9c:12:b0:ca:84:e6:48:b7:87:a8:1e:1d:03:f9:
                    58:d3:67:da:01:58:85:4e:72:8a:24:9f:82:ce:8a:
                    14:e0:4d:31:8a:8f:2a:d6:6e:3c:ca:5d:a6:41:ec:
                    90:25:f3:73:d6:28:4c:91:5e:65:b2:67:be:73:51:
                    42:7b:4b:53:7e:ca:d1:bf:bc:bd:71:2b:58:29:53:
                    83:11:b6:f4:36:e9:82:61:78:7e:71:7f:63:a9:c3:
                    0d:c7:14:5a:f0:4e:d3:41:06:f0:53:bb:d7:66:63:
                    e1:cf:c5:ec:a9:c3:83:d3:11:ef:d9:db:d6:f6:df:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D8:68:5F:C8:59:29:7A:35:51:8C:54:9B:BB:D2:00:9A:CD:36:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a6c871c-d068-41bd-bc97-d16b24f27195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:64:72:fc:9b:b7:f2:a8:50:e6:6c:4b:de:5c:f0:17:ae:a3:
         8d:6f:fb:5a:a8:50:09:79:aa:6f:61:54:7f:9d:ec:bf:f3:97:
         be:13:57:79:af:44:ca:e3:6b:c0:65:1b:61:15:35:5e:0b:94:
         ad:42:71:18:dd:90:a1:da:2c:8b:10:fc:9d:b5:f2:72:2e:31:
         ff:00:5e:d1:33:28:50:a6:4f:6c:4f:37:d9:97:ea:40:f7:f4:
         14:25:6e:c1:1a:d0:bb:67:4e:f1:f5:17:5e:be:38:eb:b5:e8:
         97:c7:25:bd:0a:22:9e:9e:47:98:fb:32:17:e6:df:ff:ca:f6:
         12:2f:b3:24:02:53:d7:90:d2:d3:90:de:fb:85:94:c9:66:2a:
         45:b0:ab:ca:a0:b9:5b:99:d2:9f:d5:03:a1:ee:26:dd:84:d3:
         72:e1:2e:22:d9:be:44:13:3b:42:6b:8b:3a:99:e9:8b:cb:31:
         0a:0c:71:7c:e7:d2:88:32:39:e1:6c:a7:07:6f:d9:f3:55:85:
         50:2e:94:5a:b9:10:73:bd:1c:11:65:46:47:04:7b:f8:e5:aa:
         3b:fa:5b:b5:da:5a:e2:a9:48:32:cb:56:79:ff:55:a1:91:16:
         d6:f6:d7:d1:92:31:7a:7c:f7:e8:f8:1e:f0:84:ae:07:7f:33:
         d0:4e:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:40 2024 by rpki-client on console-fra.rpki-client.org