Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bb1cf1a-1243-4da5-96ab-3e26791ca09f.roa
File:                     0bb1cf1a-1243-4da5-96ab-3e26791ca09f.roa (raw, json)
Hash identifier:          WYgrWFVR3t1nJtj7n9966fWg5RAQpBx/5CQLooaL5b8=
Subject key identifier:   6E:39:83:D7:FC:38:62:C9:D4:C7:E3:07:6B:E7:F4:35:D8:64:83:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       625BB3308C8BDCC2D5D6FA64E1EB5264D9627EF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bb1cf1a-1243-4da5-96ab-3e26791ca09f.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        65.37.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5b:b3:30:8c:8b:dc:c2:d5:d6:fa:64:e1:eb:52:64:d9:62:7e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=d28f5279e41ca1e1622e202dabf9eac2effff68f0ae9a188b38b97a9e9b1a896, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:96:7f:17:30:e9:92:6f:1b:71:c4:d3:e2:
                    8f:03:36:a4:a2:42:12:70:68:59:c3:69:45:68:00:
                    71:f8:5c:6f:7d:4b:e6:97:27:72:d1:55:12:e1:7e:
                    d1:1b:46:7b:0d:9a:9a:09:a6:5d:3c:aa:b7:ab:03:
                    cd:c3:4f:56:ca:4d:63:39:da:18:7c:c8:8a:d0:29:
                    42:39:05:c5:eb:30:44:30:36:50:29:ce:6d:b2:b4:
                    e3:97:ea:2d:73:9a:c6:18:cb:7a:be:71:70:ee:27:
                    ec:2f:37:2c:a3:46:90:81:86:9d:de:ad:b6:7d:7a:
                    e4:ee:ef:4b:63:80:8d:77:86:20:96:84:ff:66:85:
                    36:a0:46:7c:d2:a8:95:16:d7:ce:89:e6:9c:f4:30:
                    fb:2b:bd:2d:a9:33:7f:79:a6:b4:84:5c:6c:a9:17:
                    e9:f1:b6:4f:0a:f9:01:57:d2:51:3e:ab:77:6d:6c:
                    6c:29:04:e1:0f:04:2a:12:b5:d6:b0:48:7b:00:d2:
                    ad:10:28:67:12:08:ac:41:56:08:48:cf:e1:25:cd:
                    80:27:ab:fc:1a:e1:30:f0:85:f1:52:58:b0:88:85:
                    6e:56:84:1f:61:70:1a:9e:82:c7:e3:3b:db:4c:13:
                    2c:b9:93:f1:ae:0a:f2:7b:10:2c:64:64:5c:d0:73:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:39:83:D7:FC:38:62:C9:D4:C7:E3:07:6B:E7:F4:35:D8:64:83:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bb1cf1a-1243-4da5-96ab-3e26791ca09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:81:ac:ff:90:95:2c:37:6e:0f:ea:a9:fb:28:6c:a1:98:53:
         a5:0e:e4:04:40:25:05:ad:65:16:96:29:e6:50:02:7d:75:08:
         c4:14:18:88:ee:2b:98:72:3d:77:3c:14:77:30:0a:e9:68:0d:
         ae:85:f5:09:df:6d:e8:1e:27:62:cd:7b:32:3d:48:96:fa:21:
         da:19:0e:32:1c:dd:31:0d:21:c8:9a:c3:7f:57:19:a9:e8:eb:
         81:d8:86:d3:8b:f0:0b:00:e9:ff:c8:b0:e7:41:81:80:3b:06:
         28:70:b5:6a:1a:c1:f4:a9:db:d7:5c:2a:65:b9:27:4e:0a:07:
         3f:14:24:6a:73:27:43:d2:ff:15:e2:e5:6b:84:9f:ba:27:7d:
         a3:08:26:bc:3f:8a:5d:76:7d:98:e8:d3:7e:56:00:bb:f9:ac:
         1d:4c:41:3b:3b:7a:53:6a:b1:fb:c0:a2:48:f8:de:f4:13:ce:
         db:cd:56:e6:91:97:52:6b:2a:39:7f:bd:03:a4:a5:8a:15:9d:
         29:d6:3e:13:43:ce:da:59:34:c3:da:76:b9:fd:fc:d0:fe:f2:
         b0:f7:d3:4a:d6:e9:d2:a2:ef:c6:cf:6a:64:7f:c9:2b:28:39:
         ca:ab:4c:19:c5:db:dd:94:fb:9d:3d:57:49:04:c0:63:29:af:
         b0:1d:d9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:45 2024 by rpki-client on console-ams.rpki-client.org