Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/118390dd-3538-4758-b395-9332264dd268.roa
File:                     118390dd-3538-4758-b395-9332264dd268.roa (raw, json)
Hash identifier:          FuAQcMWWQFeIOogItsmuJ4e+5yr1JFQv0ssO2o9/t7o=
Subject key identifier:   93:19:A4:F7:A7:30:99:E8:8E:0D:74:FD:55:A3:38:2C:89:2F:37:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70F48A555A7A866CBE15B269A1BD9B3F94FC2468
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/118390dd-3538-4758-b395-9332264dd268.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.49.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f4:8a:55:5a:7a:86:6c:be:15:b2:69:a1:bd:9b:3f:94:fc:24:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=d69a7162771b6496a1134616f01b074d84bca7c5693868774a8b88ead1b8e057, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:30:a0:2a:9e:80:bf:48:e8:4b:8d:3a:66:
                    0c:f6:69:6d:53:e2:0f:c2:3d:a9:ee:a5:d1:d2:18:
                    60:48:02:fe:75:96:8c:70:f9:ce:3f:10:09:e1:af:
                    72:d3:2a:b1:75:99:86:b2:ed:86:51:4c:d3:e9:40:
                    c9:75:93:a4:f3:d3:4f:f9:ca:74:b1:d1:8d:4d:16:
                    40:8c:f7:68:cf:bb:78:2a:25:2f:17:47:d2:f0:17:
                    3e:4a:4a:aa:7a:40:0b:c0:b5:fa:f6:1b:b9:5d:e6:
                    fb:8d:a5:fe:e7:51:7d:97:64:e3:f5:4c:f2:2d:92:
                    e1:11:4a:d6:2b:e3:3a:f0:66:ab:84:63:bc:2b:c1:
                    bb:16:c9:aa:17:45:ca:7e:d4:f2:0b:b2:1b:b7:33:
                    57:93:ee:d8:ea:79:47:5a:90:a5:dc:67:31:71:c1:
                    29:62:83:a1:f6:48:30:ba:04:cd:d4:38:37:ea:78:
                    c9:eb:28:66:72:ef:5d:3f:4d:bf:3b:df:e2:dc:d5:
                    8e:70:24:03:d5:ff:c6:fc:8e:4e:52:df:08:c3:19:
                    a9:9c:03:d0:52:7b:96:27:1f:29:1d:e3:99:10:59:
                    a9:25:f2:24:73:79:92:e3:20:01:94:c5:83:4d:c6:
                    5a:d9:ed:d5:e5:3d:f6:47:8b:5a:0b:6b:af:3c:e2:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:19:A4:F7:A7:30:99:E8:8E:0D:74:FD:55:A3:38:2C:89:2F:37:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/118390dd-3538-4758-b395-9332264dd268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.49.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:25:0c:20:6f:09:25:f5:62:d5:8f:78:0f:bf:27:d1:64:
         d7:b5:b6:37:98:a0:73:7c:09:a2:76:b1:33:0c:ea:6f:42:45:
         1b:a7:51:a3:15:1f:7c:1c:44:31:75:57:8f:e3:9f:bc:f2:e0:
         11:df:e0:a1:5a:14:a4:57:88:30:03:b6:33:d4:9f:dc:bc:f0:
         ce:86:25:69:1d:a2:6e:97:de:4e:db:d7:ca:11:50:61:c7:1d:
         02:b4:85:12:01:92:fc:aa:06:3f:2a:cd:84:f7:db:82:68:28:
         3b:9b:07:cc:0b:ac:7b:d4:72:e0:64:77:9b:39:f3:bc:06:3f:
         49:e0:1d:9b:8d:c0:a8:3e:fc:0e:3f:12:37:c9:79:cf:b6:d9:
         6b:fa:6f:cb:80:58:e4:46:94:bd:c9:72:0b:48:96:31:7f:7b:
         2b:40:e9:b8:e7:39:2a:3d:67:c2:e6:b4:8c:7e:1e:f4:23:7a:
         80:bb:8c:b3:f2:be:c4:e1:9f:12:7d:f3:9d:bb:ba:7e:6a:10:
         5f:c5:c0:73:b5:dd:c2:26:f2:6f:97:e4:fc:31:e4:8e:e5:06:
         83:c4:4e:56:a9:c3:af:d6:7f:31:6f:66:04:16:9f:c2:c5:b0:
         55:9e:bc:db:8a:c1:59:b8:86:1a:c8:0a:3d:3c:51:07:50:0d:
         e2:5d:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:42 2024 by rpki-client on console-fra.rpki-client.org