Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa
File:                     11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa (raw, json)
Hash identifier:          ltL0StApySt5EyhmLj4q+lX/bdpjI539jNCOnt3Uyiw=
Subject key identifier:   EF:DF:C4:7E:43:01:90:B2:C8:C6:C8:71:21:ED:FE:8C:7F:B9:CE:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64BE42765A231EE27FF478262C45DA171A276819
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        141.230.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:be:42:76:5a:23:1e:e2:7f:f4:78:26:2c:45:da:17:1a:27:68:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=6cd0954faf989b2b472298a93cae782ec3f536d58f0a785cf346098499624015, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:dc:dc:54:74:cb:31:e2:2b:da:ee:59:26:
                    9a:0e:9d:29:21:92:cc:62:2b:33:59:d1:0b:c0:36:
                    20:75:a6:c6:65:a5:46:54:17:8d:64:1c:0a:3b:44:
                    d3:c6:bf:1b:e7:a3:88:fe:7e:d1:39:44:84:94:2a:
                    e2:5d:1c:8a:d2:92:78:f0:e0:63:ed:f2:30:e2:ba:
                    22:79:31:eb:da:cb:36:3d:49:9c:0c:ca:09:02:ca:
                    44:1d:93:c6:0c:f7:aa:87:55:b9:b4:01:7b:ad:69:
                    9b:25:1c:16:06:1b:18:01:ce:1e:54:8c:31:4e:58:
                    e7:cc:3d:d9:5f:8e:e5:62:54:ed:f3:df:a2:51:31:
                    f1:7f:c3:77:8e:53:07:ae:96:44:25:0d:7e:98:35:
                    37:84:f5:66:a0:52:00:94:fc:8a:f0:1d:a4:af:42:
                    e1:c9:96:4d:e0:1a:a7:22:00:0d:3c:58:cc:92:3d:
                    2b:9b:5a:70:3b:89:a8:30:78:0c:3b:64:5c:b5:30:
                    db:b0:f7:6b:90:f1:1f:13:55:83:17:12:19:b5:77:
                    39:af:26:90:eb:65:d9:e7:e3:5c:9d:27:e6:89:43:
                    50:96:75:76:ce:ea:b3:52:06:ee:3d:59:5e:5d:5f:
                    6a:92:5e:fc:4c:54:68:5d:3e:a2:12:73:e9:fa:2f:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:C4:7E:43:01:90:B2:C8:C6:C8:71:21:ED:FE:8C:7F:B9:CE:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:34:71:d0:04:6d:1e:52:0b:32:d3:16:d1:ba:e8:57:44:ce:
         47:2a:e8:a9:cd:94:bb:df:0a:0c:f2:d9:b0:d6:38:3f:c1:02:
         cf:79:5f:93:fc:fe:19:d3:41:66:cd:0b:e8:58:3b:4f:c2:a0:
         86:da:ca:9d:75:15:a8:d3:55:6c:13:3c:a8:56:1f:e6:34:43:
         b8:29:75:13:16:7a:cb:a4:67:23:f0:63:a1:e0:07:62:01:d2:
         fb:3a:91:fb:7a:ab:7c:05:42:8e:af:49:8e:cc:7e:f2:c2:b2:
         33:ba:84:70:38:ec:73:56:4c:a3:47:55:36:19:d5:e5:0d:e8:
         42:1b:b4:af:82:b6:49:a6:f0:ad:a2:c4:27:7f:27:65:5e:ff:
         61:c6:b0:54:0c:63:6a:60:a8:cd:d8:c2:10:11:3b:1c:d5:86:
         3c:79:ef:f4:d3:fc:1c:af:2c:ee:9e:2b:16:fe:1e:2f:81:2c:
         74:4b:31:3a:b8:7a:49:ae:50:5d:38:26:e9:ce:1b:fe:d9:78:
         86:a4:c6:aa:24:19:0a:e6:3e:ff:d7:73:f0:3b:b7:ab:07:d1:
         91:8d:e1:b9:69:41:f5:b3:1b:16:9a:3e:1d:52:49:2c:15:31:
         e4:d1:96:ca:d7:4c:22:f6:37:8d:06:95:a7:66:37:73:15:0e:
         6e:50:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:46 2024 by rpki-client on console-ams.rpki-client.org