Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15c12d12-5fbd-40c7-9fa8-ee85ea857c0f.roa
File:                     15c12d12-5fbd-40c7-9fa8-ee85ea857c0f.roa (raw, json)
Hash identifier:          RY0AmWmVzyi0dkMATOeESgZkeQlayUtwNVd3/CkTqEM=
Subject key identifier:   A6:DF:B4:36:68:74:55:65:C4:CB:A4:01:9E:B9:51:B8:8D:A2:D0:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D50ED3B2D3C6434568780CD945BC5EA3DC8C7FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15c12d12-5fbd-40c7-9fa8-ee85ea857c0f.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        54.6.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:50:ed:3b:2d:3c:64:34:56:87:80:cd:94:5b:c5:ea:3d:c8:c7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=77da24e06583fcab83276a7043590eaf29058f69752ec8e8f230b392538df54a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:80:92:77:e8:bd:40:a5:a2:f9:a8:b6:f7:
                    51:ee:00:a8:74:bb:54:06:9c:82:54:b6:b9:8e:5d:
                    45:fd:1d:26:f4:de:ce:62:84:be:47:87:d9:f4:8b:
                    d1:43:cf:af:29:51:f7:6a:86:88:63:a9:40:79:b4:
                    75:ea:65:b0:4b:d6:6f:29:1c:ed:33:e8:67:56:05:
                    d8:8f:45:01:83:60:33:05:6e:85:9e:91:66:bb:83:
                    dd:2c:85:86:53:25:71:53:3a:a1:24:e2:d0:ab:87:
                    82:ed:e7:ab:32:c2:5b:fd:21:3c:bb:9e:e9:ac:08:
                    37:8e:53:00:3f:b6:e5:a2:96:50:c7:95:28:21:03:
                    01:05:da:30:15:b6:f7:6b:f0:f0:51:f6:11:3c:b8:
                    80:46:b4:90:37:e3:9e:15:a8:ba:8a:3b:68:6a:6d:
                    39:9d:48:b4:a8:c6:10:03:05:65:d6:1a:e4:84:55:
                    9e:2a:4e:6d:2a:fc:a8:ef:08:65:e7:71:63:fe:4d:
                    40:21:08:b7:49:fd:77:46:27:fb:9c:17:c5:41:a5:
                    f5:d2:2f:3c:d4:1a:f3:e4:53:c0:2e:8d:2e:a3:93:
                    fc:0c:76:8a:1f:5d:6f:7e:3a:4d:57:86:1b:9c:f7:
                    1e:54:9d:a3:b3:6b:07:4a:fb:02:15:e5:aa:e6:2f:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DF:B4:36:68:74:55:65:C4:CB:A4:01:9E:B9:51:B8:8D:A2:D0:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15c12d12-5fbd-40c7-9fa8-ee85ea857c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:5e:52:22:04:44:82:bf:ba:c6:4d:9f:80:b3:6b:d5:44:35:
         6d:d7:56:ba:8c:48:20:c8:5d:ce:95:44:79:9d:02:21:7b:8a:
         fe:67:20:8e:99:c6:6c:24:7d:41:41:75:cf:fb:8c:8e:00:bf:
         b9:8e:94:9f:0b:a9:66:5d:5a:9e:31:93:80:17:49:25:3b:6f:
         f3:ea:69:c1:de:ae:3b:11:55:f3:73:9c:72:41:6e:51:52:9f:
         78:06:0f:23:00:69:cf:86:99:30:0f:f9:c2:4c:11:1f:02:1a:
         00:43:0e:74:31:16:17:ea:7d:4d:b5:f9:dd:be:61:89:8a:ca:
         f4:88:f9:f9:83:73:97:cd:c9:13:69:d8:6d:90:b9:01:f6:51:
         66:39:d1:90:4c:9d:c2:08:9d:a4:cd:19:68:47:e3:ff:80:b3:
         6e:7c:8f:8f:ba:e8:84:dd:8f:8d:eb:ff:eb:16:27:8c:e8:74:
         a4:87:88:16:b7:84:b9:31:21:58:94:e3:f5:a2:8c:7d:79:e8:
         32:da:7f:b0:3f:01:c2:f8:a9:58:9b:34:dd:09:26:21:06:32:
         d0:dd:65:86:8f:ad:03:ee:fd:cf:f2:92:f7:fc:7a:1e:58:fb:
         70:77:30:81:16:12:83:e0:3d:9d:f5:cd:43:0b:2e:cf:d6:bd:
         c0:3a:d1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:19 2024 by rpki-client on console-ams.rpki-client.org