Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/170ad902-ddbe-4edc-88ca-78ef78098b54.roa
File:                     170ad902-ddbe-4edc-88ca-78ef78098b54.roa (raw, json)
Hash identifier:          YFhke97udcbzZ7CZaVG7iON1fLHoAwtqsDxi3G/iLuc=
Subject key identifier:   4E:E4:10:FD:7C:C3:9F:6F:B2:05:8D:A2:06:11:09:6E:5A:6C:A3:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       48FF224447FD3007BAB9813AC8B2DFC58EE7CE45
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/170ad902-ddbe-4edc-88ca-78ef78098b54.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.112.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ff:22:44:47:fd:30:07:ba:b9:81:3a:c8:b2:df:c5:8e:e7:ce:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=cb399dea13481ccb9af1dda78fd6aaff0d5b6465b81defdce3d24a1d080d9f31, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b5:cb:40:65:bd:ae:54:76:8a:f3:b7:d5:3a:
                    03:a4:cc:39:b8:22:b8:47:68:96:11:2c:a4:6d:eb:
                    36:b7:43:f4:ff:32:1c:b3:94:e1:df:23:8e:5b:f1:
                    1b:60:c5:46:b0:97:ac:65:33:e8:a4:d5:01:34:d7:
                    95:a9:e8:32:ce:f9:a7:c1:0f:98:03:36:4a:97:7d:
                    96:7b:ae:db:b1:06:66:ed:dc:52:97:bf:dd:be:f2:
                    57:ad:1d:b4:8c:fa:09:d3:1b:36:70:c0:1f:3c:f1:
                    63:4a:d4:9a:5c:b1:9b:03:ad:41:dc:13:86:79:6f:
                    8b:de:9f:0e:12:4a:de:3d:a9:f9:95:f2:4b:9d:a4:
                    b4:3a:fb:90:9b:43:35:5b:f7:e4:53:cc:ed:62:ef:
                    d1:f5:f1:4a:09:a8:b2:23:58:7e:93:f3:03:6e:6c:
                    54:03:ff:c1:a3:e8:31:4c:36:b5:a9:11:1b:97:8a:
                    cb:f7:f6:5f:3e:50:7b:c3:e1:32:62:f3:a2:56:94:
                    45:19:b7:7d:0b:0d:88:ce:ca:ff:86:87:7e:36:f4:
                    8b:2b:e9:5e:a0:3a:79:31:d7:ea:64:76:fd:8a:b2:
                    ce:da:de:5e:e3:4a:84:4a:7d:77:f5:59:c2:0f:e5:
                    02:5a:f5:08:91:43:4f:92:7d:1c:aa:06:9e:e7:be:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E4:10:FD:7C:C3:9F:6F:B2:05:8D:A2:06:11:09:6E:5A:6C:A3:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/170ad902-ddbe-4edc-88ca-78ef78098b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.112.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:73:2f:23:9c:bd:ae:1d:c6:51:36:f3:4b:ff:a9:15:44:
         e6:ae:f7:59:77:83:62:41:fd:23:92:c8:dd:e4:e9:5f:09:55:
         95:2d:1f:c0:fc:10:52:a2:76:73:67:58:49:94:9d:56:e7:8a:
         5b:8f:3b:81:09:6d:c8:ba:de:11:4b:a0:fc:81:98:be:c1:63:
         4c:3f:4f:05:6a:26:fb:3d:0b:96:aa:5b:6b:38:9c:fc:5e:dc:
         b7:44:4f:0f:e2:36:b3:fb:5e:59:8f:03:d4:81:69:70:c4:e5:
         d4:b5:86:94:d1:8b:ac:57:8d:9a:25:1b:a2:05:ec:23:76:4b:
         09:3c:f5:ac:06:40:50:f7:51:9f:c2:96:4f:07:7d:f4:9e:22:
         40:f8:c4:60:3e:a8:cd:ca:1b:55:c2:61:f4:e0:9a:b3:6c:77:
         28:12:c9:04:83:f5:53:4f:e0:e4:ac:4c:cb:70:2a:83:84:4f:
         e0:13:88:c4:cd:2e:8c:51:55:f7:5a:f3:57:62:96:ae:7a:d6:
         fb:07:53:25:b1:11:14:17:c2:8c:d4:61:99:7d:ae:08:40:b7:
         ac:9b:76:98:d2:9b:12:05:8c:c2:32:d9:02:e2:9d:d1:fe:f4:
         bc:98:7c:42:a7:bc:fd:f3:95:ed:4e:57:a6:ca:07:32:1c:a2:
         37:b8:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:04 2024 by rpki-client on console-fra.rpki-client.org