Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f1b12b8-7d63-4bd6-949b-5ce09f1d110d.roa
File:                     1f1b12b8-7d63-4bd6-949b-5ce09f1d110d.roa (raw, json)
Hash identifier:          eaoc/0bS3gBPGNqJzrEgOJGeXzZztYkmQyRc3ETXTUY=
Subject key identifier:   D8:1B:E5:5F:72:48:54:1D:1B:C9:6B:E3:DB:B9:20:37:C9:F1:30:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       683FCD160E4E60F93834C4CF76545AF0C56049AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f1b12b8-7d63-4bd6-949b-5ce09f1d110d.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        167.2.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3f:cd:16:0e:4e:60:f9:38:34:c4:cf:76:54:5a:f0:c5:60:49:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=755d83fef87d4d92732c98dc79d6f58e424a4775d6461793b3ba4d475957b2b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:fb:d8:58:bd:88:ee:7d:5a:1b:20:02:d2:
                    21:12:46:4b:45:65:a4:72:a4:d8:e8:6d:64:b3:d7:
                    09:48:d6:17:b7:be:94:fe:6a:05:50:83:49:9f:a2:
                    25:d3:89:72:0b:fd:a6:97:86:40:22:de:1a:00:58:
                    d2:a7:cd:9f:0b:bb:1a:f8:c3:fb:cb:b0:44:97:e0:
                    8a:96:97:60:f1:10:bd:92:ce:5f:9b:52:12:df:9e:
                    dd:7a:c7:74:b7:d9:aa:1b:b5:7b:77:ef:40:7a:60:
                    d3:27:02:52:67:aa:41:c3:82:14:48:05:52:5e:8c:
                    82:d3:07:04:5a:e7:8c:ad:94:61:38:fb:bc:45:b8:
                    7b:0f:38:06:ba:c4:70:0a:05:de:ac:53:98:33:da:
                    5b:c4:74:e9:44:46:a9:9c:99:67:10:83:6b:c2:e7:
                    d1:0a:61:b1:f9:14:f8:b0:a9:4a:b2:b5:1f:49:5a:
                    bf:10:14:1d:09:47:a9:ff:7a:b2:06:9e:e6:61:26:
                    b3:d5:72:fc:ec:12:8b:a5:b3:f1:80:1a:28:e1:4e:
                    78:9d:a1:cd:69:13:dc:39:43:95:a2:33:cd:3b:da:
                    12:c7:ec:3c:60:18:ac:ac:0f:5b:1f:4f:c2:c9:80:
                    4a:77:a3:e7:0d:2b:fe:22:04:a8:8c:c1:d2:5b:bd:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1B:E5:5F:72:48:54:1D:1B:C9:6B:E3:DB:B9:20:37:C9:F1:30:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f1b12b8-7d63-4bd6-949b-5ce09f1d110d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.2.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:92:fe:9a:16:53:5d:a3:e8:43:ac:81:87:ab:fa:7b:d5:31:
         dc:3d:4c:8c:41:f3:b3:89:f1:2f:e1:ad:8f:aa:e1:b1:77:5c:
         0c:02:05:d5:b8:c8:c6:bd:30:3c:fc:19:d2:71:9d:b1:95:7a:
         47:cc:3c:c6:dc:28:04:14:d9:95:67:8e:f2:b4:d8:65:1a:30:
         f0:39:5d:06:81:61:25:6d:9b:83:b4:ea:4e:22:bd:ff:a7:bf:
         e2:7e:2f:d4:29:2a:ac:9a:73:42:4a:49:30:33:55:66:0b:87:
         91:23:67:4b:e1:77:c7:30:a2:3a:48:de:74:aa:5a:5c:b8:f5:
         d2:57:9f:51:a9:9b:80:cd:f3:24:84:19:17:6a:58:78:1b:ff:
         f3:0c:69:24:19:35:05:97:9c:56:7e:7c:f1:fc:10:55:65:89:
         ed:08:ff:ec:f0:c9:19:0c:1d:73:09:56:34:c5:2f:ec:8d:e7:
         88:0e:ed:c9:9f:e9:9f:58:a5:40:b0:91:4b:d4:37:36:53:0f:
         33:c5:39:a7:ee:e5:8a:f9:56:1f:af:f5:a4:46:27:8f:d7:dc:
         be:5c:ff:13:5e:d6:2e:00:2d:88:12:52:a9:15:8e:b6:c3:de:
         35:8d:2c:9a:b7:7e:21:53:cc:53:57:1b:af:a8:35:61:c4:f7:
         a8:6b:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:49 2024 by rpki-client on console-ams.rpki-client.org