Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f2ae08f-13d5-40db-9dd9-09555992b0cf.roa
File:                     1f2ae08f-13d5-40db-9dd9-09555992b0cf.roa (raw, json)
Hash identifier:          LRvfiaEX1FJ9KGgVQMpgJSRcdrueSsjjuUky7W7w3Ls=
Subject key identifier:   4F:A2:96:EE:3C:1D:BB:5E:C2:7D:CE:9D:8B:DD:D3:FE:85:C3:5B:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E224C61FEE670CD78AAC3A0EE40425579E60AE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f2ae08f-13d5-40db-9dd9-09555992b0cf.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        54.8.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:22:4c:61:fe:e6:70:cd:78:aa:c3:a0:ee:40:42:55:79:e6:0a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=a45dc77f7490c38359a4dceb1d679e45e9ea2c36cdb2fb25b53dc872bd59aff3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:00:53:94:8f:70:12:1a:e7:75:b4:75:92:
                    e4:98:fe:0f:69:ce:65:71:17:53:a7:c1:06:d4:f9:
                    42:fd:00:57:26:e0:2e:d1:64:47:19:84:47:df:16:
                    fc:55:a0:81:6c:89:cf:99:74:c2:37:51:ab:ba:59:
                    e1:7b:d3:56:c3:0b:b5:69:e6:12:f0:29:c6:68:68:
                    ac:75:38:c2:2b:2d:57:1f:68:b6:dc:2a:60:49:2e:
                    be:ec:ed:d1:8e:26:05:ab:b0:82:44:1a:11:1c:7a:
                    9f:40:d3:6b:56:5c:8d:80:ec:f7:a6:fe:7c:50:9d:
                    b0:97:b8:94:3f:40:23:e6:b9:ea:ef:21:09:4b:df:
                    fb:17:12:17:03:d9:13:53:5d:08:08:1d:d1:b7:07:
                    46:7d:a7:69:6d:b7:60:2b:48:cb:6c:4d:ad:e6:02:
                    f9:19:db:f4:82:c2:fc:e9:70:81:1d:59:b6:0e:8f:
                    88:ee:51:85:9b:a0:16:aa:4b:e7:e1:b9:b3:3b:a1:
                    79:40:ac:16:fd:36:e7:e8:44:f5:d4:72:6e:27:31:
                    d5:58:54:61:ae:54:58:bc:38:6f:bc:26:47:f3:9d:
                    0f:f7:7c:52:0a:fa:41:2e:9e:f0:05:3c:84:9a:01:
                    4d:60:5a:23:e7:d2:ec:91:ce:b0:e8:e4:69:46:65:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A2:96:EE:3C:1D:BB:5E:C2:7D:CE:9D:8B:DD:D3:FE:85:C3:5B:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f2ae08f-13d5-40db-9dd9-09555992b0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.8.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c0:c5:8c:7e:d7:24:64:e9:81:ee:1b:a3:91:53:6e:ac:6b:d2:
         e3:3b:14:ea:d0:28:cf:51:33:cd:d0:ca:7d:8e:33:8d:c9:60:
         e6:ac:40:79:be:71:66:88:f7:64:ac:88:e1:06:55:f0:e1:3c:
         81:a2:6e:f6:79:39:f3:33:fa:27:5f:77:3d:b8:54:be:c0:c7:
         2d:e6:b2:8c:e6:3f:1b:cf:9d:68:de:8e:80:88:d6:7a:fb:41:
         aa:e2:f2:ce:7e:d3:cb:f9:e9:a8:c7:74:ce:c0:42:d9:cf:1c:
         13:dd:78:a2:e1:04:d4:ff:54:92:c8:35:b1:8b:76:a2:ea:e4:
         28:65:91:1e:50:38:80:9c:5b:b3:af:65:d8:35:22:b1:dc:21:
         62:9d:38:cc:7c:67:33:72:bf:1c:eb:15:fc:e2:ac:c9:8a:b0:
         ab:ef:17:82:f3:29:26:61:bb:20:9b:b4:e8:64:09:15:0f:b9:
         83:8a:9f:6a:cb:51:af:50:ef:53:9b:16:45:a9:1c:36:9e:8c:
         ce:fb:e5:59:70:a9:b3:d3:8c:d6:3b:ab:97:53:03:10:2c:58:
         40:01:3d:00:09:f2:ce:c4:5a:95:b8:e6:0d:42:c6:b4:cf:34:
         46:27:a1:c8:11:73:ec:8a:04:3a:ce:ab:79:28:60:67:9d:bb:
         06:73:12:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:46 2024 by rpki-client on console-fra.rpki-client.org