Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa
File:                     2685e722-0e36-4c7d-81cd-710122343f21.roa (raw, json)
Hash identifier:          /er2OIlUkpGsHQWL4DF2zfxnLi5Jl5zCGbS9z/owqmY=
Subject key identifier:   DB:7F:8D:6C:70:40:8A:3B:58:73:DE:AF:1D:71:8C:6F:CA:15:E4:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20089807F2BE6F1AAB41CA1525344A9B36229671
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa
Signing time:             Tue 19 Nov 2024 00:00:00 +0000
ROA not before:           Tue 19 Nov 2024 00:00:00 +0000
ROA not after:            Tue 24 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        216.252.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:08:98:07:f2:be:6f:1a:ab:41:ca:15:25:34:4a:9b:36:22:96:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:00:00 2024 GMT
            Not After : Dec 24 23:59:59 2024 GMT
        Subject: serialNumber=84f76325bdd1eb8b140b643a91d043fb874e0a50ddc5f456a8b9bfff30fca706, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:d0:01:e1:79:d6:9e:5f:ff:02:f5:02:4f:
                    0e:40:2c:ad:90:ff:16:a4:3f:b1:cc:d5:f6:5a:18:
                    03:1f:e2:e8:98:15:ce:a6:2e:ea:69:62:7a:55:60:
                    04:47:c5:b7:f3:88:29:9f:2a:b8:c8:ab:ca:b3:87:
                    80:7b:97:aa:83:f4:6d:d2:ca:41:60:1c:c4:88:fd:
                    f8:08:2c:17:d3:8a:ff:73:e0:5c:af:f8:1d:08:f1:
                    4f:f3:e8:93:23:63:d1:4f:a8:f0:02:d0:cf:8c:d0:
                    ca:92:6e:4c:df:b1:af:9b:97:af:97:8e:c4:0c:76:
                    d7:bb:32:11:26:c5:28:18:a6:da:3a:d5:f2:c6:8d:
                    49:b4:59:1a:c9:da:b8:68:65:7b:d8:22:f5:d4:39:
                    08:08:3d:9b:6e:3d:01:38:32:fd:a1:48:7d:af:f2:
                    3c:4a:35:fc:df:5a:d2:17:5d:89:b7:77:30:06:9f:
                    a0:ad:f2:48:16:64:29:e6:19:99:6c:40:0d:46:5d:
                    10:27:41:19:af:e5:42:b0:9d:ca:d5:69:c4:67:22:
                    d2:9d:6b:17:31:41:ea:ec:26:36:3a:3f:53:9e:14:
                    83:7a:a3:56:b7:d9:9b:e0:15:22:1b:7f:a5:2b:3e:
                    5c:f8:73:76:f5:92:67:db:9c:f8:5f:5d:89:68:72:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7F:8D:6C:70:40:8A:3B:58:73:DE:AF:1D:71:8C:6F:CA:15:E4:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:0c:4e:45:07:52:22:48:28:4c:fc:8d:02:7f:0d:3c:1d:c3:
         f8:a8:19:52:41:ef:71:cb:03:1e:fc:a6:13:7d:12:7c:4f:01:
         d4:e1:0b:c0:d8:05:fd:3d:00:6d:28:f3:88:db:a0:04:7e:6e:
         85:e1:ef:b5:07:1e:58:ca:ab:08:b3:50:43:13:bf:1e:56:14:
         95:1e:5f:ff:7d:a3:a1:16:3b:f7:73:40:c5:1b:65:cd:08:e0:
         87:b6:81:f6:9b:67:16:89:d2:dc:39:e2:52:9a:c7:9b:df:ab:
         2c:aa:e5:f8:80:c8:fc:a8:3b:31:59:85:97:df:6b:50:03:58:
         21:8a:2a:f0:9c:a6:60:7f:69:2b:8e:eb:1f:76:fd:2f:e5:a2:
         32:8f:20:3f:49:49:09:da:7c:6f:c1:7e:18:49:3e:27:63:77:
         70:73:1a:3a:f6:d3:d2:cb:96:6a:64:9c:fc:0e:c6:42:42:12:
         6f:f2:d8:9e:68:d9:36:52:80:1e:57:5a:6a:6d:a1:bc:67:cb:
         84:85:c9:26:2d:61:4a:7a:da:a6:ac:3a:97:9b:2a:ac:24:76:
         8f:a8:49:f8:89:50:bf:55:b6:bf:5c:87:51:f7:40:75:8a:86:
         c5:13:7c:56:77:89:ac:70:7f:89:ca:c2:0e:18:48:c0:97:2f:
         20:e2:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:51 2024 by rpki-client on console-ams.rpki-client.org