Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aee134c-de10-432e-89ff-91c96e41b6d6.roa
File:                     3aee134c-de10-432e-89ff-91c96e41b6d6.roa (raw, json)
Hash identifier:          1wNcvMsq0zykVg5KwIo+LFk6Lx8YmnG2WddzTN2GVQ0=
Subject key identifier:   EC:BD:D8:E9:38:53:51:03:E6:CC:78:70:6D:55:7E:66:31:F1:66:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6304F3B88CD6D1E9A2BEB884A08A1A3F48C24BBE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aee134c-de10-432e-89ff-91c96e41b6d6.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.26.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:04:f3:b8:8c:d6:d1:e9:a2:be:b8:84:a0:8a:1a:3f:48:c2:4b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=faf5348d36688545efc6d1e81c6a836f3a75660c77d3bcaf98323e6da2d57414, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:a1:1e:9d:c3:57:48:1b:25:46:44:b4:5d:
                    f0:6f:d8:9e:a5:cc:74:1f:21:41:31:a6:f4:fc:9e:
                    2f:97:eb:b0:63:ed:95:b7:f8:e7:6a:09:1b:26:ae:
                    a9:2c:45:b5:bf:d9:06:5c:23:fd:22:c7:67:14:8f:
                    cf:f3:26:bb:1f:26:03:5a:e0:f3:6b:92:7d:16:7a:
                    93:ab:5f:fc:06:05:1f:b1:2a:92:3f:68:94:2d:b0:
                    03:10:79:1e:51:48:57:91:fc:04:c5:a1:10:ea:79:
                    7d:22:a5:73:91:f2:80:91:c3:73:f5:78:73:0d:88:
                    5b:65:48:97:ab:5c:8c:d9:d2:a8:41:cf:66:2a:1f:
                    04:13:e2:28:48:8e:d1:92:6e:b8:fc:dc:ff:90:50:
                    19:b7:59:1d:35:24:2e:80:0a:6d:88:ff:cd:64:5c:
                    38:18:5e:e8:a4:48:98:0d:50:e9:bc:4f:46:8a:de:
                    8f:05:4d:ec:23:73:7d:f1:51:58:df:67:fd:38:9c:
                    e1:d4:58:f3:55:50:2c:f6:ea:bd:7c:ef:c7:85:a5:
                    a1:08:44:ed:3c:fa:a0:48:39:45:08:56:a7:19:fd:
                    c6:cf:7e:f4:55:6a:e5:33:c3:bc:71:fa:fe:e9:26:
                    31:0a:12:42:32:fd:7a:c9:8b:80:a7:77:93:4b:9f:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BD:D8:E9:38:53:51:03:E6:CC:78:70:6D:55:7E:66:31:F1:66:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aee134c-de10-432e-89ff-91c96e41b6d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d0:64:d5:e8:5a:4e:23:b4:90:e5:01:cc:08:33:c3:ad:f5:55:
         92:e5:1f:b7:8a:10:ba:0d:0e:8f:26:ab:59:11:da:56:d8:ed:
         a6:a2:db:34:90:41:9d:71:10:09:30:cf:a0:1d:cb:fc:15:2f:
         2c:42:ce:6c:f4:20:ad:dc:69:cc:e4:de:df:c8:75:84:bc:d0:
         9a:7f:f0:2c:08:d7:f3:fa:1a:73:05:92:09:6d:ca:f4:aa:0c:
         58:6d:d2:91:6b:78:1d:90:bd:71:66:43:93:dd:4d:ab:f8:00:
         6a:46:51:40:81:1e:b0:54:d6:2c:c6:13:18:93:4f:ee:da:fb:
         c7:48:69:13:de:b0:b7:33:6a:bb:e4:d5:13:6a:3f:a5:75:d3:
         87:e6:1c:dd:85:d0:51:ae:2d:d9:dd:2d:89:e1:33:3e:6d:4a:
         54:00:64:48:05:cb:77:95:7e:0a:a7:a0:c4:d3:f7:1e:a5:f2:
         cb:34:ed:7e:33:be:ac:c0:48:2f:df:00:99:e5:e0:e6:25:3e:
         8a:c1:f0:6d:e9:bd:db:17:bb:2e:03:e1:f6:14:f4:7e:7c:76:
         fc:d8:36:21:3e:51:07:70:bf:8b:41:e8:0c:ce:ee:f5:1c:a4:
         39:6a:77:13:f2:d1:f6:ce:2d:fa:68:fa:91:53:57:98:52:5f:
         e1:27:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:57 2024 by rpki-client on console-ams.rpki-client.org