Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ecdb4eb-6c61-4152-aa53-a0c3859a27bf.roa
File:                     3ecdb4eb-6c61-4152-aa53-a0c3859a27bf.roa (raw, json)
Hash identifier:          7BZEHlHe44gWQcmLo6/ciFE6CPi2IEQwrsrsdb+zLMw=
Subject key identifier:   6C:42:F2:D1:C5:1E:0B:97:52:A8:D6:E6:CA:C3:5F:52:AA:B8:45:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14A24800C740023304B7BFA754C39F28DB96611A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ecdb4eb-6c61-4152-aa53-a0c3859a27bf.roa
Signing time:             Wed 30 Oct 2024 00:00:00 +0000
ROA not before:           Wed 30 Oct 2024 00:00:00 +0000
ROA not after:            Wed 04 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        40.164.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a2:48:00:c7:40:02:33:04:b7:bf:a7:54:c3:9f:28:db:96:61:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 30 00:00:00 2024 GMT
            Not After : Dec  4 23:59:59 2024 GMT
        Subject: serialNumber=20edea6f2853fe6b662761f56de37c6c852badbc8a52803bf2e1d6c5d85a62a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:3e:11:05:4b:1a:fc:ea:c5:ba:73:67:b9:
                    29:e0:e0:8b:9d:4d:0b:94:91:6c:ed:5b:6e:75:5a:
                    cd:e6:4e:c8:59:5a:a3:c4:f1:9e:f1:53:b4:ac:30:
                    37:14:86:dd:dd:d5:16:e1:11:bb:9e:cc:91:9c:0f:
                    62:f3:22:68:67:cb:c3:f5:0e:25:1f:95:91:2a:20:
                    a1:3b:6e:56:03:ec:bf:7d:d3:57:02:75:ee:c3:0d:
                    64:17:a8:8b:e9:20:b8:19:55:1a:47:1b:72:f5:c0:
                    d6:13:2f:c9:99:3d:27:21:ed:ee:d6:a4:21:22:87:
                    67:c3:76:87:f7:82:57:9e:57:87:4a:dd:93:12:92:
                    f7:4d:bc:c0:ed:ee:6f:19:bc:4f:1d:7c:31:be:08:
                    a5:e1:d7:ed:5a:81:19:75:9f:90:73:9a:51:ce:74:
                    c7:ef:47:56:40:ca:74:7e:8b:66:3f:a7:61:87:be:
                    e3:b5:28:eb:95:48:28:19:2f:c3:57:e3:bb:36:b4:
                    40:46:e4:74:34:7e:82:9b:33:b8:f6:38:d1:58:0c:
                    76:08:db:e8:cd:bf:c8:7d:03:aa:5d:d0:4e:ec:64:
                    27:d7:98:87:33:a4:7b:22:1b:e5:92:19:16:63:b8:
                    ef:70:5a:b3:11:2a:32:0b:4a:67:f6:40:a5:98:b8:
                    ea:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:42:F2:D1:C5:1E:0B:97:52:A8:D6:E6:CA:C3:5F:52:AA:B8:45:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ecdb4eb-6c61-4152-aa53-a0c3859a27bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:df:fd:03:14:a1:cd:fa:8b:08:a4:59:be:4f:90:68:3c:fe:
         29:c8:d9:67:ab:8e:e3:49:3c:e0:f2:68:54:c7:0a:18:08:0b:
         02:81:8c:d6:71:44:44:33:d3:17:0a:41:f8:23:11:10:e9:bc:
         d8:1d:ef:34:cb:14:66:98:97:c0:05:cf:c1:db:66:12:79:88:
         ee:14:70:62:02:b6:b5:cf:c2:e8:34:69:f4:9f:6e:c3:9a:ee:
         f4:74:7d:f3:20:5e:68:7a:6b:82:40:d2:ce:ef:57:8f:a6:44:
         c4:a1:fc:4a:6b:9d:62:8a:e3:79:3d:cc:bf:3e:e1:25:9d:01:
         5b:09:64:94:d0:71:37:55:ff:ee:27:66:c2:41:b5:43:0f:c3:
         08:ab:ef:ab:eb:41:cb:55:6e:08:0e:a1:2a:93:ad:73:a7:6b:
         27:87:bc:91:34:2f:79:aa:f8:d8:6b:ba:14:59:3a:70:85:41:
         c8:68:49:08:78:c3:c0:bc:27:bc:58:cb:9c:4e:99:d7:f9:59:
         c6:13:83:d9:b9:f7:a9:fc:55:21:d2:bb:5b:3c:aa:ca:42:56:
         f5:af:91:d4:b0:76:f6:db:3b:f5:68:33:4f:8d:42:3d:f5:b1:
         b9:ce:33:86:99:6f:45:76:f9:a5:49:a9:ec:15:ed:8d:80:e3:
         e7:50:6e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:30 2024 by rpki-client on console-ams.rpki-client.org