Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40fca454-65e0-4072-af96-d894b6769d35.roa
File:                     40fca454-65e0-4072-af96-d894b6769d35.roa (raw, json)
Hash identifier:          Jx7Nw2+kN8z81PwPgMXvegbSarkuBVxav3Ltv0YZeDU=
Subject key identifier:   FC:F6:56:B5:4B:A6:F3:49:8A:F7:D7:EC:43:A9:B3:FE:FB:DB:9D:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52194005A1276A549456BCD39A70118FD3802A78
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40fca454-65e0-4072-af96-d894b6769d35.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.134.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:19:40:05:a1:27:6a:54:94:56:bc:d3:9a:70:11:8f:d3:80:2a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=4ef92ae213334a47e2b5cc7849d7a2e32571cf2ce0ddd436d1f6bf8d7784cc1e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:47:c0:5f:74:28:44:c4:42:ee:d0:d0:3c:c2:
                    c8:98:a0:ee:f7:fe:91:c5:21:2d:e1:ea:ae:59:55:
                    66:dc:19:b6:54:eb:1b:1f:f9:8a:b0:d3:70:1f:7a:
                    a1:80:38:5c:15:bf:88:6a:61:21:12:1e:a5:4b:54:
                    03:9e:7f:34:09:0d:4e:7c:93:21:42:32:aa:8b:1b:
                    e5:80:a6:ae:a8:f3:37:f5:0a:82:53:63:98:5b:80:
                    e0:f3:13:57:68:39:2a:39:d2:6f:90:cf:55:7f:4f:
                    46:47:18:3d:4f:fe:ee:76:f5:60:d8:dd:5b:66:09:
                    a3:33:c6:7b:28:5a:31:78:fc:f5:ef:5d:d7:8e:c3:
                    e9:50:56:16:ed:2b:4e:b5:63:ab:e7:53:61:a3:8f:
                    dc:83:17:9c:34:03:5c:b3:b4:54:eb:b6:6b:b0:08:
                    55:41:ab:d5:bb:74:ab:d4:65:95:74:72:f7:63:63:
                    77:01:5f:c8:f7:32:7d:35:22:7a:ea:93:6d:4f:bf:
                    1b:b6:40:ed:1d:1e:b5:da:4e:30:3c:92:37:3c:07:
                    dd:32:71:ce:e9:86:05:2c:e0:95:f4:5a:55:47:28:
                    33:54:e3:e6:1b:13:10:01:ff:d4:4d:ca:4b:a3:bf:
                    39:fd:ce:76:b8:1d:6b:9e:1b:ae:15:9a:9d:6e:b0:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F6:56:B5:4B:A6:F3:49:8A:F7:D7:EC:43:A9:B3:FE:FB:DB:9D:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40fca454-65e0-4072-af96-d894b6769d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:06:48:14:66:f6:e3:9e:0c:2f:c0:d9:d4:23:77:1d:bd:08:
         39:94:14:c1:aa:12:2e:52:82:3a:f1:4a:78:3f:21:fd:23:9d:
         d1:eb:b4:d7:86:cf:d3:47:9a:72:9c:17:e6:c3:fa:ae:47:c8:
         c8:28:bc:99:08:cf:93:d3:3f:f8:72:ae:3f:74:f4:ca:ab:fb:
         36:62:3b:40:f4:8e:40:35:86:99:5d:1d:70:eb:c9:d6:bb:09:
         82:7e:a7:a0:9f:52:de:6e:31:a4:72:22:e7:f0:53:be:8b:4f:
         23:ca:24:04:b9:0e:1f:7c:24:a0:d6:de:5c:50:39:b7:87:f8:
         5c:23:75:75:00:c7:74:98:23:53:11:b3:b0:8e:28:9a:aa:c9:
         1e:47:bd:20:cc:a2:ba:ad:69:76:73:b4:7c:47:08:c6:a2:82:
         f0:de:10:d2:a9:df:86:27:8a:42:96:9b:a9:c8:75:11:95:9b:
         55:1d:11:95:17:fc:84:22:9c:08:36:50:ca:d5:44:8a:44:35:
         97:2e:f2:9a:71:46:68:99:a5:56:96:34:1f:17:c4:9b:07:7c:
         b6:42:ba:82:5d:02:db:00:3d:e8:4f:b0:f8:b8:af:74:f9:8f:
         c8:08:aa:1a:96:1b:1f:db:ef:3d:93:e0:55:26:96:51:22:4a:
         69:ab:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:58 2024 by rpki-client on console-ams.rpki-client.org