Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/412739bd-5117-4702-a8eb-b631ef2e14b6.roa
File:                     412739bd-5117-4702-a8eb-b631ef2e14b6.roa (raw, json)
Hash identifier:          RmTuF6pph+piqA+bYrMSnAAxfFElAVKxdQ7VFHIMOwE=
Subject key identifier:   A6:19:7F:CD:48:9E:07:14:D0:A0:E4:14:A5:EF:6E:5A:1D:17:8F:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CEB15582931632F4D3E20D569135F03CAB23F3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/412739bd-5117-4702-a8eb-b631ef2e14b6.roa
Signing time:             Mon 19 Aug 2024 00:00:00 +0000
ROA not before:           Mon 19 Aug 2024 00:00:00 +0000
ROA not after:            Mon 23 Sep 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.25.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:eb:15:58:29:31:63:2f:4d:3e:20:d5:69:13:5f:03:ca:b2:3f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:00:00 2024 GMT
            Not After : Sep 23 23:59:59 2024 GMT
        Subject: serialNumber=54f12fb443359217b9890e2ee239b211d75a900bb9aa008f08be7dbaef346ba5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:51:d2:63:83:ac:58:0c:b3:27:98:e4:b8:
                    41:63:fa:25:d1:5b:b2:30:0c:9a:c9:fd:3a:8c:91:
                    11:62:2a:13:e0:21:75:2f:00:2c:8f:b3:f0:3c:ae:
                    66:c5:21:12:d8:60:2d:81:73:51:16:ca:05:2c:5f:
                    a2:3e:bc:74:e3:6b:ef:70:72:1f:f2:61:35:ec:39:
                    1b:29:7c:46:00:ed:2f:5b:02:3f:56:45:0c:d1:ac:
                    9a:bb:f3:70:52:5e:a3:2d:c1:8a:6a:5b:ca:b2:74:
                    e7:90:ee:eb:6e:8f:80:4e:42:ce:69:c3:c6:06:12:
                    57:3e:48:12:67:9f:eb:56:4f:2e:6d:26:3d:be:3e:
                    db:9b:dd:d5:86:e8:9d:ac:aa:3c:f6:fd:9e:2c:e6:
                    74:aa:19:2a:f6:c2:1c:b9:44:a5:30:61:95:3e:eb:
                    27:0b:60:3b:56:5e:47:86:ed:f2:64:9a:5b:25:00:
                    d6:1a:8e:64:99:8e:57:a5:8c:52:71:2a:b2:d8:08:
                    96:0d:29:83:af:28:e1:06:14:ff:d1:48:68:45:c4:
                    1a:5d:ab:6c:5e:f3:98:4d:5f:a3:0a:cc:d0:16:42:
                    ab:bb:88:7a:ca:21:1a:83:cf:3d:6b:7c:ea:51:48:
                    3a:21:fb:7d:96:86:cc:53:b5:8e:18:46:cf:14:2a:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:19:7F:CD:48:9E:07:14:D0:A0:E4:14:A5:EF:6E:5A:1D:17:8F:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/412739bd-5117-4702-a8eb-b631ef2e14b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.25.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:2e:40:8f:d0:f0:06:a8:be:de:5b:41:67:b0:b9:70:66:ac:
         99:5a:63:f7:e7:8a:0d:44:4e:06:bd:19:68:ca:09:09:a7:95:
         23:7e:3d:da:ad:4e:2e:21:2c:3a:3b:33:b5:cf:5b:61:41:54:
         2b:0b:d7:7e:61:ce:71:b6:1f:fc:d5:4a:7e:b2:d7:a2:bd:49:
         14:fb:9d:d6:88:51:86:b1:96:66:f7:45:ed:18:4b:b8:d5:6a:
         4e:4a:92:ff:84:85:b1:9e:5a:a1:5e:c3:07:6c:39:99:69:c5:
         4a:a9:2a:16:a1:ec:f2:ba:cd:a4:ab:11:c3:69:09:b4:a1:1c:
         ec:f6:cc:40:c6:7d:a8:b3:35:ae:f5:48:55:35:c2:0c:65:7e:
         f9:78:10:1a:e4:ad:bd:ec:7a:f7:a4:29:88:10:2d:44:03:0f:
         96:ef:50:35:cd:72:71:1a:79:27:ca:d8:b0:8e:71:5f:3c:c2:
         df:99:8d:a4:7c:17:98:c7:a8:3a:1d:b7:d7:9a:15:a2:56:37:
         0f:b2:cc:97:a0:5a:06:40:7c:02:5a:da:5d:0f:21:2b:d9:e9:
         54:e1:9c:52:85:89:a6:e1:a1:8c:ce:93:e5:e5:94:0b:f7:b2:
         fa:14:dc:df:43:02:da:b8:75:ea:96:10:c7:bb:50:f7:ea:69:
         99:b5:f1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:13 2024 by rpki-client on console-ams.rpki-client.org