Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c5d2c17-a765-48ec-90db-d45e2b8e667d.roa
File:                     4c5d2c17-a765-48ec-90db-d45e2b8e667d.roa (raw, json)
Hash identifier:          XQjf3Yf8WtW8qpjxuXNtruMPmcTyZnYPCjV5jGOLkqQ=
Subject key identifier:   4D:71:13:08:7C:5E:42:8C:BC:B0:1D:04:F0:28:91:29:AF:4D:AA:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57243E1BEDED1E410B029E3217B315D56E98B2FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c5d2c17-a765-48ec-90db-d45e2b8e667d.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        54.0.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:24:3e:1b:ed:ed:1e:41:0b:02:9e:32:17:b3:15:d5:6e:98:b2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=bb72c6bfe3e176318a628dd46faa825ebd4e1123e48fe8378a3587e2a908d76f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:86:39:18:05:7c:bc:4b:6d:57:69:61:c9:
                    60:f6:b7:03:c6:9e:fc:82:65:20:9e:b4:b2:2d:4e:
                    82:96:02:e5:1d:1a:87:05:88:01:2c:53:9a:d0:4e:
                    f8:bf:6f:7f:0b:0f:e3:62:1d:87:3b:fe:96:1a:af:
                    f8:84:31:26:4c:db:ee:00:28:26:4e:57:04:56:3d:
                    9f:d0:05:1d:e5:68:76:81:69:f1:16:c0:7e:b8:30:
                    b2:de:82:bc:26:17:51:51:39:60:43:a8:4e:c6:d5:
                    a7:b6:2c:98:58:98:b1:fe:a5:25:e6:e5:27:92:f4:
                    0d:04:09:fb:17:8e:fb:1e:a8:17:8c:e3:ba:e7:c3:
                    0b:29:ee:bf:39:20:1c:5c:7c:45:a9:52:77:c8:70:
                    43:8d:ce:ac:e0:1c:6c:0a:a7:01:12:cc:29:e5:4a:
                    b8:91:0d:1b:89:eb:f9:cc:c5:08:4b:cc:8e:9d:56:
                    d1:1a:64:61:62:b3:93:1f:29:59:a6:d1:eb:4a:b4:
                    09:79:78:13:33:49:7b:0d:82:95:1c:0f:f1:fb:ad:
                    d9:f9:0e:68:68:47:ea:a0:5a:c7:cb:da:0c:61:13:
                    86:4f:01:83:39:47:42:07:34:8a:22:3a:d3:4f:21:
                    49:15:57:5b:69:b1:ea:c5:29:b9:38:a3:d0:c5:47:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:71:13:08:7C:5E:42:8C:BC:B0:1D:04:F0:28:91:29:AF:4D:AA:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c5d2c17-a765-48ec-90db-d45e2b8e667d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:0a:e3:6a:d3:69:ec:34:18:78:16:d6:65:c9:b9:fe:05:df:
         97:53:29:0f:8f:91:85:69:8a:46:6f:5c:d8:0b:ec:85:5d:ac:
         68:fc:0e:97:ee:26:06:ad:fe:e2:3d:cb:f8:72:06:8e:6e:f0:
         e3:79:88:cb:f4:f4:b9:ce:6c:22:f8:b4:da:27:fd:b6:e6:9b:
         c9:9f:28:7b:9a:1c:df:33:5c:97:79:6a:de:0b:76:16:0d:e7:
         71:66:45:b0:f6:0e:65:cb:de:b7:4c:ca:02:c6:ce:85:5d:4a:
         97:f6:32:d7:00:be:5a:a3:e7:8e:84:06:75:75:63:1a:e9:a2:
         e1:d8:16:b5:c9:2c:24:44:d9:bb:c2:14:7a:fd:1d:29:19:b4:
         7e:41:1d:c6:3a:21:bb:5e:4f:aa:3a:f1:1d:32:eb:2d:a5:09:
         9b:79:70:0f:a2:a1:59:e3:cd:28:38:3b:a4:69:dd:37:5f:25:
         c5:33:f1:44:75:fc:4d:69:cb:97:e0:71:4e:cf:1b:cb:26:6f:
         bd:4d:c9:68:0d:dc:54:4e:ca:c6:99:e9:84:58:0c:f4:5e:16:
         93:d2:cf:95:8a:0b:0e:8c:92:62:4f:45:f5:3c:1d:c0:6c:76:
         9f:23:97:8c:76:cb:72:89:1d:4b:ef:3f:75:12:49:94:28:12:
         a0:97:ae:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:33 2024 by rpki-client on console-ams.rpki-client.org