Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5956bb2a-8518-472e-bea8-f957550c1b7a.roa
File:                     5956bb2a-8518-472e-bea8-f957550c1b7a.roa (raw, json)
Hash identifier:          /rwDE81hDHW8rCXWIxGO0VysyB6s8rKqLMMeG0lH6Rk=
Subject key identifier:   29:A2:81:0B:9A:43:18:B1:87:A6:D0:43:52:11:E2:E5:C0:F1:62:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D500FFF20D02AE57924BDAA50EA4CAB49CB6F1A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5956bb2a-8518-472e-bea8-f957550c1b7a.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        170.26.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:50:0f:ff:20:d0:2a:e5:79:24:bd:aa:50:ea:4c:ab:49:cb:6f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=cddcc0dffeead47cda42df1f3cb3fe6316ddfee83572b85ae81e534aadd2dec2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:38:18:3a:c8:5e:20:3b:6c:ce:f5:d0:f4:
                    f4:b9:0a:54:68:d2:37:5e:33:d3:bb:26:e2:f8:db:
                    f0:8d:c4:a4:f2:e9:90:e6:b0:46:d7:62:a7:7e:8e:
                    7a:84:3b:05:dd:a6:82:d3:5b:02:18:fa:88:9d:a3:
                    80:76:cc:12:65:79:7c:de:e2:62:b8:7c:e4:84:6c:
                    fc:15:27:73:69:c0:07:59:d8:9d:2f:92:08:36:45:
                    c6:85:14:7a:fb:67:d5:58:e6:98:35:2a:74:4c:22:
                    58:1b:44:fc:96:16:98:2e:90:eb:15:fc:a9:36:e0:
                    17:dc:a1:ed:c8:4a:40:3a:c7:94:58:ea:6f:53:ce:
                    2a:e5:84:a4:dd:43:54:59:ad:1f:98:86:99:b1:f9:
                    eb:f5:01:73:fd:19:46:1c:9f:49:d0:58:4a:19:fe:
                    55:40:79:68:52:c9:ce:66:11:5c:e0:e1:a0:37:65:
                    ca:b0:df:94:dc:b9:da:3b:30:e2:05:87:68:88:a9:
                    99:32:63:3a:c5:41:46:c4:a0:6b:c8:10:ee:33:ee:
                    94:61:1b:9e:19:6e:8b:67:35:9b:c0:04:63:99:26:
                    43:88:2a:b9:ef:86:5c:3f:c0:a5:b6:5c:25:bb:fe:
                    bf:d6:00:62:43:9b:2e:59:95:21:42:b8:b1:4c:30:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A2:81:0B:9A:43:18:B1:87:A6:D0:43:52:11:E2:E5:C0:F1:62:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5956bb2a-8518-472e-bea8-f957550c1b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c3:55:4c:7c:ea:db:85:3c:66:53:84:da:89:b6:16:11:bc:87:
         6e:67:12:66:93:46:f6:12:de:27:ed:59:60:b4:82:12:10:2b:
         7b:5f:6b:e1:f9:c9:83:b6:54:38:96:f8:1d:62:b9:2f:b7:9a:
         e4:15:e5:70:d0:7c:d0:d8:34:a5:a6:84:a7:be:c2:6d:bb:ff:
         41:47:68:b5:a3:76:e5:0b:35:72:d0:3d:8d:ec:02:55:d8:f6:
         fe:a1:fe:30:03:cf:b2:bc:f1:d8:61:49:98:5f:d0:07:b1:f7:
         98:13:67:60:8e:bb:88:6c:a2:25:6c:f5:7d:66:0d:ff:ef:e1:
         f4:71:b1:44:68:7c:11:a6:2b:c1:38:10:0b:9d:29:44:4b:97:
         f7:19:4d:03:ef:94:82:42:e6:5a:08:f8:40:3f:0e:ed:70:b1:
         20:d4:c0:66:4d:a1:62:c0:16:97:e6:04:06:42:67:12:02:28:
         29:e2:ce:82:57:45:21:d5:2a:05:77:9d:4d:ed:82:ff:ac:ae:
         b8:52:f3:4d:47:95:35:dc:83:25:4e:9c:2b:8f:41:d3:b2:98:
         32:dd:b4:5d:de:c3:be:58:96:ee:79:0c:50:2b:ff:ce:6c:9e:
         7d:35:4b:33:7b:be:09:5f:eb:39:15:00:3f:ef:d5:eb:37:62:
         cf:60:bd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:04 2024 by rpki-client on console-ams.rpki-client.org