Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea37de2-ec67-4277-b11f-8ca13a9b72e2.roa
File:                     5ea37de2-ec67-4277-b11f-8ca13a9b72e2.roa (raw, json)
Hash identifier:          pS9fAwd7szlhMnKFy8bXop2ytsT8E+MziKAYJZe33yI=
Subject key identifier:   B6:7E:35:0C:4E:3C:00:B6:1F:AB:FA:BD:3B:9E:74:F9:B1:7A:BF:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7442FEB6AE23BA42C6EBDDD4CEF111D8A7D680BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea37de2-ec67-4277-b11f-8ca13a9b72e2.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        99.151.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:42:fe:b6:ae:23:ba:42:c6:eb:dd:d4:ce:f1:11:d8:a7:d6:80:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=97d410fbe85138fb7fe805acad4dd9f80122dedfc3f4e20370075b2f122615c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:f1:d8:66:85:0f:29:2f:32:14:75:0e:15:
                    3c:58:bb:a7:9c:ad:f2:19:70:ea:d5:54:f2:46:af:
                    97:c9:72:29:32:c4:1c:66:28:f3:f6:a6:63:0d:8c:
                    d5:8f:a2:4f:3d:af:a4:cf:38:b4:35:3f:44:b6:c9:
                    7e:9c:ea:1e:48:11:bc:c2:58:00:ef:71:da:3b:0a:
                    72:e1:e1:4f:eb:0a:05:c4:9d:30:2c:6c:d7:ad:c5:
                    1f:b8:0e:09:7f:73:48:c3:02:c5:3f:d2:0e:40:49:
                    b6:d2:6d:e9:f5:dc:89:53:ea:a1:3e:5b:03:31:2b:
                    ce:81:9f:9a:ca:3c:09:2f:63:53:67:55:d5:1e:b0:
                    a2:3f:02:74:ef:6e:82:b1:88:c4:6e:aa:14:68:50:
                    ae:fd:fb:b8:3f:0e:92:0d:8c:5e:ee:f5:07:39:85:
                    fb:e8:57:3d:bf:53:e9:c8:d8:b8:28:59:dd:5b:07:
                    a2:74:59:45:b5:9d:5b:12:61:7f:89:13:47:80:8b:
                    7d:3f:c9:b1:65:50:47:59:70:ab:ca:43:41:c9:20:
                    8b:af:3a:0a:ee:0e:8c:f9:93:a5:f3:27:c3:31:f4:
                    06:60:36:e4:7f:f8:00:10:b3:d3:60:2f:fb:a5:da:
                    20:35:0e:9c:4a:7f:7b:5b:52:98:98:d0:c2:3c:91:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7E:35:0C:4E:3C:00:B6:1F:AB:FA:BD:3B:9E:74:F9:B1:7A:BF:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea37de2-ec67-4277-b11f-8ca13a9b72e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:58:19:57:52:cf:21:e9:f0:cf:91:0f:5e:32:ce:1c:d8:24:
         99:e8:96:52:db:a0:72:35:fa:86:06:da:0a:74:fb:e7:bb:81:
         77:a7:ff:4d:40:63:0f:8f:9c:23:a4:ea:c2:b7:a8:71:0d:3f:
         a8:b2:3f:26:13:a1:26:e9:92:0d:38:a4:9b:fb:c4:82:28:8d:
         d9:ab:4b:1a:af:ae:8c:e3:12:a4:f5:23:19:89:76:1b:f3:9c:
         0f:d5:93:a8:72:8c:04:3f:fa:ff:59:fb:0b:5d:48:db:04:b3:
         58:c2:d4:91:c0:61:0f:ed:21:8c:79:a2:fd:a7:b9:bd:93:9a:
         82:21:81:a9:09:9b:1a:33:62:e4:42:e4:dc:72:1a:19:59:94:
         41:66:e9:95:db:fc:1d:15:22:ff:dc:9c:e5:e5:a4:75:fb:23:
         f8:7a:a3:13:eb:a5:a3:f0:9a:c4:7d:5b:40:32:ae:97:94:3d:
         86:e1:8a:d5:cb:72:58:b6:db:e2:0d:e6:f2:0d:74:7d:7e:8c:
         d2:77:f7:2e:2e:6b:20:aa:1e:15:9e:2e:dc:66:6c:24:9b:be:
         5d:3d:a4:4d:6f:02:c5:a6:9b:af:3d:53:0f:79:1d:3c:1f:d4:
         67:08:3f:57:1e:ab:d3:fd:cd:85:30:c6:06:0f:cb:4e:37:41:
         da:43:53:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:05 2024 by rpki-client on console-ams.rpki-client.org