Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/602e9fe1-e0a7-48ef-8061-c272bb5defb8.roa
File:                     602e9fe1-e0a7-48ef-8061-c272bb5defb8.roa (raw, json)
Hash identifier:          dRNJJOGz0173ZTxZN0C0VMr7/plQYKxIWVwQ+6vAVr4=
Subject key identifier:   78:5D:7E:B7:AD:32:DA:4E:44:C6:17:0E:0E:AA:83:5D:AF:FC:98:1F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2039DD7C8A39187A87F430ED305BBDE77E4D3E69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/602e9fe1-e0a7-48ef-8061-c272bb5defb8.roa
Signing time:             Fri 23 Aug 2024 00:00:00 +0000
ROA not before:           Fri 23 Aug 2024 00:00:00 +0000
ROA not after:            Fri 27 Sep 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.25.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:39:dd:7c:8a:39:18:7a:87:f4:30:ed:30:5b:bd:e7:7e:4d:3e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 23 00:00:00 2024 GMT
            Not After : Sep 27 23:59:59 2024 GMT
        Subject: serialNumber=affe9599899013efcfc7bf0431de00f0665ab5ce2a8044e14cd8a125c7dfb931, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:41:1f:2a:3d:25:c7:79:99:e2:0f:8e:aa:
                    8d:35:fd:09:69:c8:4a:20:04:ab:ae:27:d2:95:18:
                    73:b9:3c:32:9b:a8:ed:84:e5:c6:f1:2a:71:22:e6:
                    1f:36:87:7c:fe:d6:46:68:4a:6a:6a:72:dc:b1:21:
                    3a:c7:0a:81:38:29:59:39:6e:a2:46:b2:17:70:c1:
                    d5:4f:be:4a:b0:bb:91:93:30:c3:e7:38:6b:11:56:
                    54:23:02:de:d0:c2:dd:cb:49:28:f0:04:21:e2:c4:
                    9b:ec:ce:ce:ae:0a:b2:31:f1:8e:cf:54:cb:22:cd:
                    6a:a2:fe:8c:97:1e:04:49:ea:be:42:a3:a1:96:dc:
                    73:59:b3:bd:d8:64:0a:b6:b8:1b:57:7f:9f:24:6d:
                    ea:63:06:5c:4d:fb:5a:b3:82:95:8c:78:28:98:bd:
                    8d:71:f4:ba:6d:85:8e:8e:ee:2b:a3:06:01:f7:f1:
                    89:d6:f8:18:d6:b5:6c:0d:68:98:7d:05:c4:d7:bb:
                    d6:20:c1:8a:70:72:95:16:40:a8:e3:b9:7f:2b:f4:
                    af:7f:92:51:4c:2f:8c:ca:71:2f:ff:72:ca:53:0d:
                    27:ab:55:05:76:01:75:49:38:cd:7c:9a:23:74:83:
                    5f:3e:04:81:9e:15:fc:50:4f:80:9c:69:c8:69:6b:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5D:7E:B7:AD:32:DA:4E:44:C6:17:0E:0E:AA:83:5D:AF:FC:98:1F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/602e9fe1-e0a7-48ef-8061-c272bb5defb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.25.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:8e:98:12:57:2b:d5:6d:e4:c0:fd:c3:a3:d3:9b:1c:de:6b:
         44:87:36:8b:8e:0e:33:e8:72:30:d7:fa:0d:68:d7:7e:74:88:
         00:4a:d8:25:21:8a:7e:e0:c1:37:da:7c:6e:e5:0f:5f:b9:03:
         7c:a5:f4:22:fc:af:33:df:f0:20:1b:04:9c:84:e1:96:62:b2:
         44:9e:a4:55:24:25:26:d1:be:66:db:8e:b1:25:33:0e:c4:56:
         40:5b:0f:aa:26:33:2b:69:5f:fe:14:37:dd:41:ca:47:27:36:
         04:d9:db:e2:7e:7b:12:47:74:2c:69:44:a5:bf:6e:42:99:3b:
         1e:ef:0e:30:7a:6b:90:6b:45:37:a9:d7:5e:03:f6:45:6b:ec:
         f5:7c:77:25:d1:a1:c7:4a:1e:14:aa:0b:79:b7:eb:d3:37:b0:
         a4:61:67:b8:54:77:61:d4:6e:1c:3b:9a:0f:a4:f3:8d:d2:35:
         43:0e:9a:73:7b:d7:29:d7:00:ea:da:df:8e:a3:10:50:fe:43:
         10:13:41:86:af:dd:7b:d5:39:f6:71:f4:15:17:5f:48:eb:85:
         86:fb:9c:d2:18:3f:3d:36:62:e5:88:ca:21:4d:3d:fe:8b:2a:
         b2:fc:dd:20:af:70:70:81:58:7a:7b:c4:8c:2e:b4:d0:99:38:
         a9:e6:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:17 2024 by rpki-client on console-ams.rpki-client.org