Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61b7b9ae-b712-4a51-b302-aafa1010e46e.roa
File:                     61b7b9ae-b712-4a51-b302-aafa1010e46e.roa (raw, json)
Hash identifier:          Sgu1MdoHHKSw6NyCv94Gh8Ry2DNJWURAO+oR1kQRwJ8=
Subject key identifier:   62:02:52:85:92:E4:14:97:7D:8D:35:09:F5:17:FE:4D:28:F8:9F:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       107C795CB710A53D8358166F1782448AF143DFFD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61b7b9ae-b712-4a51-b302-aafa1010e46e.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        107.176.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7c:79:5c:b7:10:a5:3d:83:58:16:6f:17:82:44:8a:f1:43:df:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=7467f34998aa42861ab32d8a13677e3fa6861bdabe26c7cb412fb1822331bbab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:bc:44:f1:96:2d:2e:ff:20:3e:0b:3c:e8:
                    c6:c5:47:ce:0c:75:02:92:26:ad:68:b3:eb:a0:f5:
                    13:e8:7a:7c:17:ab:5f:d2:b5:43:ec:11:34:11:82:
                    2c:34:1f:4a:00:d3:df:b9:da:02:24:d3:96:fd:c6:
                    c8:67:71:55:13:68:db:fd:4e:6f:65:e1:da:f4:a4:
                    9c:b6:22:9c:c6:fb:88:37:86:ac:51:64:33:0e:71:
                    b3:9f:aa:8e:cc:ed:12:3a:87:5f:1c:51:f0:98:4a:
                    38:d7:9a:85:5d:ef:8b:8b:63:5b:33:64:fa:53:ac:
                    c2:12:ce:23:75:99:7c:14:e8:a6:4a:b9:fa:a1:e1:
                    58:2e:b3:05:3c:a6:6f:2e:9e:e2:f2:3f:2e:2d:27:
                    4a:11:44:2e:5c:b1:4b:c9:3a:6f:85:a2:c0:6b:17:
                    e8:55:31:1d:0a:02:65:27:4a:b1:2f:24:fb:f9:d4:
                    e8:0a:82:f7:c2:1d:ae:23:7c:b6:25:fe:ee:fb:42:
                    e6:b4:5b:bd:39:26:09:85:b2:39:bc:56:39:f3:de:
                    b5:a5:44:b3:6c:6a:be:60:f9:40:eb:03:a5:96:cc:
                    3f:dd:4b:e0:13:c7:98:51:ec:4f:e8:16:9b:0b:09:
                    29:f7:41:fa:7a:b9:c9:05:20:57:ee:cd:b8:57:af:
                    59:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:02:52:85:92:E4:14:97:7D:8D:35:09:F5:17:FE:4D:28:F8:9F:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61b7b9ae-b712-4a51-b302-aafa1010e46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.176.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         70:90:f0:d7:0e:e3:b5:c8:4a:f0:6a:0a:3e:c1:d3:0b:b0:2f:
         02:99:8e:00:5d:8f:8f:8c:0f:8a:a6:d1:d4:85:d8:66:75:5f:
         ca:17:c7:90:83:db:3d:32:b8:8e:fd:ea:32:e9:37:02:88:12:
         53:71:c2:14:60:76:98:e9:8c:f7:56:e7:a3:98:dd:ac:6a:a8:
         61:30:a4:da:b0:73:58:91:79:06:cd:18:5b:72:80:4e:48:d4:
         99:35:3b:78:0a:c5:1b:cf:0d:5c:ff:d5:b7:34:8c:35:4a:3e:
         2c:79:06:e8:dd:d5:59:2e:37:59:a9:ca:76:8e:9a:b3:b4:15:
         48:a4:a3:4a:e8:cc:e1:2f:d8:26:ca:19:55:70:c4:07:dc:33:
         c9:8b:64:18:e0:cb:b0:b7:2c:97:8a:22:19:2b:27:72:9f:49:
         bd:bc:07:88:15:bc:32:27:db:20:df:82:52:84:91:ed:47:12:
         5e:fc:9f:73:ca:99:3e:df:ae:a4:a5:33:e0:ab:9d:5f:28:0d:
         e6:96:e7:d6:f8:86:b7:7b:c3:57:4a:d2:15:d0:4d:1f:49:79:
         e6:5f:3c:1e:fd:8f:c2:df:16:dd:45:d8:61:46:4e:76:45:7e:
         05:2a:3f:35:7e:fd:36:c6:e7:21:d1:eb:94:26:f1:6b:8d:71:
         bd:e3:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:04 2024 by rpki-client on console-fra.rpki-client.org