Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6263649d-0385-48a2-aed8-fbedb2b248b2.roa
File:                     6263649d-0385-48a2-aed8-fbedb2b248b2.roa (raw, json)
Hash identifier:          wl3yjbJ2KhDGU24L7gv+fYPgPxSpa0wdidD1Np5hvic=
Subject key identifier:   DE:34:3A:4F:43:01:C3:ED:5F:EB:B3:BA:59:1E:B3:28:7D:AD:78:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A130865D5A6112687A205A9507B4F3DE5E64413
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6263649d-0385-48a2-aed8-fbedb2b248b2.roa
Signing time:             Mon 02 Dec 2024 00:00:00 +0000
ROA not before:           Mon 02 Dec 2024 00:00:00 +0000
ROA not after:            Mon 06 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.198.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Dec 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:13:08:65:d5:a6:11:26:87:a2:05:a9:50:7b:4f:3d:e5:e6:44:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  2 00:00:00 2024 GMT
            Not After : Jan  6 23:59:59 2025 GMT
        Subject: serialNumber=a00a02b8847e5b46b82b02b3242fa200989d70c88a1fa68d867d4e2c9ec91279, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:08:0b:ee:99:50:90:09:cf:9a:1e:ab:b6:
                    85:d5:04:da:d4:e8:a7:25:2e:d4:ac:4d:7a:e6:22:
                    ab:8f:25:ee:42:11:33:e7:d2:07:38:0b:6c:15:63:
                    7b:ce:5c:ca:27:b5:c7:55:8f:23:21:a9:d3:40:3a:
                    87:2e:cb:7a:94:15:3a:a0:d0:36:13:0e:d3:4f:bb:
                    56:6a:7f:57:34:bc:09:e6:6d:87:e0:f0:7f:e4:9d:
                    4e:c3:a4:3f:cb:3c:5f:55:e0:d8:ca:fe:86:84:50:
                    e9:0b:19:f1:0a:0d:93:5b:0b:97:fc:9d:1a:3f:2c:
                    1c:02:55:16:e5:97:b7:a9:ff:47:33:66:46:d0:14:
                    bb:ed:22:20:22:05:ab:65:18:5e:23:57:9b:c9:63:
                    a8:f3:01:da:fb:f6:e8:8c:77:a0:db:ed:97:23:f2:
                    5e:89:dd:fb:1a:75:74:58:60:ef:79:f0:32:9a:d6:
                    7e:3a:f3:01:22:1d:0a:c6:28:b6:65:fe:b9:c3:b4:
                    bd:8e:6d:cc:19:e6:9f:12:e3:96:14:64:bb:c3:f6:
                    f4:87:33:d6:f2:40:ec:a9:f2:c3:31:0f:bd:d8:22:
                    4e:53:3e:02:43:78:5a:46:17:74:17:bc:6a:72:4b:
                    e4:59:b4:87:03:21:bc:27:f0:5b:80:2d:33:e1:98:
                    1b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:34:3A:4F:43:01:C3:ED:5F:EB:B3:BA:59:1E:B3:28:7D:AD:78:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6263649d-0385-48a2-aed8-fbedb2b248b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:6c:54:9d:16:a8:c0:8e:36:4b:f1:fd:25:05:cf:d4:44:dc:
         97:9f:ac:68:38:3c:82:cd:0e:82:f7:ef:59:34:d5:44:44:df:
         a0:26:f1:6c:35:10:1e:f5:30:19:81:83:cf:9e:77:90:3f:0a:
         18:0c:18:9e:33:ce:55:3b:f6:bb:17:77:66:75:1f:4a:29:95:
         03:40:61:29:fe:36:9d:f2:0a:0c:6e:8a:be:11:4f:ec:d1:a9:
         72:b6:ea:eb:b9:5e:68:92:c4:71:b0:78:14:9f:f4:77:af:9d:
         85:89:67:b5:42:79:a0:f7:04:41:32:c1:6f:05:e3:85:62:10:
         d7:d1:93:95:5a:39:42:7b:fb:64:72:77:64:79:8a:1e:cb:a2:
         43:f4:30:1f:5b:b6:dd:1c:fe:0a:4b:35:d3:cd:2c:ce:98:30:
         a8:0e:65:ff:86:47:10:a8:66:ca:da:2f:48:2d:81:7d:a1:5b:
         70:69:83:32:20:da:52:46:ef:45:c5:e6:90:17:34:f1:89:1f:
         63:40:10:d3:5a:40:68:5e:57:6d:8a:e0:35:da:2b:ee:86:74:
         c1:94:98:2e:3d:c0:ea:a0:14:a2:0a:7a:4b:30:5d:c0:28:49:
         f1:8a:91:8b:5e:5f:78:60:33:3e:f2:a9:f4:d9:3b:8d:12:97:
         ad:ea:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 11 00:54:19 2024 by rpki-client on console-ams.rpki-client.org