Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6302a5ad-7203-4a28-9edc-aef0cebf8d18.roa
File:                     6302a5ad-7203-4a28-9edc-aef0cebf8d18.roa (raw, json)
Hash identifier:          k4iXcvc1apDY5yB/2cyforxpo2QkOwqjJ8Vxz3R3NCs=
Subject key identifier:   33:88:5E:FB:10:DA:4F:FA:12:95:52:9C:49:F4:C8:51:B0:73:11:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F61BFDFFC53CA0A785351D21B9A7C7C04C33281
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6302a5ad-7203-4a28-9edc-aef0cebf8d18.roa
Signing time:             Wed 30 Oct 2024 00:00:00 +0000
ROA not before:           Wed 30 Oct 2024 00:00:00 +0000
ROA not after:            Wed 04 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        139.96.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:61:bf:df:fc:53:ca:0a:78:53:51:d2:1b:9a:7c:7c:04:c3:32:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 30 00:00:00 2024 GMT
            Not After : Dec  4 23:59:59 2024 GMT
        Subject: serialNumber=0c16515fc12147d51d1b50f013dad9e7368db0714ef71696a1587466f802b2fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:2f:9b:61:d9:87:57:c8:eb:b7:71:6d:ed:
                    57:b0:df:f9:fd:33:65:28:8e:54:bf:87:4c:41:36:
                    29:1c:45:88:b3:14:e6:8f:9d:aa:ca:48:12:f6:33:
                    e0:54:e5:bb:52:12:56:54:65:ed:21:70:a8:3e:9f:
                    cc:86:5c:b4:af:91:a0:c5:d1:33:d2:95:c7:ec:bc:
                    2b:63:a6:a4:9f:c9:4a:cd:6b:08:49:db:10:b7:ef:
                    25:76:e8:92:b2:71:83:58:7f:12:9c:6f:6e:94:95:
                    11:57:29:ff:1b:c9:45:74:70:69:65:6d:5f:8e:bf:
                    5f:a2:de:78:c1:70:65:1d:33:aa:04:c2:13:bf:4a:
                    a0:3d:cb:40:26:83:4f:bd:bd:23:f0:03:ee:3b:7a:
                    a0:3f:24:19:41:cb:6b:6d:51:b3:76:f0:8b:77:55:
                    9b:12:20:3b:67:87:ee:c3:ed:13:2f:f9:d8:1d:7f:
                    b0:9d:6a:8b:ca:0e:e1:d7:58:b3:11:e9:04:33:75:
                    a5:b4:2b:e6:7b:f9:77:16:61:2f:8a:9b:4b:24:af:
                    77:60:12:b7:bd:ae:03:c8:52:3d:84:44:92:16:b3:
                    4c:37:02:fb:ff:1c:5d:bf:bc:cd:3e:9a:73:2c:23:
                    fe:fb:24:00:2a:0d:ad:30:24:27:92:40:6c:00:b0:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:88:5E:FB:10:DA:4F:FA:12:95:52:9C:49:F4:C8:51:B0:73:11:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6302a5ad-7203-4a28-9edc-aef0cebf8d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.96.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:02:39:5e:36:b0:87:01:39:55:89:d2:2b:0a:eb:75:6a:
         dc:e4:ed:f1:c9:e2:bb:0e:00:bb:27:e8:10:ef:44:64:f1:a4:
         8d:72:bb:3e:d5:47:e0:07:33:b6:e0:ce:bd:58:61:ea:09:21:
         49:01:c1:2c:10:53:c4:16:16:98:de:84:6a:4f:fa:a4:94:7a:
         3b:99:1c:df:cc:61:2d:ee:fe:ac:c7:a9:fb:e2:06:b0:e9:be:
         bc:43:89:44:16:ab:42:30:08:de:f9:63:d1:7a:3a:ba:60:80:
         e0:8a:b4:4a:a6:d4:28:6f:c4:81:a4:af:fd:be:03:b0:59:db:
         3a:05:b6:44:73:4e:6d:c3:f2:9f:0c:58:16:9c:4a:87:52:db:
         9f:ed:e8:2c:34:05:b4:0b:8d:46:24:b4:22:f5:a9:88:06:5c:
         a4:a8:92:5c:c7:50:56:d6:c2:6e:e7:61:a5:5e:25:f5:bb:b3:
         9b:22:fa:dd:3e:f8:b9:60:ad:51:07:9f:af:b0:3d:7e:95:c2:
         5b:92:94:9d:2a:59:1e:3a:7f:08:57:76:93:da:aa:bb:bc:1b:
         bd:df:fb:75:67:af:8f:99:c2:9a:34:66:66:5e:f3:2c:0f:fb:
         0d:84:e0:bc:c7:9f:28:19:d3:06:25:d8:16:6f:1a:45:dd:39:
         17:83:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:04 2024 by rpki-client on console-fra.rpki-client.org