Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65e26a3e-82b7-4997-81c5-d81bea4f0d05.roa
File:                     65e26a3e-82b7-4997-81c5-d81bea4f0d05.roa (raw, json)
Hash identifier:          K6GpgnWOwaN3/JIII/u4Nj4/SEYUj+7dhHo0PC8B+Uc=
Subject key identifier:   77:25:00:EB:AB:FD:2A:8E:8B:3D:3F:E6:82:D2:36:0E:26:2D:E7:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53BB466A633D6183869E780C125E3A5FBBE77ACA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65e26a3e-82b7-4997-81c5-d81bea4f0d05.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        76.241.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bb:46:6a:63:3d:61:83:86:9e:78:0c:12:5e:3a:5f:bb:e7:7a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=1e30bb871ca95b0a7a0335b79ba63266095974c74a2d1987ad4a579ba05cef4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:11:a1:ce:9b:62:95:d2:c1:1b:fd:73:25:
                    4d:85:e3:22:72:83:4f:5e:a2:d3:76:6c:3c:6a:5c:
                    7e:85:45:72:bb:fb:97:41:50:04:a0:78:c6:ca:eb:
                    0b:cb:4b:38:56:47:9d:e3:0c:86:5f:bc:56:2b:99:
                    2c:1d:2f:85:69:98:b0:81:55:6a:aa:ed:56:26:f9:
                    47:e5:a0:ea:83:af:3b:d4:15:ab:76:34:96:5c:c0:
                    79:82:19:25:c8:ae:d8:55:15:ca:c9:d6:89:5d:b0:
                    f7:63:fa:1e:88:f0:4e:0d:30:8a:f3:1c:ab:74:db:
                    13:3c:a8:2c:a9:ef:23:e2:ed:97:05:70:9c:fa:63:
                    dc:d8:88:82:c4:35:e2:44:a7:df:af:57:25:1f:94:
                    2c:43:f6:69:1a:7c:dd:7e:a6:0f:0f:45:88:47:aa:
                    9c:7b:9a:73:ac:3a:35:f5:8d:7d:8f:ed:5e:e8:f8:
                    d9:21:23:08:d9:63:b0:9c:d6:0c:93:b0:0f:0a:4c:
                    fe:c8:0d:8e:a0:60:90:8c:2b:4e:be:5a:b7:ca:13:
                    3a:26:fb:62:c4:74:71:e0:e9:05:e3:62:c1:43:cc:
                    6e:1d:5d:58:23:02:17:05:90:22:b0:08:c4:85:65:
                    99:4d:88:82:25:8b:5d:c5:65:94:2f:c9:6d:54:2f:
                    9d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:00:EB:AB:FD:2A:8E:8B:3D:3F:E6:82:D2:36:0E:26:2D:E7:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65e26a3e-82b7-4997-81c5-d81bea4f0d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.241.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         77:71:78:6f:6b:2f:90:4d:c2:fb:9a:69:7c:79:45:ab:87:dc:
         56:90:06:e3:6e:45:ce:29:de:e6:2c:8d:c5:92:6c:36:b0:5e:
         0e:b5:21:bf:e8:51:c3:61:93:42:89:43:17:01:7b:4c:87:7d:
         1b:22:2a:0d:d0:54:a6:2f:1e:44:20:07:97:89:01:a9:31:df:
         ac:7f:c5:a9:d3:91:85:e8:05:0a:b7:ee:72:d8:03:d3:35:7f:
         3d:e9:b9:c7:e8:44:f0:9d:4a:59:f5:0c:a2:6c:54:1e:68:f3:
         e6:20:61:00:be:6a:81:44:1e:19:ea:db:73:4e:ac:0e:fe:c6:
         7c:a5:16:8b:49:f9:be:48:53:19:14:63:4a:75:95:4d:e4:06:
         90:ae:24:ae:ae:2f:c8:3c:37:a7:fc:cf:05:50:c1:55:c1:89:
         f7:2c:a1:7c:0d:99:e3:bf:fd:f7:3a:c0:e6:e7:2b:9c:69:3f:
         e9:c1:55:65:6a:d6:0b:67:23:fb:dd:a9:67:ab:6f:a1:ef:36:
         be:6d:5c:f8:78:8d:6f:a5:74:28:23:ef:e3:b9:79:f3:ed:41:
         d2:5f:c2:4c:20:04:1a:4d:e2:7d:1d:48:65:fc:cc:3e:54:84:
         bd:e5:a2:5b:4c:98:1d:4a:76:e1:1e:dc:2d:a0:3f:cc:01:12:
         c5:7b:27:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:07 2024 by rpki-client on console-ams.rpki-client.org