Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65ea5659-de11-4298-b883-50f0cfe1b7e4.roa
File:                     65ea5659-de11-4298-b883-50f0cfe1b7e4.roa (raw, json)
Hash identifier:          tdF7KTca0ypoFXkVf09AWeBJA4UIpexGAATfJJrcmh8=
Subject key identifier:   2B:A5:62:98:A4:98:AD:87:57:82:9F:50:96:DA:C5:F2:A1:05:4D:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1ED3EE6F8C57F686F91627EC157F6C8526EC67F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65ea5659-de11-4298-b883-50f0cfe1b7e4.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        40.179.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d3:ee:6f:8c:57:f6:86:f9:16:27:ec:15:7f:6c:85:26:ec:67:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=e1fcac15a3f9ec2cd1bd3c7b04badfb0e5e9c47e2fee3c7cc58c397b4a1475bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:c8:93:a9:12:0d:03:31:77:f6:73:4c:35:
                    ac:99:1f:74:b2:2b:d5:a4:9a:19:42:eb:e3:b0:79:
                    e0:a3:4c:bf:4e:98:26:b2:b0:b2:5a:88:56:85:f3:
                    76:57:45:32:f6:85:68:6a:6e:e2:f8:cc:76:b8:04:
                    2c:83:ed:3b:d6:a0:27:8a:bf:ae:95:4d:c9:45:6f:
                    9b:b8:10:1a:25:79:e8:7e:ae:87:10:6c:f6:77:b7:
                    68:8a:36:89:7c:5e:b4:41:aa:fb:38:06:01:32:e8:
                    98:83:78:6f:dc:fa:81:9c:3c:94:96:2d:ac:58:33:
                    99:1c:18:68:7e:4c:b0:64:d6:92:36:41:e8:e7:7a:
                    fd:37:e4:ec:6d:ab:4d:19:0c:9e:ba:3b:9a:f0:e8:
                    55:1a:a6:8e:7c:2a:b2:17:b8:83:ce:b4:95:e0:97:
                    31:e2:cb:e9:35:95:4b:1e:e4:21:1b:e5:e4:70:a3:
                    7f:7c:1c:f8:52:f9:63:59:db:cc:5b:fa:61:46:e5:
                    a6:a3:cc:76:cb:dc:4a:65:ef:d0:a1:1f:11:9a:1a:
                    80:6f:2b:4b:57:c0:85:c7:79:e1:57:a9:26:ba:bf:
                    ac:bc:bc:e8:6b:a9:73:33:d7:46:e4:b0:d8:6f:e2:
                    a4:26:a7:a3:26:45:38:9f:d1:e1:38:ec:24:3d:fc:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A5:62:98:A4:98:AD:87:57:82:9F:50:96:DA:C5:F2:A1:05:4D:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65ea5659-de11-4298-b883-50f0cfe1b7e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:ac:e3:4c:52:c7:a1:40:b3:92:42:bf:7c:98:d3:b1:82:
         4b:58:fd:ea:3c:3d:27:02:4d:82:8e:c7:6c:0f:34:31:26:1a:
         6b:48:b2:17:a7:78:02:9e:60:81:05:eb:9d:5a:4d:16:77:6e:
         79:e3:4f:59:4b:c1:6b:74:bb:af:91:09:84:08:75:b1:16:7e:
         21:7a:5c:a2:e9:8b:27:f1:51:97:e3:fc:40:12:03:58:1d:20:
         ff:d1:fa:6a:d2:bf:2e:fa:7a:96:eb:d5:13:69:24:2f:e5:26:
         d9:50:73:ac:17:b7:4f:01:ef:f1:46:08:57:be:e7:5a:5b:94:
         63:5d:44:15:3b:69:a4:95:34:db:d5:08:97:b2:40:dd:9b:ee:
         40:c9:87:c8:36:c6:9c:e8:57:bf:a7:dd:91:6e:16:83:a1:f6:
         bb:60:b9:96:66:ab:58:fc:d6:02:e8:79:fd:c6:79:05:ab:f3:
         fb:2b:7a:cc:62:d0:4d:08:be:0f:10:8a:d5:cf:fa:5f:fb:4b:
         59:ef:0f:d5:de:72:16:d6:30:1d:63:de:62:ce:25:9f:6b:62:
         4e:08:9a:f7:0e:4d:9f:62:c3:7e:fb:f0:f4:01:29:4e:84:f2:
         38:ef:38:43:7f:f2:49:88:93:f0:13:93:be:10:9c:e8:94:21:
         88:9c:12:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:07 2024 by rpki-client on console-ams.rpki-client.org