Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b79be41-2591-492d-b79f-0405d918bb9a.roa
File:                     6b79be41-2591-492d-b79f-0405d918bb9a.roa (raw, json)
Hash identifier:          jR4rg3eFiuz8fI5p3hoJ3noKMuWCY9iuAzwieicOe3M=
Subject key identifier:   CE:F0:12:FC:11:7A:0D:17:EC:4E:BF:07:2D:32:99:E8:0E:7C:FB:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B181741C21DAA512D59402FE117C9020368A5D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b79be41-2591-492d-b79f-0405d918bb9a.roa
Signing time:             Tue 03 Sep 2024 00:00:00 +0000
ROA not before:           Tue 03 Sep 2024 00:00:00 +0000
ROA not after:            Tue 08 Oct 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.25.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:18:17:41:c2:1d:aa:51:2d:59:40:2f:e1:17:c9:02:03:68:a5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  3 00:00:00 2024 GMT
            Not After : Oct  8 23:59:59 2024 GMT
        Subject: serialNumber=1041186ba94e6f37481eefc4ed44eebb7e41346a467cb14c53d6150e2461af56, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:be:32:06:68:8a:a7:25:2a:c8:8e:96:30:
                    41:7e:6b:53:d2:ff:0d:87:52:17:30:d2:dd:dc:91:
                    9d:25:c6:43:cf:e1:d6:68:a9:87:87:43:ed:75:ef:
                    fb:cb:9e:c1:2d:de:06:73:e2:03:01:ee:6d:f3:a8:
                    20:97:34:a4:00:24:a1:69:a9:ab:a0:2d:0b:ce:22:
                    33:0f:f6:74:b1:d7:7f:81:e8:30:b3:d1:53:80:0a:
                    0e:f4:13:62:e5:4f:c1:81:b4:e1:8c:d7:6e:ff:33:
                    14:0d:bd:d9:fe:af:33:b9:1c:9d:0f:0b:80:da:3e:
                    ad:72:b2:54:7a:a2:76:32:f6:8a:1b:05:78:38:8e:
                    71:19:f7:e0:ae:83:08:fb:ba:c9:45:90:fc:34:e2:
                    07:d1:6b:46:02:7c:8b:ee:b9:a4:59:69:c7:84:0c:
                    d4:d1:50:ea:d1:39:41:ea:4d:12:e5:fc:ad:04:d9:
                    ed:da:e6:af:36:2e:ab:c4:14:73:3a:80:b5:99:f8:
                    53:2b:55:ca:c3:0b:f1:2c:d2:78:63:bf:34:00:9d:
                    47:f0:d0:5c:2b:8a:30:3e:59:c3:ad:ba:7d:41:e9:
                    59:5b:70:91:e3:63:de:b1:66:49:1c:fe:96:35:93:
                    03:97:58:79:e2:9b:f6:16:32:d7:eb:8b:fd:6a:4f:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F0:12:FC:11:7A:0D:17:EC:4E:BF:07:2D:32:99:E8:0E:7C:FB:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b79be41-2591-492d-b79f-0405d918bb9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.25.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:77:dd:d4:4b:6b:50:cf:a3:1c:1d:be:b0:39:2e:32:30:4d:
         41:03:f4:22:27:a7:1b:42:23:78:d0:61:cf:90:82:0b:d9:68:
         dc:0f:b4:15:1a:c2:2e:55:d8:ea:06:29:eb:62:22:10:98:df:
         3f:f9:c3:90:1c:ee:05:2f:46:1e:9c:a7:4e:90:49:94:11:2a:
         a9:91:2d:3b:64:d5:7a:3f:23:bf:0e:14:b0:08:24:07:b3:59:
         56:6e:4c:69:42:59:ad:08:e3:61:90:c1:58:c4:18:86:83:86:
         20:1d:51:0a:4a:45:4b:29:cb:6d:ac:8c:14:73:34:c1:a5:5b:
         b2:1e:6b:82:2f:c2:ca:27:23:e7:93:3f:83:5d:08:55:f2:a4:
         47:bb:d2:53:11:bf:c7:b4:61:eb:59:98:93:e0:df:4a:1c:e3:
         12:89:5e:3c:e4:0f:31:a7:f0:30:ff:09:73:a6:1e:06:ed:ed:
         9e:04:16:be:51:1e:b5:d1:da:7b:b0:ac:1e:69:ee:c3:8d:86:
         50:83:8d:f2:18:64:1a:cd:e3:22:9e:1e:67:ef:3a:6c:29:6b:
         a8:12:f7:1d:b2:f8:a5:c2:2c:e9:1f:2e:45:31:67:6e:dc:99:
         ef:fa:d8:37:5c:64:52:98:ce:0d:00:06:2c:22:9e:4a:03:ed:
         26:a6:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:18 2024 by rpki-client on console-ams.rpki-client.org