Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dee5376-32e7-4adf-a1a0-57aedac04f93.roa
File:                     6dee5376-32e7-4adf-a1a0-57aedac04f93.roa (raw, json)
Hash identifier:          zPt6U+4DeIgn9lz8jqgQUUb5COsCS5IULASkOcS4lnY=
Subject key identifier:   B8:A4:47:A4:13:E3:9D:C8:ED:CE:56:11:93:8E:27:5C:82:CD:A9:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5053C2AD0F2B7A951DB51DE14BF3C6F793C61DBA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dee5376-32e7-4adf-a1a0-57aedac04f93.roa
Signing time:             Tue 19 Nov 2024 00:00:00 +0000
ROA not before:           Tue 19 Nov 2024 00:00:00 +0000
ROA not after:            Tue 24 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        216.252.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:53:c2:ad:0f:2b:7a:95:1d:b5:1d:e1:4b:f3:c6:f7:93:c6:1d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:00:00 2024 GMT
            Not After : Dec 24 23:59:59 2024 GMT
        Subject: serialNumber=8303f49727805fa6af3f71307fbadaab13a2abaf49494f390dc28c3e95b45514, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:65:d5:29:6c:a5:dc:f1:06:69:19:f0:1d:
                    70:08:f3:8f:10:04:a1:59:2d:b7:e8:aa:2e:3f:8c:
                    36:61:0f:0f:0d:cf:35:e4:1f:c0:a4:5b:ce:8f:31:
                    f4:1a:53:7d:b5:a2:4b:81:fa:8c:0e:84:77:0a:c0:
                    0b:83:da:14:44:47:65:52:c2:c3:52:d4:22:9e:15:
                    36:3c:38:22:b0:9a:a5:56:91:a6:cb:81:e3:db:bb:
                    aa:93:51:36:0d:e1:15:fd:af:79:9b:84:3b:28:e8:
                    d2:48:31:ea:2f:de:d2:d3:6a:e5:0c:5e:a9:a1:e2:
                    0c:d0:2d:0e:54:ee:05:fc:69:cb:4d:5b:2f:f9:e7:
                    60:f2:2f:6c:6b:d0:11:b6:77:19:91:d1:a6:29:59:
                    a6:81:55:72:26:ef:8f:52:46:88:f2:a8:c7:98:84:
                    2e:2a:aa:5b:b3:cd:b4:56:84:c5:a4:e5:0b:d4:0c:
                    8a:e7:55:6d:42:37:5e:d0:fb:4b:8c:73:e2:35:04:
                    ee:98:e7:b2:39:4f:45:7a:78:ef:8c:88:4a:14:75:
                    23:f0:3c:00:b4:90:13:80:ae:2b:8a:99:2c:9b:75:
                    20:09:a5:61:01:08:ac:d3:6c:30:92:6d:85:a2:d9:
                    6e:e4:af:95:89:7e:0f:49:3a:21:52:c0:98:86:79:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A4:47:A4:13:E3:9D:C8:ED:CE:56:11:93:8E:27:5C:82:CD:A9:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dee5376-32e7-4adf-a1a0-57aedac04f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:20:09:ed:4b:64:28:db:dc:24:a6:0d:41:bf:7b:a5:fe:
         c1:9a:83:b7:5b:70:b7:0e:a6:63:d3:bf:39:69:02:a3:2b:6a:
         3b:28:76:65:c2:8e:60:0b:6a:e4:3d:7f:81:97:bb:71:d0:f7:
         ab:62:db:b2:1f:1b:8b:28:1f:05:c7:17:87:1f:c5:87:b6:ab:
         09:b0:70:66:e1:41:d6:ff:39:9d:b3:32:55:55:fe:8a:54:90:
         08:d4:40:a0:59:a2:1f:96:bb:aa:33:3a:ed:64:e8:a5:44:72:
         ac:ba:33:01:a1:2d:99:79:70:10:c3:1b:f4:ed:09:17:33:44:
         7e:44:5a:6d:ff:02:6a:72:23:9c:7a:58:17:89:1b:24:69:b6:
         fc:84:87:c2:55:17:fa:67:cf:5a:f2:ac:8e:b3:b6:62:0f:e6:
         3e:83:63:22:bc:1c:87:0f:7f:9f:ee:b0:c8:f5:75:91:a1:c1:
         39:71:09:fd:14:b3:15:11:d9:6e:99:e8:0f:71:2b:75:7b:93:
         ab:19:e3:27:73:fe:1a:fd:37:6a:cc:c0:cd:4e:a0:9a:e5:e8:
         df:e7:81:08:1f:1b:8f:8a:4d:0e:df:50:70:67:60:0d:fe:a3:
         81:08:93:f9:c1:bc:5f:ba:ba:9d:52:c6:43:da:86:88:44:dd:
         8f:6d:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:07 2024 by rpki-client on console-fra.rpki-client.org