Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70212ed3-2f9d-4fea-8d47-74944fd5adb3.roa
File:                     70212ed3-2f9d-4fea-8d47-74944fd5adb3.roa (raw, json)
Hash identifier:          5vPdS0tbxcug0Lf7FzZ2Rc07VhokuXe/TUw9EqN8dPQ=
Subject key identifier:   63:54:31:26:53:94:91:8E:CA:F9:35:1E:92:A5:00:48:83:52:10:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C4470615A62F8EBFE7E2094420D2D530F061478
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70212ed3-2f9d-4fea-8d47-74944fd5adb3.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        46.168.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:44:70:61:5a:62:f8:eb:fe:7e:20:94:42:0d:2d:53:0f:06:14:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=397baeaaf2c047fc89acd6e1f79663b8bac6b0ec70e9ae2fdc7277732bd2f812, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:e3:39:d3:5b:e1:bb:6f:01:34:56:ed:4a:
                    9c:0c:ab:90:b2:b9:bb:e6:d7:99:23:2f:b6:0c:cb:
                    65:a6:50:40:36:7c:5a:68:7b:79:ce:74:4c:7e:d8:
                    b6:75:f5:c0:d3:07:30:52:1d:58:c1:bf:4c:5f:60:
                    b7:4e:0a:8d:da:99:e3:1a:18:89:aa:4c:dc:6e:d8:
                    51:b0:ff:70:d3:c3:ca:cb:f0:8d:22:d9:a8:a3:9b:
                    8f:6e:00:6a:60:c0:31:dd:a7:97:3c:46:40:f6:99:
                    05:73:4e:16:70:3f:96:6f:bc:c3:07:78:57:6b:da:
                    09:fd:c4:12:41:51:d1:d9:00:02:4f:11:ac:45:da:
                    f1:07:59:7d:79:4c:d0:f7:54:10:fc:35:33:09:22:
                    19:6f:c0:21:32:c1:a9:fd:d0:73:de:02:06:9e:e6:
                    53:62:61:ff:37:da:56:d4:c0:8d:48:2e:aa:86:f8:
                    f8:e5:29:7f:25:09:6f:f6:ad:e4:90:7c:b0:c2:43:
                    5f:08:45:0a:72:02:48:cd:a4:e6:87:14:e7:38:ce:
                    8b:25:b3:47:f2:68:26:ed:ee:20:fb:2e:48:f9:92:
                    c1:9b:88:ec:04:3a:0e:a3:ac:ef:63:9e:0c:e6:2e:
                    25:49:ae:ba:0f:9e:9f:ab:b6:62:3f:1a:ed:29:64:
                    67:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:54:31:26:53:94:91:8E:CA:F9:35:1E:92:A5:00:48:83:52:10:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70212ed3-2f9d-4fea-8d47-74944fd5adb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.168.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         97:09:13:05:d8:39:02:20:1e:87:12:2f:aa:36:03:c2:9c:ef:
         88:ea:7b:5e:0c:88:be:72:ce:01:be:14:76:9e:58:20:9a:30:
         7a:17:42:e8:0f:ed:51:b7:47:e4:a5:ce:d9:f0:17:9c:aa:48:
         0a:31:55:f8:c7:99:3b:8f:9d:e1:9f:c1:77:a4:2e:4e:b1:44:
         99:10:ec:57:00:b0:58:3f:5d:9f:12:59:04:3e:8b:54:ad:71:
         c9:26:0e:39:15:27:37:dc:ec:7a:b5:a7:c8:ce:7b:07:08:d8:
         bd:e4:96:f4:96:bd:a0:6d:54:75:0b:f3:1a:5b:6a:6a:87:6b:
         6e:9e:3e:ca:14:7c:89:33:11:f0:2d:3c:7f:b7:82:76:a0:8c:
         16:4d:46:fe:a2:35:12:77:e4:30:c8:90:30:64:50:d4:3f:55:
         b9:b8:3f:a1:a6:5a:d6:11:70:fc:c0:25:0b:30:af:f7:ac:64:
         4d:f2:98:9f:e7:67:cf:ac:0c:75:c3:be:a3:13:b2:56:b9:93:
         53:ba:47:da:0d:12:e5:ad:23:a3:d5:b9:1c:fd:71:ec:35:54:
         c2:35:5c:46:10:02:c5:3b:7b:3c:05:88:09:6f:bd:22:ea:73:
         5d:23:4e:9b:ef:e0:ee:72:31:c2:c0:bf:3e:74:33:9d:ca:98:
         a9:e5:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:43 2024 by rpki-client on console-ams.rpki-client.org