Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7405dd53-bf97-45da-a9ab-32e5ecab8ed1.roa
File:                     7405dd53-bf97-45da-a9ab-32e5ecab8ed1.roa (raw, json)
Hash identifier:          2y0LpFpAdUhCsQM9s62sFcQgmuoR4E39YIqh4FEy+Ww=
Subject key identifier:   FC:74:F8:8E:4C:32:56:F8:AA:DC:7B:73:79:83:9E:DF:D0:AA:3E:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       742FF1FC56CC8D7579A614EDFA1C391DB0C6DAC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7405dd53-bf97-45da-a9ab-32e5ecab8ed1.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        63.134.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2f:f1:fc:56:cc:8d:75:79:a6:14:ed:fa:1c:39:1d:b0:c6:da:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=5dc493257f2e904c8b5e3a801c9f08462cda035aed3affa882641ba7ee85a36f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bf:5d:3a:84:e2:11:c7:e1:26:a8:e2:1c:18:
                    a2:59:27:ed:ef:0c:43:ff:7b:4a:ee:03:3c:f2:59:
                    32:95:25:fd:21:33:50:72:9d:ea:07:f2:ac:a1:83:
                    0f:75:fb:4e:e9:9c:7c:62:3f:03:50:d9:f5:8b:b8:
                    1e:fa:91:3d:34:09:92:cf:ec:f9:e1:e3:d4:7f:92:
                    8d:17:a4:1c:4b:02:e7:a8:19:a7:4c:5c:b3:14:e2:
                    ec:e2:0e:57:b2:96:51:ea:6b:3a:26:b7:1f:c2:b6:
                    cc:b8:cc:ba:32:30:c4:c0:ff:0d:33:73:83:a7:7f:
                    c1:8d:82:02:cc:ff:5d:97:34:10:8f:3a:93:c9:0b:
                    30:c4:28:ee:e4:86:c8:b9:ce:f1:49:a7:87:c9:e3:
                    44:32:2d:14:ea:95:54:27:a5:c7:80:58:47:4f:27:
                    3d:6b:f5:cc:47:bb:61:f7:4d:09:c3:de:46:15:34:
                    28:9e:65:5b:fa:96:92:7d:f1:4e:7c:33:2a:5c:90:
                    8c:61:5d:68:cb:7c:96:f9:14:a1:3f:bb:7b:cf:d7:
                    e6:7b:f3:36:97:f8:66:13:9c:3a:e5:9f:60:d2:2d:
                    b7:64:a8:9d:49:ad:f9:c5:5b:fb:c3:24:30:0b:73:
                    01:16:a8:dd:07:a6:af:9b:8f:0e:88:cb:09:b9:fa:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:74:F8:8E:4C:32:56:F8:AA:DC:7B:73:79:83:9E:DF:D0:AA:3E:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7405dd53-bf97-45da-a9ab-32e5ecab8ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.134.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6e:16:c1:af:93:9f:56:c8:33:69:48:a2:5c:3d:c6:38:92:f1:
         cd:1a:63:fd:96:82:7d:82:7b:c4:b5:ef:e9:f4:b4:df:59:3e:
         2b:62:77:94:02:d4:01:e5:43:66:79:e7:23:5b:0b:18:6a:fe:
         2f:b5:2e:98:69:52:fd:dc:cd:93:8b:63:62:44:48:0d:05:ff:
         d7:0f:93:d8:82:d1:bd:19:f9:50:7f:97:fa:dc:6f:d1:05:1d:
         80:d6:1a:3e:fa:ee:17:0d:b3:57:be:44:ec:f6:e7:34:13:e9:
         72:c0:fe:24:05:c0:be:34:54:72:9c:18:65:85:93:1e:a3:df:
         3e:63:72:b4:a9:12:42:8b:7c:74:99:3a:5d:8a:2d:ed:b0:cd:
         eb:62:b0:1a:11:b7:fc:c5:ac:65:0f:c2:6d:40:6f:21:00:3e:
         53:f1:58:fc:0b:11:cc:fc:82:e0:28:93:5c:db:f0:57:d4:72:
         ae:db:33:3d:21:97:89:3f:bd:a7:67:ba:b1:69:7d:a8:da:84:
         f9:17:b8:ad:2c:57:14:9f:54:8f:6d:46:e3:56:43:f0:1c:6a:
         76:2c:3d:f8:da:e3:48:b5:db:96:5e:ad:a8:be:5a:98:51:26:
         15:f2:e1:29:dc:7a:a3:68:5a:a9:4f:4a:23:b3:ef:63:15:d6:
         3f:06:1e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:09 2024 by rpki-client on console-fra.rpki-client.org