Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79aa5448-3b8d-41cb-a34b-f7f01fe3ba97.roa
File:                     79aa5448-3b8d-41cb-a34b-f7f01fe3ba97.roa (raw, json)
Hash identifier:          5CQoPNIEADrD+hKcq/83jzmWcFIo2Afi8fME77gL0W8=
Subject key identifier:   6A:8C:57:2A:07:11:CD:99:30:26:79:5B:AC:FD:7E:25:D6:54:E4:AB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       637FD02718F3622BB72EB54C9DF69E4B8D98B844
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79aa5448-3b8d-41cb-a34b-f7f01fe3ba97.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        57.248.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7f:d0:27:18:f3:62:2b:b7:2e:b5:4c:9d:f6:9e:4b:8d:98:b8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=f59dc451c0fa6ec9177f82d3d45e41d0e6906540579a8b92b06c741e924c9bc4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:f8:70:84:58:7c:1c:ed:f0:6f:98:9c:f4:
                    0d:0f:20:74:09:c2:c0:50:0e:aa:be:43:f9:8a:b8:
                    19:ca:8b:4f:72:c6:c2:9c:4d:19:9b:b3:29:a5:15:
                    cf:fe:23:d8:8a:1d:aa:0e:98:d5:cd:b6:ae:55:8f:
                    d4:0e:f4:bd:f1:41:c9:0d:8d:d5:c4:be:79:56:b4:
                    e7:dd:a9:d9:4c:06:38:e0:8a:6f:7c:f8:be:4f:2f:
                    9b:6a:78:15:db:f3:91:df:e3:9c:ce:29:d5:ca:fe:
                    d8:8a:36:7d:78:02:c7:29:a5:23:16:3f:39:0d:15:
                    df:b8:a0:f4:86:9d:5a:6b:38:06:39:7a:08:62:62:
                    36:80:75:3e:ea:34:f8:62:26:ac:2e:d5:ba:8f:f1:
                    9e:29:d2:7b:b2:ea:32:86:21:7d:5d:d5:06:98:ac:
                    d6:ac:b7:1f:b0:96:e0:3e:99:05:13:bd:e7:b7:71:
                    87:92:55:57:b0:a6:73:27:38:ac:0f:6e:86:28:f4:
                    ec:43:09:5c:40:58:d6:a7:d0:8c:2c:ab:07:19:b1:
                    8e:4e:7b:88:a8:ce:62:71:1d:e5:d2:e1:b6:f8:c8:
                    07:e2:59:28:b9:ce:4f:e9:46:14:4f:c7:c2:56:b3:
                    a8:27:2e:53:46:a2:bd:90:8e:6d:a4:a3:8e:f2:5f:
                    36:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8C:57:2A:07:11:CD:99:30:26:79:5B:AC:FD:7E:25:D6:54:E4:AB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79aa5448-3b8d-41cb-a34b-f7f01fe3ba97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:f8:bf:b5:8c:79:85:2d:fa:b7:3b:a5:b7:fd:b0:cf:32:90:
         6f:91:a3:19:57:de:d0:8c:23:51:6e:91:08:1a:7f:a6:32:2f:
         d3:b6:5d:ca:f1:25:05:3d:dd:6b:03:18:c5:82:1a:0b:eb:10:
         71:4c:f2:9f:bd:ef:ab:6c:82:29:4b:b8:78:f7:02:2d:08:ea:
         44:a4:fe:a5:65:67:6f:19:be:2c:f7:36:c7:a0:0d:e9:9a:c1:
         d0:46:26:fd:3b:9e:72:12:f3:e2:8d:39:49:f8:57:6a:53:56:
         a0:d8:c7:be:10:76:94:07:c4:15:50:4a:19:e4:fb:ba:65:56:
         6e:21:6b:6d:71:13:6c:84:5b:8f:0d:f7:0a:60:0a:b6:16:a2:
         f4:11:b4:c9:5c:f6:ec:1f:96:0b:44:c0:a7:e3:38:23:a7:58:
         97:08:c5:96:24:eb:e2:84:22:53:8e:93:d8:d0:3c:c0:9c:69:
         2d:d3:95:01:04:0a:7b:ec:f8:a9:6d:6b:d8:72:53:b0:6e:d4:
         7a:10:87:4e:4d:f0:b5:fa:76:12:8f:47:5c:50:7f:85:31:2f:
         52:47:35:93:71:47:44:75:e2:4a:c4:a4:cd:39:30:3c:d0:31:
         1a:a4:b6:62:ab:ad:68:34:23:eb:b8:23:60:61:80:5b:3d:ec:
         9a:f4:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:46 2024 by rpki-client on console-ams.rpki-client.org