Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/829833e2-4bd5-44b5-ae26-554c86468938.roa
File:                     829833e2-4bd5-44b5-ae26-554c86468938.roa (raw, json)
Hash identifier:          QGS0DXAKPa0sgLfxs80ca9iA9d37JH8eEtb9P3YCMyw=
Subject key identifier:   06:9B:C6:03:38:C7:A6:2C:B7:79:CC:7D:67:B5:2C:0A:A1:4C:DD:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2291B6254F14337110123D507D1001BD61C1B3C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/829833e2-4bd5-44b5-ae26-554c86468938.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        65.17.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:91:b6:25:4f:14:33:71:10:12:3d:50:7d:10:01:bd:61:c1:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=840397132a657ac09388e14e6e8350e67ae6bcf2d5c5bf59d86e9b56a2c12f39, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d2:4a:87:0a:57:67:49:8d:98:b8:a9:fe:00:
                    d2:71:cd:93:1a:94:98:c5:b0:e3:0c:ea:e3:22:f6:
                    66:41:88:d9:41:e4:d9:1a:e4:c8:08:1b:6a:40:1c:
                    0f:36:3a:1c:79:cd:fa:71:d4:95:5f:6b:8f:2b:3f:
                    09:1c:a5:61:1b:22:9f:40:2e:7b:9c:b1:97:62:4a:
                    1a:cd:72:b9:a4:b8:07:71:58:86:06:ff:8f:4d:f5:
                    56:39:6d:d6:0c:3c:5f:28:55:4e:db:dc:ab:08:55:
                    b0:b9:7b:1b:7c:95:50:3a:75:0a:e8:81:1b:0f:3c:
                    e5:c5:e6:05:be:a2:7b:1d:ad:4a:d8:e5:6b:57:75:
                    2e:ec:ca:3c:44:e7:5e:10:f5:10:ad:0b:94:30:38:
                    d1:a9:74:62:56:0b:08:07:df:ff:58:f7:29:29:2b:
                    1d:88:d6:c4:c1:51:49:bf:30:06:4e:85:93:4a:3e:
                    27:ab:de:04:02:e9:fe:0d:10:2e:38:06:a7:23:93:
                    56:15:7b:85:21:a4:34:41:ab:ab:13:b6:01:8d:2a:
                    17:05:04:58:78:58:23:b3:40:22:9c:32:98:06:b7:
                    74:26:35:00:79:74:76:2e:7c:e1:24:14:3a:79:81:
                    ce:f6:c7:de:20:f8:e1:0b:7c:42:20:db:56:2c:99:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9B:C6:03:38:C7:A6:2C:B7:79:CC:7D:67:B5:2C:0A:A1:4C:DD:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/829833e2-4bd5-44b5-ae26-554c86468938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.17.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         89:c5:0f:34:91:8c:5b:20:49:74:cb:51:f2:e1:89:f0:ec:e7:
         ba:1b:eb:42:aa:de:05:93:50:a6:7c:4b:2d:c2:e0:09:97:3b:
         59:d0:53:a4:84:5e:c1:f6:e8:3d:62:ef:88:d4:7f:64:a7:c2:
         58:54:6c:2f:84:67:dd:8d:ca:8f:03:67:1e:25:98:89:b5:76:
         17:2a:39:06:66:ec:bb:21:3a:4b:1b:ee:b2:29:2f:6f:a6:08:
         4e:d8:4b:58:5c:29:41:be:10:f7:94:61:3e:39:e9:a2:e7:e0:
         57:94:ec:d4:17:47:53:72:25:af:f2:58:eb:63:18:9b:ae:f1:
         45:3a:31:6a:86:6f:ba:d4:f9:7d:d1:b7:a9:d5:d5:51:a1:4f:
         cc:92:c6:59:06:ed:7c:bc:02:cf:94:9f:7e:7b:45:46:d3:c5:
         55:4d:1c:21:af:ed:42:33:8b:af:47:92:e6:8b:9d:a7:7d:e7:
         17:54:28:28:3a:4e:62:70:c0:62:ae:ae:e6:91:6a:48:8e:eb:
         1e:46:fb:73:75:4b:cf:8b:c0:57:f3:33:f7:b1:18:38:e4:6c:
         2b:f4:7d:df:8d:a7:c7:d8:3b:e5:af:1b:be:00:80:8b:a8:66:
         8f:cb:01:e6:55:0c:df:55:58:08:8b:d0:77:a8:f7:0a:68:a2:
         ff:1e:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:14 2024 by rpki-client on console-ams.rpki-client.org