Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82ae66ad-05a3-4453-84c9-cd60b4012157.roa
File:                     82ae66ad-05a3-4453-84c9-cd60b4012157.roa (raw, json)
Hash identifier:          tBROXsXCx2XbK57RnBWpSvwsG5tIpK+JEB080cGy0yY=
Subject key identifier:   92:6E:7D:ED:AE:4A:9E:37:EE:5B:91:E6:01:10:CB:EC:FC:0D:A4:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BE808F37715CDB835CC6061DEFE4D80DC2E4104
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82ae66ad-05a3-4453-84c9-cd60b4012157.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        156.5.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e8:08:f3:77:15:cd:b8:35:cc:60:61:de:fe:4d:80:dc:2e:41:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=fdea58ff384d741b82f555058bd333d41c8215a169bc2c5e1d71d0d71ff85b64, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:f1:e5:fa:13:a9:02:90:8a:31:35:38:e5:
                    8c:7e:47:71:0f:25:35:25:36:d0:76:d2:47:99:d8:
                    88:a3:25:c0:97:7a:0d:c4:63:df:07:60:e9:4e:ed:
                    3d:29:75:bc:0b:9d:22:43:e0:8c:87:85:bd:1b:91:
                    72:7d:8c:d4:e0:5c:b0:4a:82:43:6e:18:0f:32:67:
                    8c:da:13:dd:19:bc:13:05:23:1d:25:ee:ce:75:c5:
                    5c:9c:7d:fc:ca:e2:5d:04:63:00:4c:14:28:b8:c3:
                    33:be:71:19:39:36:7b:81:d0:9d:ca:89:e3:fa:aa:
                    4e:02:03:5c:1c:34:04:20:07:c7:8f:7d:12:a2:fe:
                    e5:21:33:2b:e6:ed:08:81:91:ab:15:9e:30:c8:54:
                    46:4d:6e:ab:09:d0:04:9e:9b:53:8a:47:b3:4a:e9:
                    fd:85:e2:59:74:fe:24:59:df:7c:8e:47:d4:ca:d0:
                    68:ad:9d:ce:9c:bf:e1:53:ca:31:f8:eb:9d:96:08:
                    be:f5:a1:07:5c:64:25:78:75:c4:20:c7:ff:05:6e:
                    c7:37:3b:9f:f3:5b:fe:af:1e:8f:eb:df:a4:ea:0a:
                    9d:61:39:cf:0c:65:e1:6a:e1:8c:f8:b0:e1:5f:d9:
                    e0:cc:5f:41:cd:b6:e6:26:2d:ff:5d:0b:62:3a:4a:
                    d3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6E:7D:ED:AE:4A:9E:37:EE:5B:91:E6:01:10:CB:EC:FC:0D:A4:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82ae66ad-05a3-4453-84c9-cd60b4012157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.5.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:f3:50:6f:e8:71:cd:e5:9c:31:a2:db:a9:a3:71:71:73:c1:
         78:12:28:d5:5c:ca:a0:fc:58:6e:6e:13:72:bf:0c:d3:75:63:
         c1:de:d4:00:cc:c2:9f:30:81:b3:e4:41:49:f8:15:6b:5d:c6:
         d1:47:e1:e7:23:24:74:80:7c:5f:07:45:95:d3:94:f7:35:f1:
         de:93:84:57:5d:fb:0c:46:2a:80:f1:bd:2d:eb:0b:e3:a7:47:
         a8:a1:1f:1d:47:ee:2e:ae:4e:c2:23:0b:93:9c:2b:45:01:c6:
         67:8a:d8:5a:c3:2d:2e:1b:6f:60:e6:5d:6f:67:a0:2a:a8:24:
         0a:59:84:92:22:e8:aa:8a:b7:fb:15:ab:28:68:f7:fa:47:2b:
         7a:0c:88:e0:65:85:2f:d2:99:43:64:b8:22:36:4f:a1:f4:72:
         5a:08:cc:af:6b:90:1f:29:37:41:79:04:1a:54:44:fa:54:a6:
         02:c4:38:38:6b:0f:f2:fd:ed:06:06:e2:95:62:6c:1b:0d:48:
         87:94:7e:b0:89:24:80:c1:52:c9:71:7b:a5:e2:ac:bc:de:50:
         c2:e5:5e:f5:b4:ae:31:5d:60:55:7b:d1:c2:63:73:54:22:3b:
         7e:4b:5d:89:d2:56:2d:9f:97:84:0d:d7:52:62:51:13:53:c1:
         ac:11:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:49 2024 by rpki-client on console-ams.rpki-client.org