Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/859bf75d-716b-48b3-ad92-9491ce0e2b35.roa
File:                     859bf75d-716b-48b3-ad92-9491ce0e2b35.roa (raw, json)
Hash identifier:          4eOtbyiuClDFmwNB55Y3b/SiJVyPpctzTFwNRhtA+o4=
Subject key identifier:   6D:3F:B4:76:8F:4D:F1:B0:AB:0C:4A:04:3A:6E:A7:06:A2:B2:5D:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1170D5438F165ABFBE3B9F4062F84D5D0A7B05D3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/859bf75d-716b-48b3-ad92-9491ce0e2b35.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        66.34.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:70:d5:43:8f:16:5a:bf:be:3b:9f:40:62:f8:4d:5d:0a:7b:05:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=b7620b34fa1fc195add78c6684919a60090aee0509e68e71460084ee3d1b2664, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:24:46:55:2f:82:b9:68:56:84:24:69:63:
                    a7:37:2d:a9:c5:80:5a:df:27:e9:77:fd:c4:1e:51:
                    2c:84:43:32:c8:89:fd:55:0a:00:55:98:ed:1d:14:
                    86:ed:d9:29:ef:b8:24:06:c4:78:03:23:25:98:de:
                    91:bc:03:80:2b:00:12:44:18:e9:78:a2:b4:2b:54:
                    00:2b:3e:7c:e7:47:f8:1c:a1:bc:a7:50:a7:51:9d:
                    85:fa:d4:9d:c5:04:da:91:fa:6a:c9:e7:d5:b2:62:
                    37:19:8b:b0:9c:2b:43:11:20:fb:00:be:9b:52:83:
                    ea:e0:bf:d4:60:8a:c8:ed:c8:0a:dd:3f:6e:ac:45:
                    2a:bd:8d:2a:ea:e3:33:9a:fe:2d:97:6f:b6:c7:49:
                    8b:fe:c6:58:af:9b:65:1d:cc:ce:74:58:32:2e:1e:
                    4c:73:53:6f:a2:0b:4b:8b:6a:af:bd:82:2b:25:01:
                    dc:57:88:12:ce:fe:dc:28:3a:84:ac:fe:f2:83:1c:
                    b4:36:81:e8:15:5c:16:3e:9b:bd:c0:f7:5a:cc:71:
                    cd:f2:15:ab:c1:56:ac:65:1b:f6:4d:6b:af:38:69:
                    b6:00:a5:e4:46:5b:74:76:0c:aa:dc:e9:29:8a:d4:
                    73:9a:b8:9d:a3:71:22:2a:45:7c:e4:52:50:a3:de:
                    0d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3F:B4:76:8F:4D:F1:B0:AB:0C:4A:04:3A:6E:A7:06:A2:B2:5D:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/859bf75d-716b-48b3-ad92-9491ce0e2b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.34.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:35:64:ea:a0:ed:8e:44:d7:6d:4f:59:5b:46:00:ef:fb:38:
         2a:32:13:f2:9f:5a:9e:96:eb:c2:fd:6f:07:67:83:0b:d3:84:
         6d:fe:77:4d:49:50:3a:d9:76:f1:fb:96:cb:5d:45:bf:9f:cc:
         94:41:a7:0c:82:15:af:4f:3c:32:e2:2d:c3:7f:21:0b:43:03:
         a1:21:28:7c:b6:6f:9c:f2:f5:8c:4e:70:53:91:d9:fa:21:4e:
         45:3c:79:6e:ae:51:e4:78:e8:92:f9:69:ff:29:72:4c:0f:52:
         83:3d:b5:16:42:4f:44:b3:94:a0:a8:c9:9e:fb:87:31:12:6d:
         bd:41:f7:91:70:dc:d5:80:70:35:1d:1d:9a:8d:89:e3:0e:4e:
         20:0e:e8:b4:30:5d:2b:26:7b:03:94:bc:30:86:8f:a6:bb:9e:
         fe:35:dc:1d:40:ce:7e:d9:37:26:c4:0e:b7:50:54:3b:b8:eb:
         06:f1:d7:ee:91:5b:0d:c2:c2:50:75:76:cc:21:db:5c:96:92:
         e8:ca:0d:30:48:c1:dd:4a:d0:14:f0:17:57:14:44:52:ad:7e:
         a1:74:44:24:fc:3d:93:65:21:c5:2d:eb:ef:7d:9e:04:cc:f5:
         09:25:6e:ac:16:74:55:ca:d3:1d:b4:06:bc:c5:88:f3:34:94:
         58:56:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:51 2024 by rpki-client on console-ams.rpki-client.org