Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f81cbb-80c4-43d5-b6e6-4bd4174853f2.roa
File:                     88f81cbb-80c4-43d5-b6e6-4bd4174853f2.roa (raw, json)
Hash identifier:          d1kYm0rblbAQFqerKDfJfR2VpJzI6xm1+rEyeCH9j00=
Subject key identifier:   73:25:C1:F4:9D:81:56:33:CD:28:C6:C8:68:08:67:3A:B2:6F:41:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38FBCE9F0F68BC77F8EAB2F6E0E552EB81D41ACE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f81cbb-80c4-43d5-b6e6-4bd4174853f2.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.46.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:ce:9f:0f:68:bc:77:f8:ea:b2:f6:e0:e5:52:eb:81:d4:1a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=e17d50bfbde88c4d6dba41f439a46f7391476199158cdc1dec26385a9af4f216, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:30:8c:27:5c:6c:12:4a:19:3f:3a:7a:0c:
                    ee:8a:8f:84:5f:4a:76:c6:a3:f8:58:6a:da:fc:27:
                    57:fa:8e:c6:fd:a4:cf:7e:be:e8:f6:7e:1a:75:b9:
                    b3:04:a1:a5:18:fc:50:da:e1:a0:c2:ce:1b:ca:5e:
                    7b:9b:31:a7:d4:52:38:d4:0d:0b:be:47:26:7f:50:
                    97:f1:33:12:1d:dd:cd:e8:fc:90:55:b7:28:df:da:
                    70:67:8a:05:9e:5d:ac:b6:6c:15:d5:e4:2c:8f:33:
                    70:a1:fd:ec:36:b9:f8:5f:6a:d1:30:95:c9:e4:b5:
                    bc:71:7c:1f:63:39:9c:c5:5d:3f:d0:84:d5:c7:47:
                    22:8f:3e:02:15:da:61:1e:bf:6a:3b:2c:d3:a0:dd:
                    b3:b2:95:6c:34:51:87:fe:d0:e7:e2:c1:5f:09:19:
                    dc:f4:49:78:92:d3:ef:f4:cb:52:90:ad:07:1a:04:
                    83:50:2d:0c:c8:81:fc:74:d8:2a:b9:fd:29:ea:4d:
                    d7:fe:ad:23:59:75:5e:be:87:5e:3f:c4:63:d9:29:
                    8c:33:e7:cd:52:9d:3b:a7:cb:81:f9:32:43:26:f1:
                    31:5a:63:88:35:19:64:6b:ed:66:d6:cb:fd:c2:ea:
                    c5:37:c6:61:82:53:cd:eb:82:fb:13:56:d7:6b:29:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:25:C1:F4:9D:81:56:33:CD:28:C6:C8:68:08:67:3A:B2:6F:41:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f81cbb-80c4-43d5-b6e6-4bd4174853f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.46.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a0:ac:6b:cb:7b:bd:5b:45:39:38:e2:d5:a7:5f:e4:a5:bc:ab:
         ad:00:06:9d:0f:9b:c3:d6:f3:d7:8b:b0:d4:c3:46:38:58:c5:
         02:6b:e7:6b:e3:13:ce:a8:ec:dd:1c:cf:0a:2e:27:73:41:a3:
         d0:c6:05:0b:8a:bb:82:3d:ed:5d:53:9e:eb:71:6f:57:d1:a2:
         f4:77:90:47:dc:79:46:bf:69:f5:94:f2:5f:9f:48:03:92:e5:
         20:39:38:38:17:ac:ae:e7:d2:b0:41:fa:0e:2c:db:07:ec:8b:
         01:d9:f1:54:ab:c5:74:98:c1:49:02:b9:ca:35:30:ac:5a:02:
         18:4f:04:f6:24:02:b0:38:18:34:00:32:94:16:b9:53:97:fd:
         ad:1c:ac:09:f3:35:9d:d9:12:9c:7c:4c:b9:14:79:40:3f:10:
         d6:85:d2:ec:b1:ac:c2:39:04:8a:35:2a:5d:35:16:5c:db:f0:
         4a:1d:06:68:36:d8:b4:73:96:2a:c4:f3:11:c0:ed:b9:9f:87:
         d4:15:ca:76:1e:f1:ef:97:53:d9:4f:8c:e4:68:f1:3b:1a:1c:
         af:a1:d3:49:b3:07:22:02:fd:3c:95:fe:25:0a:17:e7:8f:db:
         5e:31:37:b7:34:7c:ad:08:40:30:b6:0d:75:d9:5f:c0:38:55:
         5d:ef:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:16 2024 by rpki-client on console-ams.rpki-client.org