Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/897b3ffb-179d-4925-aad6-3b1b7d0dbbc1.roa
File:                     897b3ffb-179d-4925-aad6-3b1b7d0dbbc1.roa (raw, json)
Hash identifier:          wssrAtn2zbKgBdjhbpkSsCFCCaXVi39MJSd+f00++Sk=
Subject key identifier:   26:79:26:E8:BD:75:3A:C5:60:C8:84:79:A3:8C:26:8B:D5:01:1A:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46B81DD50DB115A3C06E7FDBF5F33A7C7036DAA3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/897b3ffb-179d-4925-aad6-3b1b7d0dbbc1.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        57.201.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b8:1d:d5:0d:b1:15:a3:c0:6e:7f:db:f5:f3:3a:7c:70:36:da:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=ec5ebfe9ec30436229831105206834cce16276825d59f4f8519c6ca4073545f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c9:50:74:bd:f1:71:1d:22:35:12:63:49:e4:
                    86:6e:db:31:6e:a4:56:19:fa:3f:9d:11:89:cb:af:
                    12:c2:25:01:d0:47:cc:91:5b:15:f8:fa:6d:b2:a3:
                    f9:4c:3f:92:39:59:d0:23:d6:d2:90:65:c3:4a:8f:
                    b0:a0:1f:b9:5d:9f:23:17:67:8d:bb:ed:73:1d:77:
                    0a:28:da:d6:99:f3:96:74:62:06:95:50:eb:01:b5:
                    ff:92:3e:ee:60:3e:86:b4:2c:d1:c4:30:ea:fe:fe:
                    f1:07:cd:90:6d:a6:b5:35:07:bc:c5:8b:c9:04:b5:
                    e6:97:52:ec:e2:0b:a5:65:eb:05:22:15:9a:a8:e0:
                    8f:1c:84:87:4c:56:37:0b:5a:e0:51:97:a4:f8:5c:
                    57:ab:61:92:ca:b4:ed:65:c6:5c:e2:f4:4d:fa:e2:
                    50:ef:9f:90:c0:c7:94:b5:27:90:7e:e5:6f:81:09:
                    57:f9:58:eb:9f:70:a9:cf:cf:59:da:01:1e:35:35:
                    0d:42:b9:c8:6c:1a:0d:07:23:de:ad:21:e6:44:5b:
                    aa:89:11:f7:68:01:6b:bd:61:62:24:52:54:a5:a9:
                    50:5f:70:27:27:bc:bd:49:40:c2:ad:0d:f0:96:64:
                    12:f6:00:db:80:92:e8:41:fd:84:d0:a9:a0:d1:d5:
                    23:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:79:26:E8:BD:75:3A:C5:60:C8:84:79:A3:8C:26:8B:D5:01:1A:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/897b3ffb-179d-4925-aad6-3b1b7d0dbbc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.201.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:f2:ed:ef:20:94:52:c4:a0:d1:0b:8f:fc:c6:f3:71:18:5f:
         05:8b:5a:1e:ae:d0:53:fe:3d:32:5e:dc:87:05:cf:14:31:6c:
         a8:4c:cd:af:3e:f5:62:67:67:8b:dd:08:f6:5c:7b:0d:a7:15:
         bb:a6:5d:7b:1a:f6:54:f3:cb:49:35:94:f0:e5:e0:d6:37:36:
         59:b0:97:65:b2:ad:9f:79:0d:04:df:36:a5:4c:66:bd:2b:66:
         2b:44:97:37:89:db:10:c6:52:b5:d7:fe:18:08:fb:2f:4c:50:
         73:7b:6b:8d:7f:d0:25:21:b2:e1:59:99:e7:16:e9:6c:df:eb:
         62:82:2f:93:41:fc:cf:60:2f:6f:e0:0d:e0:8f:c5:12:19:dd:
         ed:96:44:fa:a8:f9:44:82:3e:83:13:56:c1:05:44:e4:02:ed:
         dc:30:87:3f:98:fc:dc:9b:5d:a6:ee:7c:5c:c8:2e:aa:88:fd:
         1d:4e:a5:47:9c:b5:92:fa:09:04:32:ca:1b:12:6c:c1:06:2a:
         d5:c0:d4:2f:a5:59:84:ca:46:6c:83:80:71:02:00:b9:37:21:
         74:65:ac:60:54:1e:05:a5:08:20:46:bc:b8:05:93:2f:d5:a4:
         bd:8b:d3:9b:26:5c:29:b4:b7:d1:93:c1:08:6f:a5:10:6f:43:
         59:80:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:14 2024 by rpki-client on console-fra.rpki-client.org