Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93f00741-af96-4c1c-a6f5-c58a0d776c7e.roa
File:                     93f00741-af96-4c1c-a6f5-c58a0d776c7e.roa (raw, json)
Hash identifier:          KrVvYL3k9ipuS+6Kb1V1CdtCaJnTT5TJaOjIJkjGd+s=
Subject key identifier:   EA:91:61:34:81:5A:DC:0D:FA:1D:8C:AD:00:58:63:23:C0:DA:9D:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A900BA7BA2C88D179B72F4AD31BCA075F62AE60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93f00741-af96-4c1c-a6f5-c58a0d776c7e.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        136.8.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:90:0b:a7:ba:2c:88:d1:79:b7:2f:4a:d3:1b:ca:07:5f:62:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=8d5506d4d0cfedcbfcee3ceeff53752f31e4555aef59c84953d9ded86dad22c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:1d:be:ff:50:2d:dd:09:64:9e:f8:ed:7c:
                    97:d3:04:b0:54:ec:45:38:1e:8e:af:24:75:9a:b8:
                    62:d2:03:b9:ff:f2:ca:3d:ad:8d:a7:76:17:db:13:
                    63:48:0d:f8:0a:1d:49:e2:4f:fe:08:a9:d2:ba:a7:
                    40:6e:83:17:9a:c7:02:dc:73:78:42:25:f6:3c:82:
                    77:77:2d:b8:b0:a6:b6:0d:09:f1:f2:ef:d5:9e:bd:
                    b6:ae:e1:6e:f8:9f:24:4b:b2:3c:b4:24:42:75:a9:
                    1f:69:a3:5d:2b:42:4d:4a:55:c2:09:93:e7:3e:32:
                    ac:61:46:68:10:ae:f5:19:a2:2d:4f:12:73:12:ae:
                    fe:7b:7b:82:fe:98:71:3a:f0:77:b3:bb:eb:46:4d:
                    fc:16:7f:51:fa:7a:a0:c1:3b:48:52:60:b4:86:64:
                    36:0e:56:da:c7:c2:1f:a1:b6:79:05:82:20:72:5d:
                    bc:2f:1c:99:87:da:ac:2d:58:b5:9c:b2:cb:e0:f8:
                    55:f0:de:2d:ba:d9:77:f4:e3:27:0a:e0:e0:09:4e:
                    79:d4:b5:e6:94:14:78:66:1b:7f:68:ff:59:ad:14:
                    0e:c1:61:47:3f:52:d3:c7:d9:5d:d0:14:c1:7f:cb:
                    3e:bc:7b:73:7e:c5:6b:ea:a8:31:e1:1c:cd:ec:eb:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:91:61:34:81:5A:DC:0D:FA:1D:8C:AD:00:58:63:23:C0:DA:9D:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93f00741-af96-4c1c-a6f5-c58a0d776c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.8.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         bd:56:91:a4:ce:d0:2d:9e:a1:08:a0:81:29:0a:96:56:63:17:
         dd:2a:d7:38:37:a3:90:26:71:48:8f:a2:17:54:1d:3d:8c:26:
         ad:15:d4:48:2e:a1:50:2e:63:00:ce:39:eb:0f:40:d7:b6:bc:
         29:c4:19:ac:25:0d:fb:91:ce:86:f6:9f:6b:3f:cb:d8:16:00:
         5d:8e:bc:13:47:d3:a8:22:b4:7e:17:88:85:a9:4f:cb:98:f8:
         6c:69:12:b1:a0:5e:53:35:ab:a1:2a:39:57:96:54:d5:45:84:
         05:f6:83:33:f6:82:50:5f:60:08:9f:d3:eb:29:49:a6:53:4c:
         5d:77:d2:64:cc:c0:bd:3a:77:05:fb:29:49:49:ee:5d:a9:87:
         7a:0a:90:a3:56:37:85:ff:1f:bb:26:db:d0:66:7a:f3:ed:78:
         e1:36:fb:f9:07:2a:8f:e6:e9:38:4e:98:12:4f:f8:f1:5b:03:
         0b:78:b6:5b:8d:f0:0d:25:13:2d:e8:dd:51:85:35:53:36:b5:
         44:e8:77:80:68:bb:37:65:71:a6:22:65:72:af:46:1d:7c:e7:
         d6:ae:2b:f9:7a:21:26:80:7d:30:02:e1:95:98:eb:02:0e:f5:
         97:b2:7c:e4:8e:2f:f4:89:de:31:9c:c4:cc:a8:00:3a:3a:4b:
         1a:f2:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:37 2024 by rpki-client on console-fra.rpki-client.org