Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d91aaa-a302-47ac-9ff3-22b5494654b8.roa
File:                     94d91aaa-a302-47ac-9ff3-22b5494654b8.roa (raw, json)
Hash identifier:          m60epTdslh9ZjFh4pTRpiiDDv4SPADeiUrJyRF7HJ84=
Subject key identifier:   F9:E5:A4:F7:C0:05:61:2D:1D:3E:78:BC:16:17:CE:D1:98:65:0D:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B77EC3DB345AE2E4B2E697F989D0B1AB0A5D2F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d91aaa-a302-47ac-9ff3-22b5494654b8.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:77:ec:3d:b3:45:ae:2e:4b:2e:69:7f:98:9d:0b:1a:b0:a5:d2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=7091aac15cd1780758946515cf22dfb173c30d6cc00068a46a4f050013e63ae7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a7:33:b2:76:d4:c0:3e:00:8c:40:d1:6d:30:
                    50:59:f5:f9:11:dc:e2:c4:87:fb:b6:aa:21:04:be:
                    d4:55:0e:90:11:d2:7f:ea:3a:64:5c:d2:f6:a8:01:
                    c3:c9:eb:cf:05:e7:4c:ad:a4:8e:96:b9:61:67:50:
                    fa:20:11:df:2f:5f:50:15:7b:c4:cc:1f:e4:35:1d:
                    25:6d:9e:e4:54:ec:19:b0:19:1a:e9:4b:a6:40:11:
                    da:8c:25:31:73:1d:94:f8:68:f2:f3:36:1d:fb:85:
                    14:08:0e:96:9f:5a:d8:46:67:37:8c:d2:15:13:fe:
                    cf:2a:8d:30:e9:85:6f:60:65:eb:10:a2:c4:bd:c0:
                    d1:c1:21:75:7e:8f:1e:3c:8d:79:ab:a4:84:ed:0f:
                    98:d4:3a:11:a1:08:c9:22:49:af:ea:75:38:3f:21:
                    3d:26:d9:d8:c7:83:50:41:66:5d:99:32:d1:e0:03:
                    e3:9c:68:e6:09:d1:7f:1a:ee:51:1c:16:cd:c3:7a:
                    28:36:29:0c:2f:15:f8:58:0f:dd:36:59:20:b3:fe:
                    79:38:d7:3e:fb:6f:92:6c:43:0a:97:3f:fb:c4:af:
                    83:8e:b5:f1:8c:19:08:02:44:8c:09:f9:59:ee:ce:
                    3c:f5:2b:04:66:34:be:5c:05:bd:a9:4c:47:23:2e:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E5:A4:F7:C0:05:61:2D:1D:3E:78:BC:16:17:CE:D1:98:65:0D:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d91aaa-a302-47ac-9ff3-22b5494654b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:5f:6c:ca:57:e4:9f:4a:aa:89:79:a7:a1:79:f4:30:d5:31:
         9d:50:92:6e:7b:82:db:d5:c1:60:38:61:e5:ce:52:68:2f:49:
         b4:bd:e1:23:87:3e:84:6a:ba:51:60:93:9f:b0:d2:be:e2:bf:
         9f:e2:8f:01:9d:ff:e1:33:94:fc:98:db:c2:b7:45:97:17:a3:
         f8:61:df:a4:db:d5:a6:05:87:e0:14:27:25:0b:26:78:ef:52:
         b7:6b:96:41:34:2e:38:5a:1f:10:dd:d1:2d:8c:4c:ab:98:e2:
         0e:6b:b9:f6:5c:2b:a6:8c:36:40:b6:8f:39:3d:ad:53:57:95:
         b6:34:24:6d:3a:b4:50:fe:f3:34:ed:d9:82:92:2b:21:cb:f9:
         65:45:9d:fc:9f:bb:99:b1:34:ff:38:a4:3e:ea:a7:7a:a3:a3:
         9a:a8:a4:a2:5d:a7:01:fc:0d:a9:d7:da:a2:2b:4e:81:fa:4c:
         fe:34:3b:04:73:cc:d0:d0:5d:fb:f9:e0:8b:9b:e5:bf:e5:c6:
         b6:d2:18:de:f8:16:97:52:8b:0b:ec:94:ee:03:c1:5e:0a:a2:
         37:08:78:38:b1:7b:27:2d:20:f2:59:3d:9b:1e:2e:e6:ea:71:
         22:7d:bc:a1:f4:ca:17:72:77:f9:7c:eb:cf:94:18:81:62:e6:
         1a:95:90:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:17 2024 by rpki-client on console-ams.rpki-client.org