Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa
File:                     975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa (raw, json)
Hash identifier:          D2XAkXpFehO8gLSVB8E9NaWbTUyEOfRnK13/TfhwWco=
Subject key identifier:   C5:88:04:0D:7C:21:9E:48:30:48:52:E2:C3:69:6A:40:12:A1:0E:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6970C4DEDEAF2A2529F8B110710226551FFDC36C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        206.217.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:70:c4:de:de:af:2a:25:29:f8:b1:10:71:02:26:55:1f:fd:c3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=e1b99a54af0aedb4d283c04eef09d222a8760dc5c943f39e16416f894764051f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:db:91:77:25:a7:b4:12:49:f1:17:92:61:
                    38:74:de:9d:dd:9f:a9:72:48:8b:44:35:b7:b1:cd:
                    21:be:76:b6:62:24:5b:1b:ee:36:8c:5d:74:c9:ab:
                    f1:22:e6:97:8c:f4:e1:26:1c:08:5e:34:8c:76:d5:
                    d9:38:64:a7:ed:fd:dd:d6:5f:65:7e:6a:a4:df:4b:
                    7f:d6:85:64:19:13:f7:63:5f:bd:1e:3e:3e:de:3a:
                    1e:bc:62:9b:98:e7:42:a0:44:86:a0:92:bb:62:b4:
                    bb:95:a9:2d:f8:d3:39:ec:e7:b9:5f:bd:25:5e:f1:
                    be:ca:fd:4d:cb:7d:68:4c:ef:2a:29:3f:d7:3a:4b:
                    d3:dd:bc:28:2b:5a:de:a6:f8:77:0e:05:9d:be:b2:
                    a2:e2:15:47:b2:02:26:25:7b:03:e2:6e:09:ba:e9:
                    63:e5:a3:48:2e:87:7f:b7:a5:e9:b6:e7:d2:ab:bc:
                    02:b3:2a:6f:9a:59:a3:dc:83:f9:10:37:69:e0:12:
                    3d:2a:67:74:51:2c:81:73:b8:72:22:3b:9e:ae:3c:
                    5f:c0:f1:8c:36:97:47:e0:b7:ab:01:ea:85:95:2e:
                    15:14:f9:69:49:b5:10:e8:66:75:a0:5b:c6:3a:aa:
                    23:29:d1:91:3f:fb:61:a2:ec:8f:a5:b1:16:29:7f:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:88:04:0D:7C:21:9E:48:30:48:52:E2:C3:69:6A:40:12:A1:0E:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.217.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:71:0f:5d:01:06:53:29:b4:40:97:87:f5:f8:51:0b:4b:82:
         f6:85:1d:f4:4b:e0:eb:52:40:ed:2f:ed:9d:d5:9b:3c:05:e1:
         0c:13:28:17:a9:3c:81:ee:32:0b:de:8a:a0:f5:45:4f:53:d7:
         35:a1:bd:23:08:19:28:bb:2f:ca:51:15:6c:86:c7:58:79:61:
         d9:19:5d:75:ac:1f:61:81:15:a3:ba:b0:97:c4:6b:b7:f3:41:
         f1:0f:75:08:ba:b4:3f:6b:92:4b:8f:f2:ed:b0:d5:c2:cc:0d:
         a3:7b:6a:cb:02:13:0d:1f:52:cb:03:52:09:8e:89:ca:f3:7d:
         01:42:cb:0f:97:f8:4f:44:45:9f:ae:89:ba:8a:00:75:0f:5f:
         e0:3e:46:3e:55:3e:bd:92:6f:d9:20:7b:66:82:06:34:83:8c:
         c2:f3:4b:b5:30:84:73:1a:5e:4d:9a:ae:14:cf:b9:25:86:b5:
         fd:f6:87:e4:69:da:fd:79:de:c7:b0:c8:b2:b9:9e:58:11:3c:
         f9:61:dd:49:76:12:bd:94:cb:aa:d1:c0:23:82:0a:85:05:e9:
         a1:56:90:44:ff:65:59:0d:83:b1:ff:df:7b:40:43:3f:44:27:
         f7:50:37:3c:46:6f:fc:56:f9:3a:47:a2:8b:44:be:4a:cb:37:
         8a:42:24:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:18 2024 by rpki-client on console-ams.rpki-client.org