Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad2ce398-5390-4868-bef4-c81c5f39ec07.roa
File:                     ad2ce398-5390-4868-bef4-c81c5f39ec07.roa (raw, json)
Hash identifier:          hXCouLrJaqJGN6IUZiuTOVAdynrPA34oxNqGIglH8do=
Subject key identifier:   6E:AF:05:AF:E5:6E:F7:11:7F:C9:22:A3:81:F3:04:97:BE:24:57:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F669014594842BB5216AC5AFA72BC265E877C30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad2ce398-5390-4868-bef4-c81c5f39ec07.roa
Signing time:             Thu 03 Oct 2024 00:00:00 +0000
ROA not before:           Thu 03 Oct 2024 00:00:00 +0000
ROA not after:            Thu 07 Nov 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        5.60.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:66:90:14:59:48:42:bb:52:16:ac:5a:fa:72:bc:26:5e:87:7c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:00:00 2024 GMT
            Not After : Nov  7 23:59:59 2024 GMT
        Subject: serialNumber=776e92903a4ae64bd28f3673f652aa96db43ebdb02a5b42c7e853054b85d215a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:9c:7d:a7:8e:f2:a6:97:e6:90:6f:04:59:
                    29:71:5e:99:e7:ff:0a:e1:3e:24:51:81:1e:39:71:
                    9c:8b:ad:88:3f:3f:f9:b3:ef:5b:a7:e8:18:86:fc:
                    de:10:10:76:c2:7f:41:82:9b:db:05:dc:02:36:86:
                    c3:33:45:ec:a4:18:b0:a0:ef:01:59:93:5d:f1:e1:
                    28:5c:e7:7b:e4:79:65:1a:26:ea:40:a0:2c:be:df:
                    74:55:47:07:e4:97:9c:bc:dd:96:ad:52:1c:d2:52:
                    d6:d8:88:62:94:42:2b:06:95:15:13:7a:79:5b:30:
                    db:ea:61:dc:d5:f4:16:84:ea:27:3c:41:86:17:2e:
                    3e:eb:3a:98:31:ca:65:5c:6d:ed:c6:c4:b8:5e:99:
                    3b:9f:c4:48:13:fe:d7:64:a5:9f:cf:6b:8e:e2:77:
                    b2:c5:19:ac:83:c7:df:11:7b:e5:f0:f2:8c:74:ca:
                    8f:a3:c2:99:61:12:81:8f:1e:79:a0:05:2f:f3:a1:
                    a6:aa:ca:d3:ab:dc:14:96:d1:c1:3b:dc:43:5d:a8:
                    74:36:cb:91:c4:f5:80:68:58:90:c7:78:6c:27:c9:
                    be:f3:9e:bd:8f:b6:33:3e:81:9c:8e:80:30:ad:9d:
                    82:2c:7a:ea:72:1f:56:41:57:50:56:72:7b:41:93:
                    29:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AF:05:AF:E5:6E:F7:11:7F:C9:22:A3:81:F3:04:97:BE:24:57:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad2ce398-5390-4868-bef4-c81c5f39ec07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.60.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:2e:08:3a:1b:aa:04:f0:93:f5:6e:f7:6d:18:f1:87:2a:08:
         01:40:0c:0c:ed:7b:b7:1d:a1:44:28:78:2f:ae:d6:74:2e:c5:
         24:df:e1:67:96:51:09:60:34:5b:8e:f0:2a:60:be:1d:ef:23:
         77:28:88:86:97:27:b8:51:03:26:d2:04:86:ae:c3:7f:98:47:
         25:36:97:fe:89:2f:c6:bf:f0:15:da:54:c4:fc:ca:9c:0d:a6:
         ef:01:17:21:45:37:27:69:bc:9d:cf:77:d0:aa:1a:c6:89:ec:
         74:af:9d:c2:e3:08:4a:a7:fb:fb:a0:00:f6:b7:2e:16:f8:0f:
         fb:fb:13:07:0d:9b:40:04:18:bd:59:de:07:04:0d:26:b8:51:
         86:88:f4:c3:b7:54:08:99:5b:18:46:0a:5b:8f:65:89:a9:49:
         91:0e:e3:31:0c:de:2a:97:e1:ef:b2:ed:a1:9a:1e:62:a3:32:
         af:6b:34:09:7f:84:c3:03:39:60:16:25:de:c2:7f:9c:a3:a0:
         82:d2:4a:31:16:2a:ca:29:7a:99:ac:8b:c3:3c:9d:6b:2d:f7:
         2a:87:f3:69:36:cb:e4:18:b8:56:4c:34:f3:2c:91:49:d0:87:
         b3:6d:13:ae:94:b7:c8:a4:cf:f8:a8:a6:e5:d1:c5:f9:76:8b:
         f2:4d:dd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 01:38:17 2024 by rpki-client on console-ams.rpki-client.org