Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9078a9-7f3c-49b9-9c69-3e68c37e2bdd.roa
File:                     ad9078a9-7f3c-49b9-9c69-3e68c37e2bdd.roa (raw, json)
Hash identifier:          n7hOQOnJndfU4NcLVlJXQ+19rzF08vM/WLQaNJ2Ap4o=
Subject key identifier:   E2:B4:83:B5:80:C2:77:A7:B6:C0:75:E3:BE:E1:5B:EE:9F:B7:5B:AA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E15CB11BBB4BC5E0BAACFE0AD1A5C65EA7A1E6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9078a9-7f3c-49b9-9c69-3e68c37e2bdd.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        108.136.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:15:cb:11:bb:b4:bc:5e:0b:aa:cf:e0:ad:1a:5c:65:ea:7a:1e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=4b43dca44a85f31bc465662398d206072ff6bdf9f58f539a824d5f9200613563, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:1e:a6:14:5f:f3:d5:e8:21:ae:b4:51:1b:
                    51:11:da:f9:5b:2b:1e:71:81:4f:a3:d8:1e:5f:fa:
                    39:93:0e:34:b5:c4:33:36:33:70:df:90:3e:26:c5:
                    4e:17:7a:89:a2:73:59:bc:33:9c:3e:87:84:3a:c6:
                    28:1f:7c:d4:e1:7f:59:83:44:99:78:d3:cf:85:78:
                    81:d8:26:10:34:af:2b:05:2c:4b:ed:b6:7f:c1:93:
                    21:bf:e3:08:14:47:f5:f3:28:7b:04:d7:c1:96:5a:
                    10:39:88:54:41:3e:51:67:4b:74:0d:ef:15:81:77:
                    70:f2:a7:e6:5a:b1:7c:b0:5b:16:cd:96:9c:99:7c:
                    d1:e4:4c:52:89:ff:79:6f:7d:3c:69:5b:08:97:70:
                    a1:7f:e3:5f:f1:52:90:fc:11:2f:89:6e:4c:54:96:
                    92:ce:4d:72:b4:cb:e1:47:e0:7e:20:7d:b3:e9:49:
                    29:2f:97:6e:d1:63:37:1a:96:ae:8e:78:3d:5d:e9:
                    4a:2a:88:ce:99:d3:be:9c:24:a4:8f:32:68:f2:4d:
                    30:00:23:87:50:1f:29:6e:ca:52:de:58:14:d4:e3:
                    ba:dc:56:64:28:71:42:7f:5c:20:da:e1:89:1e:28:
                    f8:b5:cc:ab:c5:26:a1:72:5f:70:6f:a1:30:5b:dd:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B4:83:B5:80:C2:77:A7:B6:C0:75:E3:BE:E1:5B:EE:9F:B7:5B:AA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9078a9-7f3c-49b9-9c69-3e68c37e2bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3b:50:53:75:ea:b2:4c:36:9f:4f:f0:14:de:13:bb:91:da:3d:
         81:98:90:82:4c:2b:cb:18:d3:7e:9d:73:f4:84:13:94:db:38:
         2b:44:9b:a5:31:8b:85:7b:c3:6f:66:76:b1:0b:11:92:e9:94:
         eb:59:38:15:e3:04:85:5a:f9:e3:f4:ac:36:80:4e:7e:6c:bb:
         6b:37:54:9d:a7:34:78:0d:49:ff:98:1d:31:ad:fc:05:e5:c3:
         39:06:22:86:d6:fd:e1:83:00:6a:cb:47:b4:ac:1f:1e:81:54:
         c7:a1:22:fa:7d:c3:9b:14:a5:25:ab:d3:2f:38:56:5f:32:41:
         2b:55:94:28:e1:aa:4e:7f:31:e5:78:8c:84:87:76:ab:44:25:
         88:2a:c4:49:b9:62:46:97:ba:e1:17:82:f8:f8:f8:51:c8:d5:
         89:78:49:07:86:1c:3f:d0:0a:ca:6a:92:3b:a6:b0:8b:72:8a:
         7f:8f:dd:5e:f1:61:78:55:8e:98:5c:e8:9f:1e:cd:c1:75:8b:
         5d:88:ce:c1:2f:a5:4b:d8:e0:43:8a:6d:1e:8b:2a:bd:45:fa:
         a9:c1:fc:7e:2f:f3:15:c4:22:15:cd:65:72:83:5a:67:3d:bf:
         e6:d9:96:67:35:79:0a:cb:e9:b2:80:bd:ac:2c:eb:91:ed:fb:
         ba:9b:d9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:23 2024 by rpki-client on console-fra.rpki-client.org