Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b125bccd-3b9c-48ce-9726-ae9d7c0bc6a1.roa
File:                     b125bccd-3b9c-48ce-9726-ae9d7c0bc6a1.roa (raw, json)
Hash identifier:          qsttikDoOwbybeZA8+/z67ZM7iLv9k9M7RgPIIOc1Pg=
Subject key identifier:   DF:76:E2:28:F3:76:73:F3:AF:D6:77:A1:E8:B5:98:B5:2D:02:CA:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C47881E1227F4B8F3020076B22E2EB9166A1357
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b125bccd-3b9c-48ce-9726-ae9d7c0bc6a1.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        13.144.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:47:88:1e:12:27:f4:b8:f3:02:00:76:b2:2e:2e:b9:16:6a:13:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=e3ee7c38baf585a83d49ce510508b77f64dafab0be5b9e59fbcee42d8e8518ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:61:3e:f2:2c:06:79:88:63:c1:46:80:78:8d:
                    71:80:7b:c4:46:bb:88:84:8d:e1:9b:3f:43:b3:a2:
                    ff:9b:cd:0b:fc:dc:94:20:c5:0c:e5:49:f1:2d:f8:
                    aa:53:b0:12:b2:5e:28:6f:68:5f:12:ee:e4:1d:72:
                    36:8b:69:c2:cb:74:3a:a7:1b:2f:1a:a0:a7:30:04:
                    df:de:86:85:ce:69:c0:f8:16:45:4e:f9:9a:6e:97:
                    15:21:15:e2:23:7b:b0:fc:71:c8:7b:cb:67:c3:9d:
                    c6:ae:26:90:28:aa:b1:4b:2b:a1:8c:41:8a:e4:b1:
                    81:37:2a:aa:4b:31:1e:b3:3f:6e:d9:bd:ee:2a:20:
                    7b:7c:98:8f:b6:ff:93:2e:0a:00:d5:c8:96:b4:3d:
                    8a:c4:59:d7:05:ae:fa:49:56:47:bc:81:42:91:42:
                    b4:14:3f:79:a3:a9:52:d8:d5:b9:d8:23:27:64:e2:
                    c1:f0:d1:88:51:34:66:da:58:7b:a3:02:df:f6:34:
                    0a:1e:b3:ab:bd:70:74:80:67:9c:7f:0b:b1:19:99:
                    6c:73:1b:7b:34:45:e4:21:36:87:e8:d6:d3:0b:f2:
                    ea:b6:e7:11:40:c3:33:99:ab:38:f3:11:97:e9:37:
                    ef:75:e4:90:f6:51:bd:6e:53:1f:13:f8:d4:46:73:
                    0c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:E2:28:F3:76:73:F3:AF:D6:77:A1:E8:B5:98:B5:2D:02:CA:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b125bccd-3b9c-48ce-9726-ae9d7c0bc6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:62:ed:be:64:6a:48:68:97:dc:38:7e:b9:b3:e8:fe:a9:fd:
         01:ec:b8:19:2f:26:60:4e:df:16:00:dd:26:63:14:d0:ff:fa:
         6f:c2:01:92:5d:92:6f:6e:40:55:83:ba:c9:21:c9:5c:c0:84:
         a9:34:1b:f4:e1:17:b5:d9:1f:23:c5:c6:49:75:81:87:97:e6:
         a9:a4:08:c5:1e:e8:b9:68:e7:57:24:19:96:37:e8:e3:22:b4:
         58:d0:1d:5a:66:ed:1b:a1:a8:33:93:32:41:ad:d2:44:3f:36:
         d0:17:de:9a:6c:c7:59:b0:50:3f:95:99:5c:be:e8:3d:65:8f:
         94:3e:f5:65:d7:82:6e:02:e8:11:e4:8e:64:e8:0b:46:8d:73:
         00:f3:ad:88:4b:38:89:91:17:0e:cc:5b:8f:d9:42:75:3c:c7:
         f2:85:6f:13:53:f4:f9:ac:a0:75:a3:65:ec:7e:c9:8c:67:fb:
         dd:00:55:88:ac:e8:a3:ef:8b:05:69:fa:e2:9a:9d:5d:3d:5f:
         f2:6c:74:d6:ce:1a:cf:73:19:c3:95:b5:86:1f:74:7d:73:f0:
         b0:37:d9:63:c3:0f:2a:46:c2:ee:d4:4c:d8:83:65:81:31:fd:
         c8:2b:8c:68:57:56:ee:06:80:8f:44:1c:f4:71:98:11:26:af:
         a4:da:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:24 2024 by rpki-client on console-ams.rpki-client.org