Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a5a7c8-080f-4821-b0ca-fbdfcc05b292.roa
File:                     b7a5a7c8-080f-4821-b0ca-fbdfcc05b292.roa (raw, json)
Hash identifier:          IBWqxuvLzK6GuDSHf80a15Gg1A8ZnGbajcIdaLwbsY0=
Subject key identifier:   3A:5D:3B:37:96:B2:46:7C:45:AC:EE:37:A9:6C:57:4A:30:3C:69:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6BBCE027B4D2E27C8824881A623DDFFB6B4423FA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a5a7c8-080f-4821-b0ca-fbdfcc05b292.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        149.180.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bc:e0:27:b4:d2:e2:7c:88:24:88:1a:62:3d:df:fb:6b:44:23:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=118b3dcdc28f7ef8846cc55b7504b2c5babd95ed60562162e24b60517c7a2077, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:e9:9b:08:d9:bf:1a:e0:5d:1e:87:85:bd:
                    1f:3e:cb:43:e1:12:60:67:0c:27:5e:34:06:28:46:
                    d7:91:21:f5:ee:2e:a0:06:65:89:f8:34:7d:14:44:
                    a2:40:ac:ee:19:a1:2d:47:e8:f0:1a:12:81:0a:a9:
                    70:33:1e:82:ec:cb:fd:48:14:8b:b4:50:0a:ca:06:
                    c7:f4:b7:7a:b1:8a:66:50:d3:4f:82:33:d3:11:9c:
                    16:0e:6c:70:0f:8e:ac:28:3a:80:4e:1e:d1:68:88:
                    32:ec:3c:af:01:aa:07:75:05:1f:59:46:14:44:93:
                    b2:13:b0:93:67:23:a4:32:e2:6c:fe:6d:7c:5e:c7:
                    40:cb:47:de:20:3d:fa:95:5e:b5:84:36:28:86:c3:
                    f7:96:11:ac:7e:c9:78:21:24:73:55:92:d6:e7:ba:
                    9b:b4:36:c2:34:d4:bb:9d:e1:e4:21:75:e1:86:96:
                    23:d6:e7:02:3f:50:55:09:3d:86:f3:be:13:47:cd:
                    2f:0c:7f:1f:fe:bd:68:da:c9:d1:57:b3:d2:c6:bd:
                    c9:18:47:34:a8:2f:71:09:53:75:1f:8f:6b:e1:bb:
                    99:4b:60:db:9a:64:86:ce:92:d4:05:2e:58:a5:8b:
                    ce:b6:7f:11:13:99:73:c3:1d:ba:ec:99:17:93:e4:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:3B:37:96:B2:46:7C:45:AC:EE:37:A9:6C:57:4A:30:3C:69:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a5a7c8-080f-4821-b0ca-fbdfcc05b292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.180.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:8c:f5:c3:db:1c:68:ae:d1:75:ea:a9:e2:a1:fe:0b:44:
         63:b1:83:2b:5a:89:9d:27:86:d5:a6:ea:11:e9:60:9d:50:87:
         95:18:0e:e6:3d:79:0c:73:29:24:dc:31:ba:c4:31:66:41:2b:
         a3:0b:1f:96:91:d9:86:06:b8:f8:cd:d2:6d:8d:81:bf:fd:ba:
         5f:7d:bd:e6:d0:a7:ec:fd:5d:61:9a:2a:7c:1e:16:10:d2:20:
         a5:0b:a0:51:39:3b:be:a3:2c:b9:29:8f:52:71:e4:ab:94:c2:
         46:b3:b1:45:b6:c6:91:cb:96:46:10:6c:6b:ef:bc:57:bd:b1:
         9c:d5:73:da:c7:cf:6d:a2:d3:48:16:b4:7c:91:8d:71:09:f2:
         24:a5:ec:7f:af:68:a6:4a:fe:a0:52:20:bb:72:08:11:8c:99:
         d5:d2:a6:70:d1:19:62:93:2f:94:2f:d4:58:3a:61:03:bd:50:
         4f:bd:6e:7a:72:2b:95:0b:86:c2:7b:0f:73:ac:a4:bd:2e:35:
         11:b3:63:db:f8:08:8b:57:ed:74:d7:40:bf:f6:25:3d:0a:71:
         3c:80:3f:ee:10:88:9c:d1:02:7e:b2:ab:37:9f:38:b7:28:c1:
         49:e7:14:a7:54:e7:a6:f9:1d:27:46:6e:60:7b:10:82:77:79:
         f3:e2:0b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:47 2024 by rpki-client on console-fra.rpki-client.org