Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd56dd84-f3f4-41ae-aaa8-c50d45ad9eff.roa
File:                     bd56dd84-f3f4-41ae-aaa8-c50d45ad9eff.roa (raw, json)
Hash identifier:          AQG8qQOCyghFMk14wrN+uUV2l/heskxfQHR/MTnDdt8=
Subject key identifier:   87:F7:28:A2:F9:BE:84:CE:0D:81:E2:6A:3E:85:0E:A4:EC:2B:71:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12F6986CAEDCB5778DEE1F88092185DBB83D0A5A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd56dd84-f3f4-41ae-aaa8-c50d45ad9eff.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        142.54.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f6:98:6c:ae:dc:b5:77:8d:ee:1f:88:09:21:85:db:b8:3d:0a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=e32e4b97d91c1ce2ba960f62ddb23dc74a7351f592abaa9f9401f5c01f90e0a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:77:c4:74:3c:dd:c7:34:2f:2b:76:72:fc:
                    69:88:4f:10:5d:1a:25:52:e9:24:11:0f:3b:83:9e:
                    ae:fa:09:b5:24:c3:f5:f8:11:07:6c:d7:0d:34:ba:
                    22:dd:17:ca:30:7e:1c:42:95:01:2a:ea:24:b1:4b:
                    15:4e:19:7f:86:58:2f:a8:d7:c6:b9:9b:24:09:ee:
                    05:b0:f5:9b:97:cc:ed:1b:8b:a5:c1:e7:03:5c:e1:
                    f1:29:f1:dc:15:8d:34:ff:f5:7e:d4:2a:b8:b4:f4:
                    8e:b7:28:e7:36:7a:ad:8b:50:9d:f2:53:bc:7a:5b:
                    77:66:81:10:d3:89:a2:79:5f:d8:ae:ee:4b:e5:2d:
                    c4:89:ba:53:fc:b6:2f:b3:b9:c8:00:96:c6:7a:4f:
                    e5:57:9c:d8:43:45:36:ea:1d:af:28:44:58:d7:3c:
                    b0:cd:e9:68:39:fc:cc:27:3a:06:dc:fc:85:42:b9:
                    ed:0f:87:bd:fe:71:e0:1d:4d:27:93:b3:0e:6a:02:
                    17:9e:07:3b:cd:10:6e:19:30:40:03:b1:e3:a7:a7:
                    7a:b8:b5:d9:c4:24:de:3f:69:eb:ce:22:8b:a8:f0:
                    01:2a:3b:da:f8:77:73:88:ab:7e:19:45:06:24:2f:
                    87:ee:29:b0:ac:10:fe:37:60:3f:de:1f:dc:4a:ae:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F7:28:A2:F9:BE:84:CE:0D:81:E2:6A:3E:85:0E:A4:EC:2B:71:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd56dd84-f3f4-41ae-aaa8-c50d45ad9eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:90:3c:1f:5c:75:f9:8a:f5:c1:2b:65:42:2d:63:c3:23:
         7f:55:84:7d:b7:4d:44:ac:4b:e8:f8:71:2b:7a:2f:58:1e:62:
         ae:fd:e8:f5:4a:c6:02:9b:bc:16:85:a5:e7:ff:51:3c:04:36:
         46:88:be:d7:59:08:cb:6e:43:be:cb:96:4f:a8:01:c4:78:74:
         d1:b4:e9:4a:28:8b:d2:b1:99:77:66:e1:1f:ca:8e:7f:0f:03:
         d0:88:d9:f2:f0:2b:e6:e7:43:9f:51:82:4c:60:fa:fb:79:a0:
         ff:43:3f:69:e3:fe:ca:21:7d:e0:41:b1:23:23:60:67:eb:04:
         fb:98:f3:7a:71:59:1a:a8:05:96:4b:c8:71:95:4b:03:36:af:
         c7:d5:53:7b:a4:aa:5e:9e:b6:c1:59:79:1a:99:50:84:2e:3f:
         55:88:bb:f0:f3:5a:4d:53:be:cc:dc:22:9f:75:b0:ec:c0:68:
         7a:53:7d:42:6b:76:2d:81:1a:05:34:ba:7b:cf:d7:54:ee:66:
         dc:de:fe:dd:6c:7e:0c:2f:e9:7a:d4:13:e4:04:c3:d7:0f:b1:
         41:9a:57:e8:e5:41:0c:19:d1:84:c5:3c:a8:fc:dd:62:7e:4d:
         51:42:8f:ee:7f:65:4e:63:9f:d1:23:c7:d5:f6:6b:de:5a:d4:
         d8:64:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:26 2024 by rpki-client on console-fra.rpki-client.org