Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c254d5da-a5dc-406d-bc41-b6d5b53f8199.roa
File:                     c254d5da-a5dc-406d-bc41-b6d5b53f8199.roa (raw, json)
Hash identifier:          YMjo2KRMAJJyWJshjxAEUOPMOLx3/5kEcGL/4nAtC5o=
Subject key identifier:   BC:EF:70:49:4C:24:1A:8A:C8:31:43:EA:FD:47:BD:40:BB:62:49:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15ADE2050D8A95561DBBBEC8A7189993B2664706
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c254d5da-a5dc-406d-bc41-b6d5b53f8199.roa
Signing time:             Mon 18 Nov 2024 00:00:00 +0000
ROA not before:           Mon 18 Nov 2024 00:00:00 +0000
ROA not after:            Mon 23 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        147.115.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ad:e2:05:0d:8a:95:56:1d:bb:be:c8:a7:18:99:93:b2:66:47:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 18 00:00:00 2024 GMT
            Not After : Dec 23 23:59:59 2024 GMT
        Subject: serialNumber=a3dd7bfbf0bc903633f6b0b9e566475f10a744e1e12fad80fc926e21474fa250, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:71:58:8b:8a:05:74:75:6b:96:ca:50:e8:
                    7b:39:c8:1d:70:ea:12:6e:2c:ac:43:9c:8a:75:9f:
                    30:c5:46:2a:19:89:f7:14:e8:7d:88:7d:8b:23:e7:
                    45:ad:25:57:a2:06:41:40:0b:c5:d2:c2:4d:ff:c5:
                    d7:88:ee:e5:b0:e1:4b:a6:66:9f:ab:f5:9f:4e:81:
                    9a:1f:78:a1:19:7b:b0:d8:bb:ec:a4:11:70:09:d8:
                    81:3b:fb:9b:fa:04:67:f6:0c:e7:84:4d:ed:93:56:
                    c2:07:bc:02:8f:41:e0:1d:69:97:b9:34:14:e2:13:
                    96:bb:8d:ca:45:d1:fa:2a:f5:84:79:b5:a4:05:bb:
                    6f:b1:3d:b7:7c:8e:96:03:ad:95:f5:af:9c:fa:26:
                    46:8b:36:4b:71:a6:f7:6d:59:28:70:f7:35:9e:d0:
                    21:56:fe:3b:67:a1:9d:6c:7f:de:f4:fe:30:2e:8c:
                    cf:91:01:60:ae:37:00:85:06:85:82:47:3c:a4:e8:
                    b9:29:25:f3:74:4f:fe:73:4f:33:3c:ca:d3:7f:af:
                    8d:13:35:8c:a5:99:be:95:37:7e:20:26:87:66:b9:
                    fe:31:31:aa:56:51:73:fc:37:00:18:ac:03:b9:2c:
                    c3:ed:88:2e:54:aa:11:72:4a:f7:7c:ff:0f:9f:cf:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EF:70:49:4C:24:1A:8A:C8:31:43:EA:FD:47:BD:40:BB:62:49:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c254d5da-a5dc-406d-bc41-b6d5b53f8199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:74:a6:98:f6:7f:f9:6a:47:be:d4:53:da:9c:7d:ec:65:34:
         0b:5f:b3:b1:84:c8:6f:bd:ea:7c:15:87:60:32:04:c7:bf:35:
         35:3a:15:db:45:de:7b:7c:04:0b:ff:8f:13:b3:07:bd:d0:a9:
         f5:6b:49:40:06:eb:cb:52:03:b4:b7:fe:f2:0d:75:ea:b4:9c:
         5f:35:7c:fe:bd:7e:af:e8:15:2b:cd:05:57:5b:ba:2b:36:61:
         74:71:f7:a2:0b:ba:8d:49:4c:19:12:ae:75:06:8d:63:47:3f:
         7c:ff:c9:62:23:12:46:e8:26:d3:c5:83:0f:ee:1b:d7:05:08:
         24:71:45:6e:59:d8:42:f8:bc:11:a9:b6:84:77:00:a7:a7:0d:
         74:8c:24:6a:ed:dd:b8:e4:09:76:c1:e1:62:c9:7a:2d:fd:82:
         5a:33:b0:58:22:bf:80:5f:5e:27:4c:76:e1:04:28:71:74:9f:
         2b:c2:42:f8:e3:5c:f1:82:d7:80:f3:3d:62:b9:0c:a0:b5:de:
         c8:df:93:be:78:c7:bb:f3:1c:23:6d:f9:42:1d:4a:27:e6:41:
         75:56:35:67:04:10:af:63:45:a9:fa:22:ff:60:6f:63:12:e2:
         2e:f4:7f:f2:94:3f:8c:29:14:0f:2b:a5:30:67:51:31:66:54:
         2a:7d:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:28 2024 by rpki-client on console-fra.rpki-client.org