Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1a5f9bd-ede4-4387-85bf-7fdfd794a298.roa
File:                     d1a5f9bd-ede4-4387-85bf-7fdfd794a298.roa (raw, json)
Hash identifier:          tYJfFAcaU0+umQM9wj8tl3gloGG1vQBLnrT2TzPYhqU=
Subject key identifier:   C0:62:34:C6:A6:13:02:50:F1:10:96:CE:80:13:DF:F6:1F:38:4F:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7659A5DCBE228462AAEE5A14C8C025C34C705BBE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1a5f9bd-ede4-4387-85bf-7fdfd794a298.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.26.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:59:a5:dc:be:22:84:62:aa:ee:5a:14:c8:c0:25:c3:4c:70:5b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=200295de79899ef6da9fd8ce3564515f7a67fc14aa1177dd77e6ac91a1f5f003, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3b:55:b6:15:78:26:c8:f2:7c:6e:ee:d6:45:
                    2f:a0:38:82:9d:c4:d4:5d:7e:d0:32:11:fe:be:da:
                    50:fc:8f:16:28:ca:63:2a:8c:ba:e9:bd:b6:72:48:
                    de:c0:76:3f:02:e8:73:d4:6e:26:c6:13:e3:c5:0e:
                    8c:b7:46:51:b9:ed:23:5d:5e:80:5b:3d:9f:b9:97:
                    0a:10:ab:01:bf:dc:08:a1:a4:47:b8:86:36:1b:d0:
                    28:9e:a8:10:df:62:94:ce:f6:73:1a:50:ad:fd:3d:
                    67:3f:7b:0e:85:f9:b1:8b:69:d7:e0:2d:fd:dd:29:
                    10:b6:92:7b:77:cb:8a:2b:83:0a:89:59:40:b1:a3:
                    af:96:a8:cf:40:d2:2d:83:e3:23:91:e5:4c:3e:d0:
                    a0:90:94:1f:1d:40:9f:06:37:84:bc:0d:70:b7:98:
                    64:e9:09:41:09:da:18:c0:0d:64:00:c7:c6:e7:e4:
                    e6:09:2a:5a:8f:15:46:50:3a:c6:09:17:d7:e7:0c:
                    cf:de:6f:b8:e3:f2:93:cc:fc:fa:8a:c2:f0:a4:78:
                    51:80:c9:66:f8:10:82:8e:fd:dd:0b:49:c2:15:9e:
                    ac:a5:e0:a4:a8:b9:5a:d2:7f:6b:27:d0:4a:c7:72:
                    f5:37:90:26:34:ae:a6:38:56:f8:eb:55:7d:07:46:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:62:34:C6:A6:13:02:50:F1:10:96:CE:80:13:DF:F6:1F:38:4F:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1a5f9bd-ede4-4387-85bf-7fdfd794a298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:34:db:f9:1a:ce:f1:88:08:7e:dc:42:4e:87:89:35:f0:e3:
         85:ac:92:38:98:64:2b:80:09:a8:83:ee:58:b1:8e:52:69:46:
         fb:d6:86:ef:96:1d:ad:d1:51:76:87:6f:ff:61:4e:98:ab:a5:
         ea:19:16:83:f4:93:08:35:bc:4e:49:5d:eb:25:1b:d8:68:4f:
         03:96:39:fc:7b:a2:2c:8e:b7:53:a9:16:76:93:2a:44:72:08:
         4d:97:58:ff:4c:a4:5a:fd:09:a7:92:f2:6a:32:9c:7a:10:fc:
         54:a5:3a:5d:c6:6f:41:48:4d:48:4b:ed:00:8f:7f:fd:be:0a:
         55:95:9c:49:c8:69:1d:b7:4a:ca:53:93:c0:d9:b1:b6:0c:b4:
         06:d0:a2:2e:69:ac:af:c7:30:ec:51:42:9d:9c:e0:44:b9:5a:
         d0:ff:69:8f:35:4f:5c:61:cd:c8:92:bc:bf:96:7d:d8:7f:a4:
         67:47:06:70:48:ca:f7:f4:ca:75:f8:57:3a:db:a4:fb:b9:c7:
         2c:fd:f3:ab:8e:22:9f:85:5a:f8:49:40:84:9c:48:e5:a9:38:
         b3:9e:78:a2:9d:42:76:56:23:af:c0:64:01:ff:8a:fb:67:0e:
         4e:10:e5:30:e4:4c:99:ea:90:90:5b:0c:66:95:94:6f:e3:f7:
         4d:ce:ac:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:54 2024 by rpki-client on console-fra.rpki-client.org