Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eabadbd2-1902-4555-83e8-824a573c82a4.roa
File:                     eabadbd2-1902-4555-83e8-824a573c82a4.roa (raw, json)
Hash identifier:          DuxaNrNsdDL4Bc17yqkU8McB5aqAWdOSOwV0SYraO7k=
Subject key identifier:   BD:9A:3A:AF:48:6D:8E:8E:F9:72:4B:26:B1:93:52:C5:B0:F5:9F:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       044E7BF08358936F89047F8AD5549E5F5F1C2FAD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eabadbd2-1902-4555-83e8-824a573c82a4.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        151.148.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4e:7b:f0:83:58:93:6f:89:04:7f:8a:d5:54:9e:5f:5f:1c:2f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=6dacfe534a786e44d329e2c73dbbf44d774e97b158ebaa66dfbe7d4c308c5fe3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:2c:f0:7d:60:09:73:43:90:f3:de:9e:9f:
                    71:0d:2a:dc:14:8b:68:76:f8:90:49:1f:d1:57:5d:
                    61:8b:03:9d:2c:23:93:e4:a3:9c:73:54:da:3e:e9:
                    73:49:20:bc:a8:79:15:50:fb:68:08:bc:28:46:a8:
                    22:e0:4d:83:4b:05:1e:ed:9a:53:ab:3c:a6:6c:f1:
                    48:dc:70:9b:79:60:91:bc:3e:0d:24:73:66:18:5d:
                    45:70:0c:5d:58:a2:26:86:f8:69:6f:3a:d9:58:db:
                    36:e6:e7:50:c5:e2:bc:a2:da:1c:ad:56:87:fa:8e:
                    80:9b:27:bd:bc:cf:5f:69:63:ef:87:8e:0e:4d:8b:
                    58:95:d1:4d:43:c6:6d:7c:c8:aa:5c:ea:5d:6d:b9:
                    6b:7c:44:91:42:d6:11:38:bc:f6:a7:41:ad:b0:7b:
                    09:bc:d8:26:28:8b:44:d9:2d:6a:45:a0:ea:0f:d0:
                    2d:53:3b:3e:05:fe:ac:1f:9e:dc:07:40:8e:5d:10:
                    5b:68:b9:ad:04:a0:7a:6d:07:a4:88:de:76:23:eb:
                    e2:6a:eb:b9:58:d3:96:e2:fa:b6:ba:b1:92:a7:ef:
                    ea:74:62:79:92:0b:7e:11:6c:f9:21:9d:81:de:29:
                    5b:d3:c0:5d:ef:57:9d:ae:e6:12:e0:c9:c5:c0:cf:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9A:3A:AF:48:6D:8E:8E:F9:72:4B:26:B1:93:52:C5:B0:F5:9F:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eabadbd2-1902-4555-83e8-824a573c82a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:1f:31:06:a3:64:b8:49:42:9a:20:6b:66:c8:d7:29:c1:
         b5:c7:0e:db:20:83:ee:65:22:85:ec:ec:22:3c:42:82:9c:b2:
         a9:63:d8:62:5e:04:59:43:da:71:3b:1c:39:bd:dd:78:71:69:
         4a:1d:89:8b:a1:da:d9:78:fd:18:2b:2b:e3:e3:a0:ce:de:53:
         42:73:56:8a:78:2a:11:28:88:ee:2e:a5:26:68:df:77:0d:fc:
         2f:05:d6:31:17:25:13:1c:c0:d9:7e:7f:0a:7c:ea:7d:b2:ee:
         a1:00:6c:dc:ab:e3:1e:b9:e5:6d:52:dd:69:67:98:0f:3a:57:
         2c:4d:0e:79:b6:b4:2b:92:b0:3d:ff:5b:ca:29:25:e6:34:ab:
         4b:90:ed:ce:db:3e:8d:e8:38:b7:17:08:f0:36:5b:13:ca:94:
         f5:a7:05:aa:35:6e:7a:c8:9f:b9:e7:8b:be:6f:f6:45:d8:9c:
         be:b4:ff:9a:9b:52:ec:08:1c:a6:fe:c8:49:15:20:c7:f5:21:
         d2:cb:68:63:61:15:76:79:1d:fa:f8:54:b4:39:1d:1f:9a:1f:
         6c:b9:6f:43:3d:e5:31:55:be:e0:ec:7a:b4:b3:34:e8:69:01:
         92:8f:71:12:c7:cd:e0:b8:45:81:e6:88:47:5a:71:b4:80:9f:
         45:2f:99:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:39 2024 by rpki-client on console-fra.rpki-client.org