Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebb8b2c6-e910-45f8-815f-53a36c636115.roa
File:                     ebb8b2c6-e910-45f8-815f-53a36c636115.roa (raw, json)
Hash identifier:          JLHbUnyg/ZG9TFbIJWGaeH5w7Cmvms5wnfBe9Te4lpg=
Subject key identifier:   C3:2B:21:E0:64:AD:25:16:68:0A:A7:04:43:EA:06:A9:07:CB:97:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E18E037634820899CAD3B802462BEE663FA64EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebb8b2c6-e910-45f8-815f-53a36c636115.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        57.88.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:18:e0:37:63:48:20:89:9c:ad:3b:80:24:62:be:e6:63:fa:64:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=4cc65c8fdd7f027540cf3740da39e647b1057ea1c497ead83508ec575db51e9e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:41:dc:61:f7:35:46:6c:46:65:80:b2:3f:ab:
                    64:14:a3:c5:b1:78:ef:b5:c8:cb:5f:d5:a7:e6:d7:
                    c3:27:d4:bc:53:47:8c:13:c2:9f:32:6e:88:25:93:
                    1d:a2:69:e0:30:fc:42:71:40:44:b9:9c:62:42:be:
                    d5:14:b2:49:34:e1:5a:0b:cd:03:f6:b5:e0:b3:c5:
                    ee:b9:b0:c8:6a:cb:0a:02:13:25:e9:97:af:b6:12:
                    58:8e:4d:28:dd:5f:ba:d0:b4:e6:19:8a:5d:8c:1d:
                    88:55:4b:aa:38:11:c0:fc:9f:03:ab:d9:85:78:a2:
                    fa:d3:43:43:1f:1c:63:4b:cc:6e:71:d0:34:c6:eb:
                    2c:da:f9:5e:a8:0e:f4:ca:e1:73:3a:22:e8:cc:e5:
                    1a:1d:dc:07:d4:3d:a6:21:f1:89:35:ab:41:50:5d:
                    26:e5:fb:97:78:1a:3e:21:ce:12:b2:17:73:61:18:
                    97:7f:44:56:a5:70:d7:a6:82:6b:f7:67:d0:fe:7e:
                    68:bc:ba:90:04:aa:96:17:35:9c:cc:11:c4:0f:92:
                    6a:90:e4:59:7e:c5:d9:c5:9d:d2:67:cc:44:9e:3c:
                    08:8a:1e:e8:3b:98:07:f1:f4:50:78:e5:47:6d:75:
                    af:af:05:b4:64:49:8b:24:5c:ff:05:06:81:e5:94:
                    78:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2B:21:E0:64:AD:25:16:68:0A:A7:04:43:EA:06:A9:07:CB:97:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebb8b2c6-e910-45f8-815f-53a36c636115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         58:ea:c3:43:23:81:75:6d:16:65:6a:7c:91:46:26:90:1b:99:
         65:56:fe:e7:02:1f:cf:f6:d1:bd:d2:0f:95:2c:37:1f:40:e1:
         a7:d9:c2:d2:af:de:cf:df:ef:1a:57:04:21:f1:1e:63:35:24:
         dd:9c:e7:5a:a4:24:38:c6:a9:26:5d:6d:9c:d8:f1:d4:b1:91:
         96:ec:49:b3:30:ba:9d:0e:b5:92:1d:f8:51:51:5d:d7:61:d9:
         91:78:8c:d4:e8:30:c6:44:bf:3c:82:d7:a7:70:fb:8f:52:a0:
         d3:9b:c9:b0:e3:a3:d1:9f:c2:78:13:08:a6:cf:bb:ed:24:3b:
         27:19:cb:ce:f5:48:f0:27:83:bd:95:0b:48:65:11:24:86:79:
         fe:ee:6a:63:63:df:1c:d2:c8:e3:87:64:d6:10:58:55:58:ea:
         91:d3:4a:9a:de:c4:cb:bf:a1:41:65:9a:1b:b7:2c:54:9f:c3:
         8e:e5:00:bd:9a:7f:f0:40:e1:d4:4a:5b:5a:62:aa:c7:32:e6:
         69:69:48:96:5e:fd:27:c8:00:3f:dd:dd:00:85:a7:48:87:53:
         00:3f:5b:b6:0d:98:e6:25:47:1c:a1:a5:2e:a6:6d:10:76:56:
         f7:a3:87:94:10:78:e5:19:a7:01:d8:91:26:77:5c:39:aa:93:
         41:47:ec:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:41 2024 by rpki-client on console-ams.rpki-client.org