Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa
File:                     f619c54b-758f-439f-834b-535001e1dc31.roa (raw, json)
Hash identifier:          fWhKHeHIgfwFrj+CJ7Z32keXyS8qf55cah5P6bDgwrQ=
Subject key identifier:   FA:E1:C4:56:A7:C8:63:BE:C2:2B:3B:42:87:3E:4D:8F:42:AE:3D:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51E36A78ECD2A6C06D94E6AA6B24E6035B1C5FCF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        128.21.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e3:6a:78:ec:d2:a6:c0:6d:94:e6:aa:6b:24:e6:03:5b:1c:5f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=d94e5e84ae2603f9896fac2e841b10a6d796429d17ed8aae66dc610f2211824b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:f4:e1:05:44:8b:6c:95:9f:8d:32:cf:6e:
                    c0:98:b0:ff:6b:10:f0:35:fc:c1:0e:49:77:c4:23:
                    a8:3e:63:f4:78:ed:22:48:6b:27:5e:45:fe:32:16:
                    bf:30:3e:72:19:29:b5:74:93:33:40:4c:15:c7:39:
                    cf:1d:4f:6b:df:20:09:14:bc:80:17:fb:29:82:03:
                    d3:6b:02:9a:ea:80:8c:4f:e0:aa:85:c9:5d:c3:e6:
                    cc:d6:02:df:58:91:a6:2b:a3:f0:4f:af:61:5b:5b:
                    26:c6:f3:1e:1a:af:83:a9:ef:8b:95:f4:8d:e2:6c:
                    01:99:6a:82:63:48:0d:1b:28:a2:f8:7b:a6:b1:b1:
                    5a:1b:20:86:11:cc:57:a1:97:24:da:3f:2e:10:84:
                    d8:13:a1:1a:56:75:17:de:0c:31:f9:0f:b8:71:11:
                    59:04:1d:4d:24:b7:bc:ba:31:8d:ba:5d:ca:a9:a0:
                    35:75:55:71:a7:c5:9d:16:ea:e4:0e:c3:5e:d9:d4:
                    64:53:5f:fc:92:90:4e:74:14:b1:8d:cc:8c:82:a1:
                    ee:bf:06:ce:12:b5:92:83:8a:44:89:25:14:38:7c:
                    cf:37:12:8b:34:17:cb:80:1c:41:5a:6f:e0:91:d6:
                    bc:71:50:07:b3:ff:11:74:16:ed:76:44:4c:97:ba:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E1:C4:56:A7:C8:63:BE:C2:2B:3B:42:87:3E:4D:8F:42:AE:3D:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:7f:0b:c7:a7:d6:b3:44:f6:a1:23:c2:f3:a5:81:a6:14:7a:
         dd:4a:22:ea:c8:54:03:71:cd:2e:55:6c:57:07:d4:28:08:70:
         cc:ee:3a:f1:21:d3:03:db:3a:2a:a6:74:44:fb:2c:a2:d8:22:
         b9:b2:4d:fa:ac:45:64:a3:dd:32:10:c7:3e:05:0c:d3:26:fe:
         93:f2:41:58:12:cf:c9:ce:7e:6e:e7:84:49:32:82:3d:d1:ef:
         0f:6a:fd:20:d5:93:46:30:cc:05:d1:9c:fd:99:a1:f6:d8:16:
         4a:19:2e:75:de:d2:ba:68:3a:9d:f9:5e:d9:4d:4e:e3:ae:d7:
         73:6c:79:76:cc:b4:1f:69:80:6e:61:f8:21:2e:1c:ef:5e:23:
         6f:a2:e7:ec:a5:0f:7e:3b:ed:62:69:fe:01:1b:34:65:f9:4e:
         e5:70:b7:c0:fb:80:92:cc:37:bb:f0:47:4c:09:ba:47:ac:07:
         a7:f6:f2:b9:6a:a0:3b:e6:ce:7c:dc:51:34:0c:12:d1:bc:26:
         b5:08:4e:dc:16:78:0b:24:bb:1f:2c:da:35:3d:05:ff:9c:79:
         38:c2:f0:f9:5b:d5:b9:21:43:8a:57:59:b5:10:65:6d:90:3d:
         06:ec:f7:fe:a1:4f:56:ed:90:45:9c:b2:d9:b3:c8:09:10:37:
         f9:42:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:43 2024 by rpki-client on console-ams.rpki-client.org