Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ad22d7-1237-4c37-bccf-b751d4e9fcbb.roa
File:                     f6ad22d7-1237-4c37-bccf-b751d4e9fcbb.roa (raw, json)
Hash identifier:          BW0AtFahIEoatO6MkbAWhE7MATdJpptyipGgLUTQtF8=
Subject key identifier:   09:8B:F8:9C:ED:C1:F1:C2:E9:9A:09:27:F9:34:15:E7:20:1F:37:A3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08F203682DDFB7FC3895A0479F72096EAA844E6F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ad22d7-1237-4c37-bccf-b751d4e9fcbb.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        156.4.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f2:03:68:2d:df:b7:fc:38:95:a0:47:9f:72:09:6e:aa:84:4e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=ebf2f27c9065812894e1f1a1178843e2bd753c0dc7cf59686590bd6b727ce96c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:95:12:74:d5:0c:5b:ef:28:4c:df:56:ea:
                    39:0d:34:cc:a7:bb:87:e4:07:cf:fe:88:ba:a8:63:
                    49:8c:42:8d:f8:3d:f5:1d:3f:66:4a:a7:07:4a:6f:
                    c8:2c:4e:f8:55:ee:1a:e0:88:ad:bc:d2:72:c2:83:
                    9b:f2:ed:37:f1:ba:74:02:ce:98:62:31:7c:dd:1c:
                    2c:39:07:f5:11:3c:27:b0:55:7b:64:50:db:0d:4f:
                    62:39:3c:84:da:79:81:8a:f3:ec:d8:60:24:3a:be:
                    08:27:88:1e:96:5d:75:a5:a4:03:01:67:a5:82:0b:
                    fb:d4:c8:ae:37:0d:d7:71:d0:f7:14:04:42:35:6a:
                    63:b1:90:e2:27:94:da:d0:44:e4:15:c1:a7:0d:f7:
                    60:ec:2e:86:83:86:23:2c:eb:67:67:3d:a1:51:16:
                    d3:7f:59:b7:6b:17:f8:e9:22:6a:45:d8:77:c7:b4:
                    90:6d:2f:fc:9d:cc:b1:dc:6e:65:65:93:13:d5:8d:
                    40:3f:33:68:b4:38:c6:5a:4b:42:ca:ab:60:e0:be:
                    18:7e:d2:2d:dc:08:e2:57:36:11:d9:e0:7c:27:91:
                    66:f5:b9:03:0a:63:7c:62:ef:9c:29:5c:8d:64:63:
                    e4:e3:c3:c3:aa:c7:7f:31:9d:2c:53:3b:de:4b:5d:
                    70:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8B:F8:9C:ED:C1:F1:C2:E9:9A:09:27:F9:34:15:E7:20:1F:37:A3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ad22d7-1237-4c37-bccf-b751d4e9fcbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:d6:d9:21:ea:9d:a0:67:f6:78:5b:6f:d5:4c:bc:f4:b1:bf:
         a0:56:ea:2c:4d:9c:1b:2c:cd:82:d5:e8:3a:cc:91:9c:fe:5b:
         33:3a:58:94:0f:c2:dc:5e:f3:88:a9:28:71:c7:1a:ef:4f:dd:
         77:4f:51:17:fa:ae:53:5e:0e:a6:3f:7a:80:a4:09:58:e3:32:
         70:96:d3:ed:65:c3:ac:24:ff:53:11:7b:a4:a0:75:db:95:b7:
         23:c6:3b:5a:2b:b9:2d:33:d0:55:18:21:70:68:7d:c6:9d:eb:
         10:5d:11:3c:88:69:14:b2:d2:fa:ba:dc:56:55:1f:f8:bf:12:
         5c:0c:87:9b:66:06:2b:aa:40:8a:af:0b:7b:7a:a3:9b:f1:82:
         98:f9:79:34:63:15:60:e9:00:9d:36:1b:58:cc:28:e0:8f:f7:
         57:7a:90:ac:27:d2:d4:8d:26:c9:7e:8a:af:bb:8a:71:ed:57:
         63:b5:2a:3e:c8:0b:2e:7a:83:b1:61:a9:59:ff:89:a4:e0:7d:
         76:68:81:e4:7e:3e:cb:a2:04:45:ce:62:c4:98:6d:c8:6b:ad:
         9f:e8:af:fe:7b:31:8e:ea:20:a5:1e:d0:c1:18:69:26:92:2d:
         cd:7e:54:2d:a5:a0:0e:39:7d:c2:56:25:c5:83:6d:04:d1:c0:
         3b:dc:c5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:42 2024 by rpki-client on console-fra.rpki-client.org