Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f767942a-7d7b-4106-b1f2-2c1fc44ce11a.roa
File:                     f767942a-7d7b-4106-b1f2-2c1fc44ce11a.roa (raw, json)
Hash identifier:          tnbvbWcy6QUbR9WLvBPh10eUyJMa2COb7sndQwQs8F4=
Subject key identifier:   B0:DC:5B:D5:5A:C2:72:3B:7F:AC:73:F7:4E:0F:80:99:41:35:FD:AA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18460175387D018678D1C9EEB8C53004E2C7118E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f767942a-7d7b-4106-b1f2-2c1fc44ce11a.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        158.252.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:46:01:75:38:7d:01:86:78:d1:c9:ee:b8:c5:30:04:e2:c7:11:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=43253a5a9a916f9b8aa44707fa5be86ecaa09fb51be11677cb9eec4371e4e3f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3f:c2:ff:eb:90:2f:00:9f:f5:45:22:40:c8:
                    fd:e0:b6:4e:a6:32:37:f4:de:ae:4f:b2:ab:7a:1c:
                    ac:56:9f:2a:2b:10:04:7c:59:68:3e:bf:f0:e6:92:
                    6b:00:17:66:f8:d0:36:60:3c:26:56:33:b5:5c:cf:
                    c4:87:8b:92:d5:57:14:8a:fc:cb:b2:97:88:51:69:
                    a5:b8:a1:8b:d6:d9:d2:ee:ff:4d:e2:11:13:54:e7:
                    e9:88:01:26:3f:fd:f3:64:b4:e2:6f:ea:b4:d6:ac:
                    f1:f4:d2:f8:4b:80:80:73:46:99:5c:6c:ca:41:d5:
                    88:52:16:3b:66:e4:1e:e5:bb:46:0f:aa:e1:d3:21:
                    ef:3d:17:71:39:69:9f:29:d3:8f:ea:7d:ca:b1:d6:
                    65:f3:cb:6e:08:59:25:b8:d2:f3:0f:c0:87:7e:2c:
                    40:7d:1d:e2:46:c0:6d:83:a1:79:f4:99:80:45:0c:
                    e3:ad:59:44:8f:be:fd:d2:32:63:19:f7:b0:50:ee:
                    2b:18:7d:41:db:77:62:d6:12:0c:61:fa:3e:f4:20:
                    f4:69:f9:73:a8:89:1a:36:b4:9f:7f:09:6f:18:e4:
                    47:08:43:cb:8a:58:b3:03:16:dd:52:2b:85:9c:6c:
                    83:57:ec:7a:23:c9:67:87:09:af:00:08:71:f1:e8:
                    6b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:5B:D5:5A:C2:72:3B:7F:AC:73:F7:4E:0F:80:99:41:35:FD:AA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f767942a-7d7b-4106-b1f2-2c1fc44ce11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.252.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         71:97:4d:0d:fb:64:91:e5:69:a2:28:96:36:2d:4c:a3:ab:22:
         6a:7a:23:08:c0:ed:53:5c:7d:8b:ec:ae:d0:c1:59:3b:6b:09:
         0d:72:0d:dd:74:0f:50:ce:b4:26:c2:52:a2:a4:fd:a9:a2:4d:
         f6:90:21:ff:46:5e:82:0f:d8:13:71:d2:13:e5:a4:f3:42:0a:
         54:36:aa:74:67:ca:88:51:44:19:71:9f:d2:0c:4d:d2:a6:e9:
         eb:15:52:31:7b:cf:d9:75:bc:ce:69:62:65:51:a7:68:66:8f:
         9d:08:01:44:e0:e1:ca:14:69:cc:6f:e1:0f:3f:94:4d:f2:31:
         ab:5e:1d:14:f4:fd:3f:aa:62:73:4b:b5:17:43:d7:1d:41:fb:
         ab:0c:e9:b4:2e:e0:0e:0d:2e:d9:b6:1d:d9:13:fe:71:a2:05:
         cd:ff:77:2b:83:67:f1:16:f1:ee:e5:3d:74:2a:17:e5:04:5a:
         d9:91:a3:54:3d:35:92:dc:93:3d:30:76:67:2c:f8:3a:75:af:
         94:51:8b:37:6b:c9:02:6e:5f:87:72:c3:1a:6b:b4:7e:bc:fd:
         fc:15:3a:61:d8:95:87:e1:d1:63:0b:d6:75:17:f9:51:da:0a:
         81:d5:b4:50:c4:39:c8:1d:28:c6:92:6b:89:5d:5b:9f:9b:da:
         38:62:70:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:26 2024 by rpki-client on console-ams.rpki-client.org