Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa
File:                     03003920-cbea-43f1-870c-84e084be150a.roa (raw, json)
Hash identifier:          Rf8h4djnHJspHzTzUSjvu/7IHuwJk5FFJxsUFb1gpWE=
Subject key identifier:   C5:70:F6:EA:5D:96:A2:01:74:C3:F5:89:B8:E5:D0:80:0D:69:5E:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B972AC81AFE7C1326AB5DEDDC8B0BF9737A99C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:97:2a:c8:1a:fe:7c:13:26:ab:5d:ed:dc:8b:0b:f9:73:7a:99:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=40e7af38b6fa63f99e143a53ffad46aebd7c913e19c9245174586e020819041e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:c7:02:02:9d:e8:d1:4f:96:bc:54:6d:1a:
                    8d:45:31:bb:01:17:aa:e3:3a:7f:49:fe:bf:8a:bc:
                    bd:af:ce:ec:3c:d2:c9:18:5f:c5:14:f0:a1:a4:98:
                    48:a7:b4:fd:12:b9:f3:bd:78:75:5f:a9:09:f1:e4:
                    df:93:48:aa:0b:01:ae:94:17:7c:f1:37:ca:45:87:
                    9a:f3:96:69:89:a3:0d:49:26:8a:75:16:94:a2:2f:
                    19:86:34:8f:eb:82:26:c9:d8:88:a1:88:fc:46:c9:
                    df:d6:15:5c:47:f8:41:22:a5:76:79:17:37:09:57:
                    ab:ca:1b:93:75:66:0b:33:e4:60:de:17:cb:03:47:
                    fa:c9:91:6f:46:67:14:57:0e:df:46:4f:c9:1f:dd:
                    15:73:34:02:21:21:c6:2d:80:ed:ac:e2:86:b8:75:
                    45:5c:e0:15:52:d6:a9:73:4a:ae:93:66:9a:d1:33:
                    6d:30:b2:05:d0:d4:03:85:d8:83:50:41:d0:4d:2f:
                    7d:3d:92:02:3a:00:bd:71:ce:e8:52:2a:b8:fa:4b:
                    7e:d3:e9:f2:df:25:7e:a0:7b:9c:3e:8e:57:c5:a8:
                    78:7a:bf:51:0f:05:28:bc:a8:fe:37:e5:39:3d:b2:
                    14:33:6f:cc:c7:aa:94:0c:87:72:8f:af:1f:7b:c7:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:70:F6:EA:5D:96:A2:01:74:C3:F5:89:B8:E5:D0:80:0D:69:5E:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a7:86:52:05:08:c2:af:59:9e:36:9f:82:31:74:ef:d2:fd:
         6f:4d:81:11:0b:24:05:40:10:02:2e:e2:34:94:6d:15:76:70:
         5f:75:92:5e:4f:f2:38:93:48:d4:90:1c:a8:38:fc:b4:f0:1a:
         e5:25:df:02:4b:83:ec:dd:32:24:3d:5f:05:19:95:0d:38:27:
         28:e4:de:55:e0:2c:33:26:c7:a7:f6:b1:9e:ce:85:6a:4c:cb:
         0a:3d:e6:40:7d:f1:c3:ba:57:a9:a4:00:78:57:65:a5:44:3b:
         e3:9f:26:b2:5e:c7:98:4d:76:5f:88:b1:6a:b6:c4:75:43:7e:
         f9:f6:82:2d:88:31:20:36:b2:2f:3c:9a:4f:86:4e:c3:c1:47:
         dd:c8:a9:8d:8f:07:8c:d5:d7:6e:83:98:7e:0f:35:2a:d2:ef:
         56:d3:7e:71:e3:a5:87:30:7a:d1:ab:cf:25:0b:20:f9:15:35:
         22:8e:ff:67:d6:5c:07:9c:ba:b5:e2:11:71:90:f0:0c:26:c2:
         e3:92:87:81:c6:8d:66:ff:9a:54:68:0c:9d:22:8d:00:ac:78:
         b0:13:ca:a5:28:95:30:17:ac:24:59:e5:21:09:f1:4a:70:4a:
         f7:aa:63:be:3f:6b:95:6e:07:5a:e0:38:03:32:26:8a:59:91:
         0d:67:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:44 2024 by rpki-client on console-fra.rpki-client.org