Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/037fe84d-df11-46ec-b853-924ed1c2fbd1.roa
File:                     037fe84d-df11-46ec-b853-924ed1c2fbd1.roa (raw, json)
Hash identifier:          tydSN7e/fpdd9uIUpZxZyl3P8UUYswd/OFgp4MftwRY=
Subject key identifier:   BC:53:6D:43:30:D5:89:88:67:71:7C:44:C5:D3:63:39:E1:CB:B3:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E1E80477DCA6C18CF6E8AC5FE6F659E0DA60279
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/037fe84d-df11-46ec-b853-924ed1c2fbd1.roa
Signing time:             Fri 14 Jun 2024 00:00:00 +0000
ROA not before:           Fri 14 Jun 2024 00:00:00 +0000
ROA not after:            Fri 19 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        35.33.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1e:80:47:7d:ca:6c:18:cf:6e:8a:c5:fe:6f:65:9e:0d:a6:02:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 14 00:00:00 2024 GMT
            Not After : Jul 19 23:59:59 2024 GMT
        Subject: serialNumber=fe63ffa838626c69dfddcd72f5c44d3b63dcd1eb272e6c8db9719f1336ec87b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:16:cb:2a:36:76:e3:8e:26:d9:4e:59:29:
                    aa:c2:72:af:a4:13:a6:d1:3b:2c:35:16:a9:b3:02:
                    be:00:11:73:86:5c:54:57:8b:7c:38:97:f6:af:ef:
                    ce:fb:95:df:cd:71:0c:df:f8:df:78:ea:a5:ef:a5:
                    6c:ed:05:a1:ee:5d:96:1f:3b:5e:2a:18:a5:21:c3:
                    b2:21:65:d1:c3:f4:e4:12:0d:4d:1d:c2:65:05:d9:
                    62:bb:05:22:bf:54:2e:0c:0f:3d:e9:e9:64:49:04:
                    b1:4b:73:76:8a:af:77:5b:62:d8:da:92:2e:86:2a:
                    de:45:34:b5:91:68:16:3f:29:b2:04:d8:8a:cc:65:
                    a9:33:16:f9:fd:aa:80:c8:8a:51:ba:9f:cc:07:44:
                    8e:f7:7e:37:79:07:61:fb:24:39:80:10:90:2a:3b:
                    36:5f:d5:7c:41:f6:7f:31:4e:09:30:2e:77:e0:f3:
                    a8:c0:7f:02:fb:41:d3:7e:57:d1:e2:1e:a6:03:d7:
                    5d:24:6f:f7:ce:77:1e:ac:cb:60:8c:bd:b9:57:e8:
                    a9:e4:d5:9d:9b:49:24:ba:93:58:94:ca:14:66:fe:
                    b7:da:f6:5f:3c:ba:d6:19:0b:bd:77:6a:8d:63:2f:
                    0f:cf:95:c5:b9:ae:b7:1e:a0:7a:4c:ae:60:3a:31:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:53:6D:43:30:D5:89:88:67:71:7C:44:C5:D3:63:39:E1:CB:B3:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/037fe84d-df11-46ec-b853-924ed1c2fbd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.33.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:1a:50:81:23:31:48:fd:c4:df:b1:02:58:d8:3f:5b:e1:90:
         5e:03:a0:76:f1:d4:14:a3:7b:12:66:f3:45:91:fd:73:ec:df:
         7b:93:c8:ee:b8:c5:ce:1b:e1:e9:6b:ad:31:ed:b5:fd:b7:18:
         ca:04:9d:c6:a3:bd:b3:84:3f:7c:b1:ff:4d:ec:a3:71:74:3a:
         cf:ca:e8:a8:5d:5f:fa:b0:a4:16:79:c5:85:96:4e:c4:1b:ec:
         7e:11:55:97:af:06:48:6f:51:02:12:b9:d3:e2:dc:98:c3:89:
         b6:74:ed:8f:d8:83:89:53:10:e4:dc:96:2b:c2:f0:e2:45:28:
         22:43:b8:a5:83:a3:1b:6f:6f:16:6c:a2:18:0c:a6:88:ba:85:
         08:30:f9:25:50:7a:0a:b8:88:27:7f:f5:41:70:b3:d4:6c:5a:
         f1:fb:32:cf:26:f0:b7:26:ee:a9:0c:ac:a1:fb:68:71:f7:ca:
         5f:55:9b:3f:48:dc:88:31:ef:da:47:09:06:6c:a6:48:bd:0a:
         72:54:1c:b5:4b:95:f1:4a:03:c5:dc:bf:25:b9:4f:99:76:bb:
         57:71:79:65:ee:17:87:dc:75:6a:da:76:5b:75:e2:d8:70:14:
         98:be:63:92:2b:6f:26:8f:60:62:c2:b4:45:d0:53:0f:eb:3b:
         af:41:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:09 2024 by rpki-client on console-ams.rpki-client.org