Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/079cc1e2-817f-4601-bbf9-167342dd67d8.roa
File:                     079cc1e2-817f-4601-bbf9-167342dd67d8.roa (raw, json)
Hash identifier:          6RY8MpfRDoa2Ybc+gMNGh9ClZVPHgFqsoPSjs3DrV+k=
Subject key identifier:   68:68:BC:28:5C:AD:22:B9:70:AF:28:17:1C:43:EC:6A:87:5D:B1:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04B246962D4669E429E4D2AF65762831E78C8CA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/079cc1e2-817f-4601-bbf9-167342dd67d8.roa
Signing time:             Thu 06 Jun 2024 00:00:00 +0000
ROA not before:           Thu 06 Jun 2024 00:00:00 +0000
ROA not after:            Thu 11 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        168.185.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b2:46:96:2d:46:69:e4:29:e4:d2:af:65:76:28:31:e7:8c:8c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  6 00:00:00 2024 GMT
            Not After : Jul 11 23:59:59 2024 GMT
        Subject: serialNumber=6dccdfa1ae61c0364847f734711eba3bc70018ff3b4febf7af2e33075908a6cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:e7:66:8b:ec:7b:8d:63:f8:50:ad:2d:1d:
                    78:cd:73:f0:96:51:f8:00:77:11:c5:e8:9e:5f:dc:
                    45:99:2f:35:d8:da:e4:af:77:fd:21:c6:d5:99:3a:
                    e5:df:06:5f:c5:42:21:78:46:50:30:fa:22:82:4c:
                    b1:f3:3f:e9:28:b2:df:c7:be:a2:be:2e:2a:b4:ab:
                    fa:cb:c9:d0:24:eb:e0:03:4f:ab:e5:61:49:04:ef:
                    28:56:d1:be:0f:29:8d:b4:8a:21:94:56:0d:23:5a:
                    84:b1:fd:6e:b3:3b:89:31:10:7e:c0:4c:66:5a:a6:
                    30:43:a6:fa:50:b8:7d:02:f4:1c:65:c0:b2:9e:2b:
                    e6:b6:49:94:dd:b1:e6:c8:7e:15:85:2b:79:86:f9:
                    d1:f5:6f:a4:83:de:2a:75:50:c6:f8:c5:d8:5d:c3:
                    64:e6:22:22:31:12:ad:c1:e7:62:a1:a4:bd:e9:21:
                    cf:e2:c8:a2:67:5b:72:df:e5:7d:d3:83:5a:c6:1a:
                    23:3c:e4:33:a5:24:dc:c8:22:be:a0:71:62:76:c4:
                    59:c6:0d:ab:e0:78:fc:df:e7:9a:64:de:cf:88:ca:
                    8a:c3:9c:c8:65:33:22:52:de:0e:8b:bc:67:77:0d:
                    43:dc:1c:f0:f2:1a:07:f5:5d:45:10:5d:27:eb:f9:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:68:BC:28:5C:AD:22:B9:70:AF:28:17:1C:43:EC:6A:87:5D:B1:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/079cc1e2-817f-4601-bbf9-167342dd67d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.185.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:52:90:cc:93:34:bc:06:21:bb:5e:b9:e3:d1:94:07:5d:
         8c:a0:dc:ca:7f:90:d4:b2:e4:62:67:9f:60:33:04:cd:9a:fc:
         dc:df:92:56:95:79:ba:c6:a0:74:ef:88:4b:93:4e:ed:ee:ce:
         51:f7:a0:a9:1c:39:47:95:a7:81:24:a9:72:11:22:62:4d:b7:
         06:16:40:9a:b5:aa:7a:cf:0a:da:d5:05:76:15:e3:5b:70:e3:
         39:b2:d7:66:1a:b5:36:5c:c6:56:26:46:93:9e:b8:9b:97:7e:
         c2:9b:ef:ed:6b:e1:d7:de:e5:e7:1d:c3:92:40:69:ca:ff:ff:
         e9:3e:e0:ac:5a:46:17:a9:a6:99:de:23:8d:71:99:d3:bf:3d:
         84:e9:db:e5:8c:03:80:85:d0:29:ff:e6:19:56:ff:48:36:2c:
         1b:7f:e0:3f:f3:9f:d9:f4:24:23:bb:69:ca:8f:6c:50:c8:88:
         b5:0d:48:5b:be:86:b9:ec:5c:57:50:1e:bf:fd:54:33:5a:f5:
         58:ad:f2:9b:87:a5:85:18:41:48:85:70:df:49:04:27:bb:a6:
         11:29:34:01:06:1f:3e:86:9b:59:e1:a4:93:2a:b1:44:a3:07:
         22:c8:cb:96:5c:69:76:4d:ff:c4:3b:2e:9c:93:dd:a3:2d:a4:
         06:23:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:10 2024 by rpki-client on console-ams.rpki-client.org