Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0f6c4a-7c3f-48fe-9424-212ba5154b07.roa
File:                     0c0f6c4a-7c3f-48fe-9424-212ba5154b07.roa (raw, json)
Hash identifier:          0WBTTRz58KPB6zJ+TRKhNBXDlJVd8+I07ZryOKFX6yI=
Subject key identifier:   DC:0C:7A:CE:D3:88:CB:6A:28:F6:9B:13:58:ED:69:88:B7:5C:07:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38003A3FF772D57CE0BFD47F23053396A4A792E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0f6c4a-7c3f-48fe-9424-212ba5154b07.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        32.232.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:00:3a:3f:f7:72:d5:7c:e0:bf:d4:7f:23:05:33:96:a4:a7:92:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=90ea9591370b4d48a6d9d8f14fda4678815b5b01ea37892e2618023cf56b3e22, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:06:f5:e3:a9:5d:80:89:69:83:c6:18:ca:
                    98:a3:ae:00:ba:56:ee:f4:7c:d2:a8:21:78:26:24:
                    fe:85:c6:07:de:3d:f7:b0:75:46:20:31:be:43:a2:
                    25:f4:9a:0a:88:5c:05:39:bf:d3:2d:ac:11:71:7a:
                    95:47:75:87:12:08:e4:6d:03:d6:d5:d1:f5:8b:6a:
                    72:76:e6:d3:52:e4:d4:07:de:02:d9:73:0c:bc:43:
                    04:6e:c2:53:f4:7c:a7:75:1b:82:2d:14:c0:93:d2:
                    f6:67:59:a1:f1:14:d8:30:4b:7d:00:d6:b7:b0:c7:
                    bb:f5:1a:80:b9:07:2b:96:80:c0:8e:31:65:c5:a8:
                    85:e5:5b:60:4a:1d:e8:dc:eb:cb:97:6f:34:a2:63:
                    1d:47:a3:d0:7f:f6:e9:ff:5d:b6:62:0f:2a:9c:2d:
                    41:84:31:86:a2:b4:17:6c:82:6b:c3:25:e0:77:1f:
                    3f:2d:78:25:8c:de:8b:a1:e9:8f:5f:db:ae:ce:1e:
                    bf:31:7d:32:05:4d:8a:2b:5e:a0:06:f5:15:ea:9d:
                    83:5f:b4:a5:8f:2b:fc:36:81:46:ad:62:f1:22:16:
                    99:ef:eb:57:79:a1:62:f2:15:7c:cb:c8:86:71:13:
                    35:e1:e4:ef:5a:7e:31:47:c2:d3:fa:f9:68:f7:ab:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0C:7A:CE:D3:88:CB:6A:28:F6:9B:13:58:ED:69:88:B7:5C:07:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0f6c4a-7c3f-48fe-9424-212ba5154b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.232.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:39:05:62:c0:2e:8c:a3:11:0c:59:8d:b4:38:c7:5b:16:30:
         a8:cf:06:1c:0a:db:03:a2:b9:79:f3:cc:33:79:4e:1f:0d:ec:
         13:27:d9:ee:9d:76:7e:23:69:99:c5:e6:64:43:62:21:17:49:
         24:19:d8:1a:5c:09:86:ca:17:df:55:7d:c0:26:ae:b9:6d:d4:
         3c:e1:c3:bf:18:4c:db:86:0f:df:0c:21:26:43:7f:b2:c8:fc:
         50:54:48:82:1b:b8:83:3c:60:3d:0a:d5:90:8b:6d:6a:a2:53:
         9c:4a:f3:de:28:8c:e1:a9:18:62:37:f0:99:4a:e8:b6:dc:ce:
         af:ca:ea:2f:27:e9:9d:98:5b:61:19:06:7d:71:99:f2:88:b6:
         3e:c6:43:23:97:8d:e5:98:69:da:f3:e1:fd:7a:9e:d7:43:94:
         6e:7c:2e:64:2e:ca:dd:b9:0b:58:1a:62:b9:4f:66:45:40:7a:
         7d:da:21:63:9e:83:e7:81:56:28:d5:8e:97:98:c2:6b:72:24:
         94:0e:83:5f:29:3d:0f:29:25:99:57:22:02:b0:ec:01:e3:21:
         61:5e:4c:2c:a0:82:4b:47:9d:9d:fd:6a:a5:14:1d:24:a6:a5:
         bb:4d:ed:e1:71:fe:8b:b0:ed:43:de:30:d8:85:fe:eb:39:31:
         51:ea:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:46:45 2024 by rpki-client on console-ams.rpki-client.org