Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1505f7f4-db97-4f7e-8256-fcd77a483a6e.roa
File:                     1505f7f4-db97-4f7e-8256-fcd77a483a6e.roa (raw, json)
Hash identifier:          RSCWVkbfk1UsRIuIH/+Z6+KCiaqc89d5aQ5jcQTbuoY=
Subject key identifier:   64:DB:60:BE:CD:7F:96:39:9E:45:EE:00:AF:01:82:03:89:CA:B9:51
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17D355EC169167189B61DB3E0FEA0A99A7FA5047
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1505f7f4-db97-4f7e-8256-fcd77a483a6e.roa
Signing time:             Tue 21 May 2024 00:00:00 +0000
ROA not before:           Tue 21 May 2024 00:00:00 +0000
ROA not after:            Tue 25 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        155.50.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d3:55:ec:16:91:67:18:9b:61:db:3e:0f:ea:0a:99:a7:fa:50:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 21 00:00:00 2024 GMT
            Not After : Jun 25 23:59:59 2024 GMT
        Subject: serialNumber=8ae010a4c913023d7759b3ceacbe984135254b8c51d41c5de18aea0ce84024ac, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:d0:1e:7c:e2:46:48:2d:f0:8d:a7:65:e5:
                    22:d4:cd:19:8a:37:06:d8:2f:e8:7a:2c:fa:53:98:
                    09:8b:1a:a2:c3:e4:26:57:74:7f:ad:28:e7:75:33:
                    23:4b:96:40:0b:0e:05:79:b2:35:d3:b5:57:ff:24:
                    8a:26:7d:ce:62:1b:dd:55:77:ee:67:d8:65:94:5d:
                    37:6b:c7:bf:0c:03:64:16:5d:b8:44:18:81:42:15:
                    0e:40:bb:8a:85:20:2e:6b:f9:c4:12:14:82:1a:3c:
                    7c:b2:83:fe:57:18:a9:58:9c:c6:58:fb:8e:1e:d4:
                    9e:5b:92:c4:56:81:84:08:8f:77:33:21:be:a3:a8:
                    3e:34:e1:42:a5:75:bb:90:bf:91:0b:77:30:ad:5b:
                    5c:9f:f4:2e:ac:89:92:04:9b:92:5b:4b:18:60:7e:
                    b5:e2:cb:10:77:c8:50:1d:45:0a:5a:25:57:9e:65:
                    63:de:d6:c4:0f:78:90:56:57:55:54:dd:93:ca:e0:
                    81:7f:84:bf:09:bb:29:df:82:16:30:42:db:48:8f:
                    c0:bd:67:b9:75:5c:9f:fe:1c:5b:e0:bd:ee:8d:88:
                    04:46:55:b8:39:09:a3:d6:92:5c:3c:18:b9:21:b6:
                    ef:d2:4a:b8:e7:38:c5:71:eb:58:30:52:82:69:73:
                    ad:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DB:60:BE:CD:7F:96:39:9E:45:EE:00:AF:01:82:03:89:CA:B9:51
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1505f7f4-db97-4f7e-8256-fcd77a483a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.50.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         79:59:f6:af:33:b3:7a:fb:df:64:95:e8:43:8a:6f:f3:3d:37:
         25:0c:33:f6:32:a6:77:99:79:56:bc:c7:aa:50:a7:49:d2:c3:
         41:92:2d:1d:82:33:37:90:54:d3:b8:42:9d:00:dd:5d:49:ca:
         06:d5:52:a1:54:7a:c0:5f:0d:40:38:7a:85:07:a2:1c:5b:4d:
         17:b8:f9:64:11:83:89:f9:1e:44:64:7f:b4:c2:70:b6:bc:48:
         df:01:81:93:36:15:40:7d:71:c5:79:d9:08:6a:81:a5:15:4c:
         a1:af:69:e0:ac:c1:6f:ab:6c:0b:48:0d:dc:79:5f:bb:b7:22:
         a5:8a:c9:b8:a2:97:5b:c6:d5:48:5e:68:83:16:73:26:b2:61:
         b9:76:dd:52:fe:e6:34:58:6e:a8:ab:8a:cd:75:e4:94:bc:4d:
         df:8c:92:ad:9c:c4:1a:20:fc:be:dc:81:3d:86:1d:c8:44:34:
         8a:b0:e3:cc:1e:1d:64:4e:ae:ed:82:b1:a5:ce:af:76:23:10:
         82:97:e8:8d:1a:9c:03:11:aa:60:35:35:7e:92:64:48:2f:96:
         5c:53:31:60:5c:48:3b:2d:8a:05:1e:11:19:64:63:cd:49:fd:
         65:73:c8:49:d9:44:fb:69:fa:84:91:4c:cf:64:27:79:fd:52:
         7e:ab:bc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:46 2024 by rpki-client on console-fra.rpki-client.org