Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18eacaa8-1c1f-46f8-9876-cc078023fada.roa
File:                     18eacaa8-1c1f-46f8-9876-cc078023fada.roa (raw, json)
Hash identifier:          cqCKIU2a9+UcpO0G4chcHZNDc65I/4Di2lDAUJpoh+Q=
Subject key identifier:   95:85:B2:ED:E5:FF:5C:1E:AF:CB:F2:92:73:74:C2:D8:26:2C:E9:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       627C727105F0713E5D585856D4A4755F2A9F9C73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18eacaa8-1c1f-46f8-9876-cc078023fada.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        147.106.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7c:72:71:05:f0:71:3e:5d:58:58:56:d4:a4:75:5f:2a:9f:9c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=55db0fd037c6691dbf3f3365e1919ba2f4e014744a640e17d97c9bb927765ff4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:15:70:a9:d2:9b:3a:82:7e:32:25:f8:ef:
                    aa:a0:03:3c:b3:7d:16:11:76:62:60:99:58:52:2b:
                    af:4d:7a:9d:55:88:0f:74:f7:88:4c:54:3c:41:fb:
                    35:5c:87:89:fc:f3:f6:15:46:0a:79:78:b5:25:20:
                    5b:5e:e6:5b:02:90:73:89:14:be:c9:73:30:e9:54:
                    cb:5a:af:28:e3:67:d6:5c:84:70:51:5a:65:7c:c1:
                    72:ba:40:40:2b:de:62:96:2a:d8:fe:01:ab:db:f5:
                    05:01:a0:62:be:5a:3f:41:3f:45:68:af:7e:de:ae:
                    38:8f:ea:48:09:da:aa:f9:8f:df:5d:00:2c:3d:bd:
                    74:e4:aa:e3:e5:d1:da:04:24:42:d6:84:4c:fd:3a:
                    a1:a5:1e:ba:25:0c:2a:cf:0d:20:25:03:eb:14:1f:
                    61:50:df:92:94:28:86:a8:df:68:32:d8:d0:06:04:
                    f2:6f:2c:04:5e:fb:6f:0c:23:07:4a:9d:d0:97:27:
                    bc:1f:5e:eb:df:74:fe:29:89:23:e8:a6:75:c0:af:
                    58:05:44:01:1c:02:17:39:f5:92:91:14:1a:79:5c:
                    20:16:81:b0:aa:3a:28:dd:63:0c:8d:89:a7:3d:dc:
                    8b:6b:35:a2:4f:86:46:2c:bb:45:f4:2e:a9:8d:f8:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:85:B2:ED:E5:FF:5C:1E:AF:CB:F2:92:73:74:C2:D8:26:2C:E9:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18eacaa8-1c1f-46f8-9876-cc078023fada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.106.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         27:9e:34:3e:09:28:74:35:70:16:03:f1:b1:62:b0:83:47:01:
         1d:dc:f4:32:ab:a2:90:d9:6d:cc:ba:83:2e:be:2d:9c:5e:b3:
         6a:a4:e7:84:fa:d0:e7:56:8d:15:54:89:17:01:e0:b7:08:66:
         d7:f9:84:fe:42:38:91:07:3a:c2:74:40:89:37:24:58:1a:ce:
         54:c5:12:24:32:d6:5b:10:fd:f8:0d:d7:17:49:14:be:0a:7f:
         e6:92:e4:f8:ea:33:c3:b1:05:c7:75:3f:e5:12:8c:68:4c:e5:
         b2:e2:02:0e:75:78:15:92:14:c8:9a:8a:5e:0a:f0:4a:b8:27:
         92:11:09:8c:a5:02:9d:fc:e4:20:3b:90:6f:b8:cb:7b:3a:ff:
         b9:c1:8d:ef:de:ba:53:93:b1:fc:6d:6b:e7:69:75:b5:44:7b:
         d7:cf:d5:c0:5b:4c:10:77:59:a6:c2:9f:bd:05:9f:d3:91:f3:
         9d:7b:eb:5e:79:57:f6:51:dd:60:39:ba:6c:4d:e6:c4:d7:9c:
         b2:3e:0e:4e:00:d5:02:4a:12:23:1c:7b:82:3c:b3:62:ae:57:
         b0:6f:89:58:f3:35:f9:4d:d3:15:36:c6:e5:72:ea:87:5e:cc:
         cb:8d:bd:8d:80:74:43:35:05:c8:67:62:a8:b2:92:cb:65:24:
         f1:0f:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:46:46 2024 by rpki-client on console-ams.rpki-client.org