Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1906cf97-36fe-4e86-8bb4-18a784405054.roa
File:                     1906cf97-36fe-4e86-8bb4-18a784405054.roa (raw, json)
Hash identifier:          CNj1eC31/zsztvu3AsYx2pUYe+tHu922C0PkY40rXXM=
Subject key identifier:   B5:F4:45:A4:F9:5C:91:F0:E6:D9:43:22:BE:05:3B:F1:44:02:5E:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58A6E22B6305C03363A967AA8E93292ADC5FBA77
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1906cf97-36fe-4e86-8bb4-18a784405054.roa
Signing time:             Thu 09 May 2024 00:00:00 +0000
ROA not before:           Thu 09 May 2024 00:00:00 +0000
ROA not after:            Thu 13 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        64.27.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a6:e2:2b:63:05:c0:33:63:a9:67:aa:8e:93:29:2a:dc:5f:ba:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  9 00:00:00 2024 GMT
            Not After : Jun 13 23:59:59 2024 GMT
        Subject: serialNumber=fa6b847904a7dc0b5fb9b4d91a84628e37e45ab4a0bdb8e562e8b213a01dd455, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:d8:11:30:62:c6:fe:2f:44:d3:de:50:e1:
                    7b:f5:2f:02:cf:23:d8:27:31:83:d8:12:8b:47:fc:
                    88:00:e8:da:25:f0:bb:92:19:0a:c2:b1:af:0e:91:
                    a5:2b:27:a6:47:02:a0:ce:f2:d9:c5:2a:dd:d7:2a:
                    c4:73:9c:fc:13:5b:47:15:3d:5c:67:dd:8c:8d:e8:
                    14:f3:fd:bb:80:68:38:74:ac:8c:ca:6f:46:f3:28:
                    b2:4e:7d:d1:00:b9:16:e2:36:c3:58:ef:00:0f:56:
                    07:30:ff:f0:79:1e:28:6d:5e:76:a3:41:1c:9f:47:
                    ab:85:91:77:30:3c:5b:07:e1:91:69:e8:d5:1e:ec:
                    dc:66:33:38:13:cf:4d:d8:27:6c:5c:3c:e1:e3:7d:
                    cd:6d:8c:73:b7:e8:32:95:23:b1:f5:60:64:b3:35:
                    84:5d:eb:f0:18:f7:ec:6d:4d:2c:4e:9d:fe:00:dd:
                    2f:b5:af:72:fe:4b:48:2f:0f:dc:ec:fe:e7:82:84:
                    bd:cc:41:5e:d8:bd:86:d9:df:5d:6c:53:31:02:23:
                    36:54:52:51:7e:cb:fd:f0:ff:97:e2:aa:f4:dd:36:
                    f2:cb:e0:43:ef:eb:bc:61:0b:b7:84:8f:fe:ec:9a:
                    69:4d:9e:f3:f4:0d:5f:8c:89:91:a9:f3:50:09:cd:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F4:45:A4:F9:5C:91:F0:E6:D9:43:22:BE:05:3B:F1:44:02:5E:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1906cf97-36fe-4e86-8bb4-18a784405054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.27.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d1:de:61:3b:81:98:d5:bf:9c:75:2b:7d:5c:16:b8:57:e8:70:
         3a:38:bf:3d:18:4c:08:72:8c:a8:f2:cd:5d:0e:ba:59:dd:8e:
         ed:4b:07:cb:75:6b:b1:22:5d:11:6a:59:c4:b5:a0:5b:ae:f2:
         28:3d:32:c5:fd:ee:56:9d:06:15:5f:e3:63:21:17:0d:58:0f:
         89:c9:04:5b:d7:df:79:ab:27:ed:aa:c3:ce:f9:51:3f:fc:c1:
         c2:0c:cb:84:75:1d:30:a5:81:5b:21:64:d2:3d:e7:39:81:1c:
         47:71:71:8a:70:00:00:3d:e1:a0:ba:da:b0:08:a7:e7:1c:ad:
         19:0e:1e:42:5c:10:f6:8c:1f:a9:c9:89:6c:ab:53:03:07:26:
         fc:b2:b6:09:ad:51:d5:07:e2:61:2a:15:56:c5:84:5c:e9:e3:
         91:e6:1f:8c:97:80:9f:e9:d0:58:5d:69:28:e5:6f:73:3d:73:
         e1:27:98:0a:ee:a6:9a:48:89:cb:47:11:e8:4f:fb:60:1b:89:
         6a:42:8c:80:18:9a:c6:3d:ce:44:95:b4:24:df:d7:f6:cc:8a:
         af:d9:fb:c3:8d:2c:19:fa:b6:12:47:01:9d:9b:9d:05:ed:e2:
         ee:07:17:98:3b:9c:a8:ae:ce:eb:0c:f7:d6:44:5c:da:5a:0c:
         91:d3:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:07 2024 by rpki-client on console-ams.rpki-client.org