Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4401cca8-5964-48b1-b1b5-2ab2021ddf02.roa
File:                     4401cca8-5964-48b1-b1b5-2ab2021ddf02.roa (raw, json)
Hash identifier:          RAXKSJXoXjrzXwCOi5ob/AF6yaEn0Jw6yX+8u1sIPS8=
Subject key identifier:   ED:CA:2A:F0:F6:36:51:16:7D:90:73:0B:37:4D:1E:0A:EC:86:0D:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       320BF3240FD6BAF88AF3C19960C852DA42EE6426
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4401cca8-5964-48b1-b1b5-2ab2021ddf02.roa
Signing time:             Thu 09 May 2024 00:00:00 +0000
ROA not before:           Thu 09 May 2024 00:00:00 +0000
ROA not after:            Thu 13 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.240.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0b:f3:24:0f:d6:ba:f8:8a:f3:c1:99:60:c8:52:da:42:ee:64:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  9 00:00:00 2024 GMT
            Not After : Jun 13 23:59:59 2024 GMT
        Subject: serialNumber=bae12901ef4d449d47e0bafb9fe746f3877a43eaa4402146d0813dbeba7702e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:28:76:0a:69:12:1b:da:2e:e9:f7:64:62:
                    4e:26:a0:71:6b:1d:ac:a0:23:b8:e7:5c:ed:e2:ea:
                    ac:d7:b3:ef:6b:00:d5:49:91:2d:9f:3b:57:5d:ff:
                    10:64:c8:ea:32:4c:43:16:f7:ea:59:b6:07:92:ae:
                    bd:ea:a3:05:28:2e:f2:b1:b8:65:b1:c7:f0:f5:be:
                    2e:a7:0a:a9:18:02:76:7c:87:35:35:00:35:4f:6a:
                    40:fd:3a:d1:6e:01:e8:23:68:ce:4e:8a:4b:19:a0:
                    cc:0e:4c:63:13:d4:85:96:c9:cc:bf:da:8b:eb:30:
                    5f:ce:28:44:ed:67:76:70:1d:d9:d3:b1:1e:c3:e1:
                    47:7a:43:10:f2:4f:86:2c:42:6d:82:ef:fc:9a:c4:
                    43:81:42:b0:b2:38:8d:1b:a3:c7:3d:19:08:e2:76:
                    6b:1b:31:ac:d9:61:ad:f3:24:bb:f2:1a:de:13:97:
                    91:4a:72:b6:c5:f6:08:14:4c:4e:89:0f:d0:70:81:
                    63:24:2d:6d:ea:9f:28:a4:55:66:8f:8f:6d:29:9d:
                    0c:56:9a:ca:07:63:d6:5e:60:b8:82:fd:5f:ff:3f:
                    a6:d8:50:83:99:4e:d7:5d:84:9d:60:92:5d:7c:1c:
                    c3:27:7c:06:76:78:f9:9c:0d:83:ec:09:4f:90:2c:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CA:2A:F0:F6:36:51:16:7D:90:73:0B:37:4D:1E:0A:EC:86:0D:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4401cca8-5964-48b1-b1b5-2ab2021ddf02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:40:77:78:78:74:94:47:88:15:f9:88:c9:c9:b4:6f:d7:06:
         f6:68:dd:7c:56:c3:64:cc:e9:2b:65:17:dd:7a:63:e8:4b:a3:
         12:d4:38:a2:fa:88:d8:ad:a4:9a:8a:1e:83:4d:b7:71:c7:97:
         b9:b9:e0:ca:90:71:f9:8d:5c:c4:eb:f0:cf:e8:27:68:7a:7d:
         fe:77:5f:62:d2:e1:93:8c:8b:d1:67:9c:a9:76:5e:ec:ab:64:
         c8:a0:aa:6d:83:8b:5c:33:2e:4c:e1:f0:28:3f:6d:a6:e0:b6:
         0b:09:6f:da:91:d0:b4:5d:20:8d:89:81:a1:c5:71:5b:28:bf:
         11:d8:87:c2:9c:1c:e3:ff:0c:20:c5:fe:d5:06:93:f6:2f:fe:
         d9:c1:26:ad:00:c3:da:f1:8e:95:b3:de:9f:7b:71:87:fc:92:
         f2:4d:10:85:fe:f5:42:4e:74:f3:f5:4b:ab:1a:37:3b:e3:e2:
         0e:d7:0f:4e:5c:03:f8:75:64:af:c4:92:68:95:49:56:07:e1:
         d9:cc:82:78:f6:df:38:07:a1:21:5d:21:69:59:1d:2d:aa:69:
         a1:79:23:63:2a:8c:65:55:07:61:46:97:de:47:2a:29:c7:5f:
         65:92:b7:2c:2c:50:cb:3c:49:30:4f:e7:b4:39:fd:e3:91:03:
         60:96:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:14 2024 by rpki-client on console-ams.rpki-client.org