Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618f902c-fc69-42ce-8940-445cf07120ee.roa
File:                     618f902c-fc69-42ce-8940-445cf07120ee.roa (raw, json)
Hash identifier:          yMUg+OLzzNsaSzOVB0LXjaUR+aP9M8OkJRiorNnkGqc=
Subject key identifier:   FE:73:33:30:03:89:26:09:4F:31:89:54:F9:04:C1:CF:AB:4A:41:02
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       195EC81212D7C82C9993A72E6A6CBAA9A7087B1C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618f902c-fc69-42ce-8940-445cf07120ee.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        208.115.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5e:c8:12:12:d7:c8:2c:99:93:a7:2e:6a:6c:ba:a9:a7:08:7b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=a49ea0d91d11ea55ef29bb7b1aed09f774eb5cbf6431883091d4f94a2e24de2a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:c8:88:a1:4a:cd:ed:45:8a:6c:22:df:30:
                    a2:05:71:e3:09:5d:51:03:45:b0:29:b9:01:bf:21:
                    71:00:2f:6e:12:8a:1b:c6:fe:51:d2:05:db:04:35:
                    9e:4a:30:d2:e0:fc:4b:b3:30:53:44:20:32:22:b5:
                    3a:fd:40:fa:34:ca:a2:12:0d:49:06:75:55:f4:fc:
                    88:1c:ed:dc:88:31:bc:2e:18:29:79:7a:c6:4d:92:
                    a5:a5:13:0c:02:e7:e8:7a:6a:fa:48:d8:df:8a:8b:
                    5a:75:f6:41:12:eb:2f:ef:3c:32:9d:82:b8:fe:66:
                    75:78:b3:e3:63:60:f8:95:d6:f7:d3:5d:99:6a:53:
                    24:1c:db:85:c5:f8:bb:b9:fd:ab:dd:61:19:b2:5c:
                    73:80:2b:e8:81:f8:17:36:63:19:14:e6:77:57:67:
                    28:58:14:8c:c0:70:4a:35:e7:cf:c2:9d:b6:f8:20:
                    85:86:c4:75:11:63:9d:84:09:07:95:eb:9f:da:d4:
                    a2:6f:e5:fc:c5:dc:94:a1:fd:10:15:5c:ec:17:40:
                    21:b5:c9:30:40:35:b4:6a:0a:fc:8c:14:61:de:b0:
                    f3:14:23:1e:02:c6:7e:14:a3:e8:a7:aa:c7:a7:fe:
                    4f:89:8d:c5:63:df:b9:af:32:4f:5a:86:de:6a:65:
                    36:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:73:33:30:03:89:26:09:4F:31:89:54:F9:04:C1:CF:AB:4A:41:02
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618f902c-fc69-42ce-8940-445cf07120ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.115.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:70:21:b1:76:42:07:39:52:b9:70:ba:54:fd:84:31:3d:de:
         20:b8:e1:ec:f9:ec:b8:d4:1b:1c:38:f7:0f:53:41:33:7f:b9:
         4e:b5:c4:74:2a:0a:d9:9b:57:4c:1e:f9:03:7f:3b:8f:f5:db:
         0f:84:fc:6d:a2:ed:bc:b0:f8:d6:48:81:fb:ac:f9:0e:58:d4:
         b9:cf:79:d9:36:73:92:22:33:02:7a:40:46:25:5b:d1:b0:7a:
         26:2a:74:29:e5:7d:39:5e:65:62:a9:19:e1:ef:78:6d:5c:2e:
         8b:0a:76:db:cf:df:8a:bc:8b:4d:f0:f7:58:87:fc:c6:d1:33:
         aa:9c:0f:ff:7b:ff:aa:95:49:71:6f:53:69:e8:16:c3:da:32:
         c8:16:13:30:46:fe:60:29:ac:54:81:01:16:4b:03:bc:fb:11:
         ec:7c:2e:f7:26:8a:46:bd:2b:51:42:1a:aa:c7:19:1d:60:38:
         17:d8:98:84:01:34:09:50:c2:3e:93:c9:84:3e:24:02:3e:d4:
         b1:39:0d:ca:cf:a2:64:e8:75:aa:cb:0a:91:5c:7b:0a:85:67:
         fe:47:10:a9:8f:b3:f8:8e:bd:c1:fc:75:24:30:dd:39:f0:4b:
         59:f0:e3:17:92:e6:df:b8:07:b4:f4:40:06:b2:e0:32:c1:35:
         75:9d:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:18 2024 by rpki-client on console-ams.rpki-client.org