Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63327763-5634-44d1-979c-6bf77ff83266.roa
File:                     63327763-5634-44d1-979c-6bf77ff83266.roa (raw, json)
Hash identifier:          /ap9QvLxW2tRn3wKdg83sKLj4zIYVoGUrDYuxAQAxWc=
Subject key identifier:   E0:91:BD:06:AE:8C:F6:36:BE:71:89:13:A9:3A:69:2D:F3:2D:89:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1132BEF5772847C754F7EC727B93AB940BE6E5D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63327763-5634-44d1-979c-6bf77ff83266.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        136.246.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:32:be:f5:77:28:47:c7:54:f7:ec:72:7b:93:ab:94:0b:e6:e5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=51a5f689cbf6c4c30d112abda021a266f2ed3a6c451f2a5026306650e10f5448, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:26:c0:f5:ba:fa:c6:cb:57:8f:79:18:ae:
                    aa:c7:c0:35:8b:0b:d6:a5:ea:d4:e4:9e:78:03:ce:
                    bb:a9:f4:20:0f:dd:b7:25:3f:96:42:d9:ad:44:f4:
                    61:a5:6e:8a:7b:05:88:8e:27:d6:7b:6c:57:2e:57:
                    bd:fa:96:f0:62:98:19:f5:96:e4:d6:01:22:3c:94:
                    3f:68:ba:45:49:b5:55:07:db:1d:64:db:60:d7:1a:
                    70:16:6b:af:f9:63:22:5d:2a:db:0d:f9:7b:a7:60:
                    43:5a:b2:35:7a:82:06:4f:79:56:7f:2c:d6:ed:26:
                    c3:35:53:a2:be:3a:60:1f:ca:78:fa:c1:5b:e3:1a:
                    a0:c3:d5:4c:3e:f8:cf:5b:39:4b:11:fd:e8:f7:34:
                    91:c3:10:a1:25:36:00:58:e8:bd:74:b5:81:7a:43:
                    39:f6:a8:13:07:7b:4b:05:ef:87:89:32:f0:82:f0:
                    a1:5f:fb:7e:de:3e:36:29:d1:78:51:af:48:11:07:
                    d7:01:36:f5:57:9f:0c:ab:33:a7:6b:0f:34:9d:4d:
                    e0:f3:1a:1f:00:7e:3b:96:88:4d:82:14:7b:76:c8:
                    f4:c6:91:13:13:cf:55:d5:98:f6:9e:62:80:7a:10:
                    19:0a:6f:44:d7:8d:dd:24:46:31:53:c5:db:f3:ef:
                    9f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:91:BD:06:AE:8C:F6:36:BE:71:89:13:A9:3A:69:2D:F3:2D:89:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63327763-5634-44d1-979c-6bf77ff83266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b7:19:4f:0f:8d:70:b2:fd:58:aa:36:ca:6f:cf:01:a1:33:48:
         2b:7a:56:36:d8:cc:10:7b:d1:52:3c:bf:3a:04:7c:e9:ce:bf:
         f0:ee:c8:48:e8:da:47:11:54:70:78:05:60:c3:33:e2:86:46:
         d2:1b:6c:c6:b3:b9:9f:5b:6f:fb:5a:51:6a:d4:44:7a:66:c1:
         e9:b9:2b:50:8d:42:a1:1d:99:4a:f5:6d:8f:0b:4e:b2:4c:05:
         9e:fe:45:84:71:f6:2b:1d:e5:dc:08:c5:59:47:ab:f2:9b:79:
         2a:64:56:0b:1c:c7:76:44:c2:2e:e6:33:57:2d:d3:f4:d6:2f:
         15:0f:e4:b9:e8:1a:28:17:c8:90:a2:99:cf:5e:01:db:a5:7a:
         8b:1a:86:2b:8c:d9:b3:73:6e:13:03:43:20:d5:43:4e:d2:a6:
         15:98:46:6c:69:23:bd:08:df:0b:49:ce:47:31:f4:d9:d0:72:
         7b:3b:94:43:fe:71:96:1c:e5:36:4b:b3:29:39:17:22:1a:bc:
         27:89:97:5c:41:2f:3b:39:5d:ad:a2:9d:74:ca:7a:d7:69:d3:
         ad:c2:98:81:7b:99:84:db:8c:12:c6:46:9f:43:c7:ea:0e:3c:
         18:ea:9a:58:43:4b:47:01:a4:cd:7f:1a:4a:08:2d:82:a5:93:
         ca:4b:20:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:46:51 2024 by rpki-client on console-ams.rpki-client.org