Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6caf770f-fc18-459d-8e93-235412416415.roa
File:                     6caf770f-fc18-459d-8e93-235412416415.roa (raw, json)
Hash identifier:          6PUdhib07KDurDJTf2VU0zhfKYZM2R3SHMjrJDNoqR0=
Subject key identifier:   E9:67:70:09:EB:D6:D9:AA:B7:C6:8C:C4:14:7B:F1:32:01:7C:4C:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       442766213598CB0DD2F0C50C9AA5CE20BB1E99A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6caf770f-fc18-459d-8e93-235412416415.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        40.48.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:27:66:21:35:98:cb:0d:d2:f0:c5:0c:9a:a5:ce:20:bb:1e:99:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=2162151dceec62ea5a096de3395303b304545783d8911527df4850f17bcf3893, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:31:99:d7:7f:ff:1d:49:fd:7c:40:95:35:
                    ea:50:57:e5:51:bf:37:50:89:0d:d7:95:77:44:d4:
                    dc:cb:a1:90:de:93:f6:62:85:80:d5:e2:fe:6e:2a:
                    40:9c:87:da:03:e9:2b:73:03:30:ea:45:56:2d:8e:
                    71:86:a6:29:e2:26:2e:e1:24:ac:06:a7:4f:a6:2f:
                    5a:32:66:89:67:f1:d7:8d:a1:6c:5b:ae:34:ad:1c:
                    3d:94:05:3f:d1:e4:81:20:13:0a:db:a7:9c:7a:b8:
                    03:c1:0f:04:a4:d3:df:73:f6:ce:52:2a:25:61:23:
                    70:20:fd:74:60:02:66:89:49:29:45:72:5c:90:83:
                    8a:d5:97:4f:56:f0:af:0b:87:0d:43:dc:67:41:94:
                    fc:95:ba:63:96:e1:0f:26:50:cf:8a:92:5a:a4:08:
                    28:4c:32:08:f3:c4:b3:33:80:e8:19:10:71:2f:0c:
                    44:d3:b7:8e:28:47:1e:b4:06:ec:b6:54:cd:51:b5:
                    7a:5c:a7:c8:2a:16:8a:41:f0:a8:10:6c:35:a6:bd:
                    d6:61:2c:26:ae:0d:e0:80:f2:6c:49:26:70:0a:10:
                    2a:0d:29:31:4a:1f:3e:b2:69:11:3f:28:ab:21:68:
                    c4:8e:6a:c8:7e:c8:c1:22:20:34:12:8a:35:fc:c9:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:67:70:09:EB:D6:D9:AA:B7:C6:8C:C4:14:7B:F1:32:01:7C:4C:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6caf770f-fc18-459d-8e93-235412416415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c4:7a:ac:b9:c5:dc:e7:b2:7c:1a:7e:23:f2:09:48:48:77:c6:
         d5:31:09:37:62:9c:1a:b2:19:02:e2:6a:ea:cd:b2:1a:47:2d:
         45:a7:6e:95:4f:fa:3b:a1:ce:b0:27:f7:54:c4:79:d5:d9:f5:
         7f:ac:4b:40:fe:c5:d8:75:55:99:b8:a3:ca:29:a7:3d:70:58:
         62:17:9f:81:f3:2d:45:81:8b:e8:99:bb:3e:3c:5e:9e:13:2b:
         d6:37:27:af:ab:b4:1c:f2:73:ce:6e:ac:b9:91:bb:53:d1:88:
         98:a6:9c:75:f0:8b:d6:ce:81:4d:d5:99:b9:08:a3:38:1c:28:
         7c:ee:fb:25:69:46:62:aa:81:3e:82:93:81:ff:fb:99:98:22:
         b6:98:61:14:ae:02:ab:0e:91:25:37:4b:e9:ba:92:8c:30:55:
         f7:68:1b:45:be:19:77:7f:21:29:55:0d:9a:de:ce:e3:7f:da:
         c9:b7:11:f6:33:9f:71:52:3d:4e:51:3d:11:c6:e7:e7:5b:a4:
         6b:60:93:36:bb:55:52:82:0e:c5:fa:ae:5d:30:62:e3:96:e0:
         ff:c1:87:5f:a5:9b:c9:b1:db:01:83:87:6c:3a:44:d6:3c:fc:
         60:98:15:fc:e4:3f:76:f1:8f:79:1c:9d:9c:c5:aa:38:df:76:
         54:f2:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:20:33 2024 by rpki-client on console-fra.rpki-client.org