Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f767a0d-ff6e-42ae-b67b-4dac9befc656.roa
File:                     6f767a0d-ff6e-42ae-b67b-4dac9befc656.roa (raw, json)
Hash identifier:          853WNDyPmW4u3UorQWBhTawbgnGUUNGuH1bc7kHUNd4=
Subject key identifier:   C8:D9:25:59:FC:9E:C1:0B:45:25:EC:2B:5F:A0:51:34:83:CB:E1:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AA436E64E752190FBCAEA6100771B796825E409
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f767a0d-ff6e-42ae-b67b-4dac9befc656.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        198.74.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a4:36:e6:4e:75:21:90:fb:ca:ea:61:00:77:1b:79:68:25:e4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=7795f2ef12641bdb50a376e003248c6af793016b48ebcc462783c6480cb6cec5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:16:17:de:7d:98:26:a6:57:f9:65:db:3c:
                    59:4a:49:6d:c3:70:ed:0d:4a:3d:b4:eb:4a:95:c3:
                    4b:f9:2b:67:ed:38:fe:1b:33:6a:77:b6:cc:44:41:
                    2c:04:36:68:dc:e1:05:0a:f9:66:88:10:26:8c:a3:
                    16:b6:2b:28:c4:94:83:0b:a6:a7:77:85:43:7c:1a:
                    e0:45:ee:81:8e:7d:82:2b:66:5c:98:4f:40:02:b6:
                    c0:bb:b2:0c:04:4b:62:1a:bd:57:20:a1:30:73:36:
                    9d:05:b9:3b:06:12:fc:88:0d:af:e1:fb:68:8c:0a:
                    76:bd:39:ab:3c:55:8d:8d:ea:6b:95:c9:2f:ad:b1:
                    ec:fd:31:8b:28:d8:76:14:2a:54:04:a9:9c:e9:cf:
                    e6:e9:da:71:f5:e6:6d:cf:7c:e5:df:68:13:e0:b2:
                    fa:f7:da:8d:eb:40:21:19:2f:f7:ef:96:03:d0:be:
                    c1:d2:d6:7d:d6:64:7b:52:09:d4:15:6b:39:1e:3d:
                    e7:4d:bd:c0:cb:87:21:e4:12:5a:bd:45:83:52:e4:
                    bf:1f:c0:a0:cd:5d:42:bd:08:42:88:a4:f1:94:fa:
                    38:32:7a:2e:61:ed:42:6c:2c:90:6c:9f:d3:e8:db:
                    f7:bf:d0:a4:ff:d8:e1:59:f4:8b:45:e6:fb:58:3e:
                    85:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D9:25:59:FC:9E:C1:0B:45:25:EC:2B:5F:A0:51:34:83:CB:E1:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f767a0d-ff6e-42ae-b67b-4dac9befc656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.74.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:c6:94:a0:69:c7:f7:8c:25:78:5c:2f:0b:b9:ba:d9:72:95:
         91:69:0f:94:86:ec:75:58:58:4d:45:89:d3:23:bb:8e:26:09:
         0e:0c:7c:4c:f9:8c:62:fc:87:c4:1b:2c:4c:2e:ea:b9:9d:04:
         6c:7d:40:3b:83:be:3c:1a:08:c6:d0:97:c4:89:58:11:e9:f8:
         3d:5f:38:a2:fc:98:b3:6d:27:a8:69:ae:6f:c1:4f:87:cb:ce:
         a7:b8:5b:18:a6:0f:1b:7d:76:ff:ba:d6:43:ca:a6:8f:c0:2b:
         1e:92:30:c1:b0:d4:72:ad:3d:4f:04:7b:a1:89:79:ef:a6:31:
         0a:9f:d4:21:19:11:50:df:ea:8c:b1:1a:68:53:1a:52:b9:90:
         20:81:dd:6e:ca:5e:a2:15:62:b4:21:9a:c2:d8:9a:2d:5b:6e:
         c7:cc:eb:01:a6:6e:e6:69:1f:e6:2e:83:ac:fd:99:5d:b1:b4:
         ca:a4:72:5d:53:4c:e3:7d:ca:1b:36:0d:f2:fa:5e:b3:45:fe:
         e4:b1:3e:aa:cf:24:99:76:0e:4d:c6:c9:a9:35:57:fe:9b:37:
         66:22:a7:4c:63:98:72:8b:4a:14:f2:88:34:4e:59:a8:55:6f:
         09:c3:50:28:1e:f1:c7:f5:31:da:83:7d:48:35:3f:93:3a:7c:
         4f:75:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:16 2024 by rpki-client on console-fra.rpki-client.org