Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d30b28-58e8-4af5-82fd-ecde44d38fb0.roa
File:                     79d30b28-58e8-4af5-82fd-ecde44d38fb0.roa (raw, json)
Hash identifier:          Y/lRRn2PIjVHlDv9NgMR6UBtSEnCMfAhwUkQg2nYJ1o=
Subject key identifier:   6C:55:3E:D2:BA:B8:98:BD:66:E2:6A:C1:45:72:56:8D:95:9D:70:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B86F3B6EA6817DDC27E8B9DC217D258D3DA3777
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d30b28-58e8-4af5-82fd-ecde44d38fb0.roa
Signing time:             Sat 22 Jun 2024 00:00:00 +0000
ROA not before:           Sat 22 Jun 2024 00:00:00 +0000
ROA not after:            Sat 27 Jul 2024 23:59:59 +0000
asID:                     21664
IP address blocks:        192.43.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:86:f3:b6:ea:68:17:dd:c2:7e:8b:9d:c2:17:d2:58:d3:da:37:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 22 00:00:00 2024 GMT
            Not After : Jul 27 23:59:59 2024 GMT
        Subject: serialNumber=82b8b9c3d075012ed2bb6c4e1be34a0e01f3df68e67e449043cd2ef0c7626bac, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:71:0e:c7:93:88:00:22:ed:69:3a:0a:9d:
                    84:c6:b9:38:0f:16:e6:2c:0f:92:c7:fb:58:bf:07:
                    9c:c0:19:31:02:cc:c5:a9:9e:15:65:32:0d:85:6d:
                    59:8c:c3:94:96:22:d0:8c:b1:1f:25:a0:42:31:40:
                    79:f4:77:41:e5:ed:82:79:bc:9d:0e:3f:44:4f:cc:
                    e2:6b:99:59:f8:5f:0b:ed:30:a4:31:85:f4:58:f1:
                    8f:2d:24:a8:5a:4c:3b:ba:df:b7:2b:c2:a3:f7:41:
                    7b:e2:9c:bf:c2:af:fa:1b:8e:a5:7c:94:ae:d3:bb:
                    f9:e0:89:01:e5:07:41:2e:a2:e5:63:1c:26:26:9f:
                    f0:07:39:99:54:e7:89:2d:fe:fd:2a:7a:13:98:7a:
                    87:61:d0:05:bb:d6:5a:3d:b1:35:db:6e:f6:4d:f1:
                    74:d7:02:62:0f:af:06:b2:63:b4:e2:c9:af:89:81:
                    d9:91:7b:f8:ed:7c:51:20:48:d3:1d:33:04:4f:50:
                    f7:00:9a:69:b9:16:49:19:ff:19:e4:3b:8f:8d:24:
                    cf:b7:a1:c5:d8:df:7b:b3:5d:ad:26:2b:d4:f2:22:
                    98:4d:d6:b0:07:de:fd:40:18:8d:c7:2f:e3:f6:3d:
                    9c:a8:06:90:00:21:57:0c:f7:2b:c9:c2:4b:d8:33:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:55:3E:D2:BA:B8:98:BD:66:E2:6A:C1:45:72:56:8D:95:9D:70:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d30b28-58e8-4af5-82fd-ecde44d38fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:97:28:17:d2:c3:1f:4c:56:a6:d3:cd:6c:6b:09:4f:c3:1b:
         a4:1a:81:7b:32:af:35:67:18:1f:3c:6f:14:c8:fd:cc:bf:7d:
         e6:18:5c:4a:23:f4:b3:cd:de:ad:ac:bd:aa:19:3a:c6:8d:80:
         42:fc:c3:b4:07:ff:53:81:d5:52:23:ea:e8:56:e4:b8:39:ab:
         cd:7c:ec:2b:35:ca:72:e2:5d:e5:f7:da:9b:7b:f5:87:35:35:
         80:d7:2c:b0:3e:32:72:42:99:fb:05:1e:f6:74:b4:55:90:e8:
         3d:2c:74:c0:66:64:c8:ec:c7:40:6d:23:f5:dc:bc:9a:31:48:
         be:77:4c:6b:79:32:e7:81:aa:39:84:0c:c9:77:ec:a5:35:06:
         36:48:d7:d2:cf:8a:48:80:02:b2:5a:ff:44:0e:fe:28:1b:89:
         74:2d:94:7f:7a:8c:c2:37:ce:b1:23:6a:e6:ac:63:29:db:97:
         e1:3a:50:de:47:c1:3d:7a:1e:b3:34:0a:b2:28:a9:b4:cb:95:
         7d:8f:f9:25:33:af:1e:02:ae:11:cc:71:0c:1c:8f:3d:92:3f:
         bf:07:5e:9a:92:fc:a6:fc:81:19:76:ed:eb:99:89:cf:0b:74:
         0f:ca:71:38:52:0c:73:95:a8:49:1b:83:b0:73:dc:27:c8:1b:
         77:06:0d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:29 2024 by rpki-client on console-ams.rpki-client.org