Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a21d08b-d70b-4b07-bfef-5d7c4aba9943.roa
File:                     9a21d08b-d70b-4b07-bfef-5d7c4aba9943.roa (raw, json)
Hash identifier:          rGYwaPZcFwVzvhShfPczL9qLUNzQwCPxooJOBwOXR1A=
Subject key identifier:   18:3A:3F:78:77:E1:6C:A1:05:E4:49:17:96:D5:5F:A7:8A:C7:97:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E6694BB2E811659E94314B85582A653AA9FDC86
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a21d08b-d70b-4b07-bfef-5d7c4aba9943.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        138.34.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:66:94:bb:2e:81:16:59:e9:43:14:b8:55:82:a6:53:aa:9f:dc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=2ede23218c8e9eb600934f0e14275ac40d55d4effb833515a2c5744440902719, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:98:52:59:79:29:b9:22:ff:fb:88:16:ae:
                    84:13:9a:7b:41:a0:2b:cd:6f:ed:b7:a0:38:17:8f:
                    b1:86:c2:29:bc:db:02:1e:f2:d0:49:1a:1e:d0:04:
                    e5:ea:c2:32:93:9c:ab:20:21:1f:1b:db:22:5b:ce:
                    a7:3a:d7:aa:3e:83:d4:96:a0:32:00:21:f7:09:4a:
                    14:07:1c:d7:e7:9d:3b:64:f6:7a:f4:9a:af:ac:58:
                    ab:e2:e1:f4:8a:14:01:06:05:25:a5:47:2d:3d:3b:
                    7b:8d:b1:cd:f5:1c:fb:30:b5:be:4b:8a:3b:26:c0:
                    90:ff:3f:d6:3f:5e:00:b2:e4:b0:be:7a:7d:12:4d:
                    ea:02:00:05:fa:1c:40:24:a8:25:61:22:ed:e1:e6:
                    ac:f8:e8:fe:e7:73:55:79:46:7d:b0:32:86:ca:23:
                    92:45:51:05:5d:d3:c6:9a:95:32:87:30:2c:f5:84:
                    e5:37:23:7d:56:a0:ad:7a:b4:c9:9a:b0:5b:e5:d8:
                    e5:ac:0b:cf:5d:db:44:ef:b4:d0:30:e9:a9:82:2e:
                    18:06:77:15:59:2e:09:50:8a:af:e4:2b:33:ad:b3:
                    e1:2a:94:1f:a9:32:74:c8:41:8d:ff:9f:a6:90:a2:
                    c9:a6:cc:b4:f2:95:76:ce:50:78:64:4d:6c:19:04:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3A:3F:78:77:E1:6C:A1:05:E4:49:17:96:D5:5F:A7:8A:C7:97:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a21d08b-d70b-4b07-bfef-5d7c4aba9943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.34.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:4a:d8:d2:b9:bf:89:ff:12:19:e7:45:f9:ec:2b:44:87:2d:
         9c:fe:47:b1:ad:93:23:8c:e4:46:21:82:51:73:85:a1:2a:7c:
         ed:ec:0b:8d:06:9f:53:8c:20:00:b9:02:dc:38:c6:22:07:f4:
         3e:87:d4:de:76:15:91:de:84:3f:df:bc:0e:7b:1c:16:31:38:
         5c:9c:27:23:9d:df:97:90:a9:30:36:bb:11:99:72:d8:62:0c:
         cd:79:42:81:9d:5d:ab:36:37:1f:21:5c:02:a3:c6:eb:af:15:
         ff:1f:c9:be:4c:91:8f:37:3a:e9:32:08:f7:79:ea:30:50:70:
         9f:b4:7c:aa:3e:88:1d:a5:96:c9:82:9b:a6:bb:93:67:cb:03:
         4e:33:ab:3f:d3:89:78:ff:05:04:7d:28:8b:e5:55:07:cb:b9:
         af:aa:fd:8a:76:1a:2f:03:52:a2:c6:0e:75:fd:f8:c2:5e:ab:
         48:fb:fa:eb:71:fd:ae:67:9d:e1:93:ac:c0:20:86:ab:54:98:
         41:12:da:8a:df:70:ac:cc:02:58:78:8d:c1:41:a7:99:8e:24:
         0b:8c:02:ba:86:30:c0:ae:16:53:0b:b0:04:3c:a5:66:e7:ee:
         9c:20:44:cb:1a:ce:e7:41:83:00:82:d0:ba:c5:9c:65:c5:36:
         54:8c:2c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:46:54 2024 by rpki-client on console-ams.rpki-client.org