Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa
File:                     a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa (raw, json)
Hash identifier:          gRPHB0ONiSSyY7EeuFuN6wJJDaKTwjU0e0Z9aiGcuaE=
Subject key identifier:   A0:1D:39:52:E0:11:54:71:25:B1:E5:C7:94:9F:57:59:09:4A:AD:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2311A57ED66F1A7C86EC4DC3BFAC715E60667675
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa
Signing time:             Mon 20 May 2024 00:00:00 +0000
ROA not before:           Mon 20 May 2024 00:00:00 +0000
ROA not after:            Mon 24 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        209.162.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:11:a5:7e:d6:6f:1a:7c:86:ec:4d:c3:bf:ac:71:5e:60:66:76:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:00:00 2024 GMT
            Not After : Jun 24 23:59:59 2024 GMT
        Subject: serialNumber=fa01a5ec4b1423285e83d565c23e46954884dd365d959e5cc53609518fdf1018, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:32:a3:91:3b:49:ce:b0:86:4b:1b:b9:93:
                    af:cc:2f:0d:44:fd:3e:2e:c4:50:40:8d:cf:69:ce:
                    1f:cf:b5:fe:18:d7:67:2d:da:76:f6:97:00:ef:b4:
                    36:4a:ba:fb:fe:4e:96:74:b4:60:38:46:a4:77:aa:
                    ed:c5:12:24:f3:47:5d:ce:e4:2e:43:7d:eb:0b:b2:
                    45:91:81:10:4b:73:86:e6:2e:04:59:15:8c:d5:a0:
                    43:d2:30:f9:04:ac:36:7d:f3:f5:fa:69:69:59:37:
                    87:b0:5b:23:10:f3:d2:91:a8:49:02:a7:03:e1:a9:
                    d5:76:d0:2e:2f:da:ba:73:62:9d:ca:cf:a9:5c:b9:
                    15:ec:ff:47:80:7f:00:aa:e4:ce:8a:b3:f4:a4:77:
                    63:3e:b2:d8:04:4c:d1:a0:b7:5e:40:76:7f:e5:8e:
                    2c:2f:45:c4:05:95:e3:e2:8f:11:c4:c8:56:67:f8:
                    b3:ec:e9:63:6e:0f:09:e5:06:4f:09:e9:0c:18:d4:
                    1d:0a:7c:53:db:07:4d:a2:38:d5:ca:46:2d:69:34:
                    9e:84:85:61:24:48:dc:0d:df:4b:69:8d:4e:21:a5:
                    2e:81:b8:a6:da:86:5e:ac:fa:ec:15:66:1b:85:72:
                    c5:78:cc:5d:01:58:f5:7c:26:56:1d:02:6c:d9:40:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1D:39:52:E0:11:54:71:25:B1:E5:C7:94:9F:57:59:09:4A:AD:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.162.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:d2:f3:b8:bb:be:a3:e1:bf:79:36:c2:d8:fd:65:ca:61:
         90:0f:37:c7:bb:d6:ae:b8:5c:4b:69:82:64:e5:e7:8b:3c:46:
         a9:f0:db:f8:a2:17:6c:09:c1:7a:5a:8f:99:d2:28:56:8a:92:
         b5:87:d1:bf:2c:0f:c3:4b:78:cf:cb:8b:b7:74:ca:65:b0:03:
         c0:48:0d:73:7a:d1:9e:a4:0f:64:e1:15:28:e6:06:72:dc:93:
         1e:f5:63:67:60:fb:46:58:02:bc:73:69:5f:e9:ec:6a:45:ff:
         08:18:bb:87:d1:fe:34:e5:85:b6:9e:e1:78:56:58:90:32:ef:
         81:b9:57:d5:0b:a7:7e:b2:4c:bf:ae:eb:ea:1b:3b:7b:b0:70:
         66:a5:09:49:03:fc:aa:a5:d8:23:fc:8a:3b:0a:c2:3a:90:f4:
         83:5a:4c:66:fd:42:b0:12:00:cf:9b:bd:ef:34:69:43:cc:7c:
         a8:14:5f:83:47:4f:01:68:cc:c2:64:94:11:cf:86:bc:66:54:
         71:7b:30:a7:da:d9:e3:71:88:96:48:b7:f1:d4:cf:d3:9a:91:
         90:94:1d:cd:17:d1:44:79:5a:09:5f:b5:68:66:c0:f3:d7:03:
         fe:43:18:99:76:4d:d1:3e:23:bd:55:02:0f:30:31:c5:73:48:
         bd:0e:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:00 2024 by rpki-client on console-fra.rpki-client.org