Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b291d7d3-1582-4d15-9362-848d2950798a.roa
File:                     b291d7d3-1582-4d15-9362-848d2950798a.roa (raw, json)
Hash identifier:          o0Tw4cLB+OqMxccjq4+uNtSlkcBn7se4QTlfhKg5MUY=
Subject key identifier:   71:54:DB:BE:18:51:AF:7C:61:69:95:26:7C:F0:08:89:85:9D:26:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2665A355560F28E8218B04197CF69FDB92959724
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b291d7d3-1582-4d15-9362-848d2950798a.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        198.148.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:65:a3:55:56:0f:28:e8:21:8b:04:19:7c:f6:9f:db:92:95:97:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=10e907c0902acb10eed98adec1369d7e5f0a83361d0dd354fee96e6f63372641, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:56:25:5c:0a:c1:b7:87:88:cc:e2:bb:ca:
                    fa:d3:12:26:98:a4:6f:00:96:3e:5a:79:86:ce:13:
                    b3:0b:a3:62:41:a7:87:e6:13:76:9c:77:48:46:a5:
                    5e:15:bd:03:7b:b9:72:71:a4:21:f3:6f:b3:5e:e5:
                    be:ab:8a:42:7f:3a:74:cb:02:88:3f:65:89:ca:82:
                    bf:e9:c9:8c:55:58:4c:04:91:9d:d6:48:67:4c:a0:
                    e7:8b:f0:f9:9f:6e:85:b1:51:ee:ed:dd:56:21:2f:
                    e4:41:74:7c:20:a2:f4:42:62:d1:98:d6:e5:54:f0:
                    f5:2e:e6:36:c0:f5:4d:cd:2f:b3:87:90:9a:be:0a:
                    66:73:1d:0a:7c:3a:15:a6:4a:ae:a9:1f:01:1d:4b:
                    aa:28:00:da:17:88:12:73:3f:5b:74:66:fc:8e:fe:
                    e8:1c:07:d5:cb:41:a6:90:07:fc:71:31:6b:ae:65:
                    f9:01:0a:10:0d:be:1b:e2:83:eb:0c:e0:b3:af:e8:
                    6f:f6:74:7b:8f:9c:fc:30:ce:db:50:9d:18:c7:f0:
                    60:08:9d:81:d4:ea:fc:7d:bb:43:d9:a2:d5:e8:a5:
                    19:2e:3d:c4:ce:87:da:63:b7:89:11:51:35:03:75:
                    bd:81:17:7e:34:17:58:f3:50:23:c9:57:bb:77:0e:
                    76:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:54:DB:BE:18:51:AF:7C:61:69:95:26:7C:F0:08:89:85:9D:26:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b291d7d3-1582-4d15-9362-848d2950798a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:6d:17:65:3a:3d:9e:3f:2f:59:d9:ea:83:37:99:26:65:
         49:53:4e:38:21:af:ef:24:5c:c0:c2:5c:49:f4:da:f5:9b:18:
         6e:08:f4:ce:06:67:b9:0e:3b:f4:25:69:0d:70:b1:9f:30:c5:
         49:eb:a5:e7:79:98:a5:4b:d7:22:35:e6:fb:aa:a2:59:9a:b4:
         04:b8:aa:f0:af:f8:c3:42:fc:31:0f:7a:f0:dd:71:ab:84:b7:
         dc:e4:bd:22:b3:88:b6:72:df:95:28:ce:2d:3b:cc:be:23:00:
         d8:6d:d2:e7:49:73:8b:3b:09:8b:7d:14:be:f0:48:2c:e3:d2:
         88:d7:c4:22:9e:5a:6e:83:d3:0b:2d:d8:c6:d6:ca:c7:00:84:
         66:d1:e9:3c:f5:b4:0b:18:cf:52:e0:be:7b:10:63:c0:6e:89:
         a9:d2:29:a0:05:4f:2d:f3:89:74:35:a2:9f:c7:aa:a2:ac:01:
         c8:f5:0b:83:ce:63:de:ab:5d:f8:9d:67:f9:80:ed:46:91:90:
         da:f1:6f:64:dd:00:90:f1:b9:32:c3:35:26:32:74:93:8a:87:
         7e:f2:ee:96:a3:96:85:42:e0:43:98:71:0c:6d:d2:58:02:14:
         65:01:03:cb:8e:26:db:c9:b9:10:65:ba:30:d8:d6:57:47:52:
         e8:5f:ce:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:36 2024 by rpki-client on console-ams.rpki-client.org