Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c3c467-0357-412c-8f21-70113f26e16c.roa
File:                     b2c3c467-0357-412c-8f21-70113f26e16c.roa (raw, json)
Hash identifier:          Zt1TKHLsiys3g8Dpd7dCEJ3fYF0t5p/s0mx1yIoW4CE=
Subject key identifier:   79:A4:DE:33:DC:0A:6F:06:49:21:4B:71:C5:D0:43:8A:27:97:3B:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4055F7A4B5AD88DE390F564E34C926CC780D1540
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c3c467-0357-412c-8f21-70113f26e16c.roa
Signing time:             Mon 03 Jun 2024 00:00:00 +0000
ROA not before:           Mon 03 Jun 2024 00:00:00 +0000
ROA not after:            Mon 08 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        205.172.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:55:f7:a4:b5:ad:88:de:39:0f:56:4e:34:c9:26:cc:78:0d:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:00:00 2024 GMT
            Not After : Jul  8 23:59:59 2024 GMT
        Subject: serialNumber=eed3d3a5dd8564672986713cef225dbf41139d38d6c650a63476a7e6827cf63a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:56:d2:2e:c8:26:0c:71:90:e5:3b:25:3c:
                    6a:1b:8f:13:f4:ce:4d:80:32:a4:0e:51:1f:80:8d:
                    f2:31:ab:95:44:04:4b:e4:15:0f:92:fb:bc:b1:1d:
                    3b:6f:46:20:68:54:c6:37:db:14:8a:10:9d:1d:44:
                    11:6b:0d:cc:be:eb:87:c5:f5:0f:21:ce:94:c0:49:
                    6c:8b:47:22:f3:4b:6f:ef:4a:b4:b1:67:72:96:00:
                    8d:4a:31:9b:11:8d:7b:8f:ef:fc:07:68:04:da:16:
                    19:c6:1c:06:7b:77:39:e2:6a:e9:e6:31:6c:ba:ac:
                    d9:55:1a:f1:d8:74:14:dc:9a:e6:31:f9:d3:0e:89:
                    c9:74:ae:0c:d0:42:61:d5:8f:98:13:a7:87:16:e9:
                    ea:e7:0e:cb:81:7f:07:c4:f7:bd:aa:2f:7b:dd:82:
                    2c:c1:01:51:54:19:ad:4e:79:f2:28:59:a4:aa:ee:
                    69:31:a4:b8:cc:67:dc:94:01:c1:4c:eb:56:14:5a:
                    aa:e1:d0:39:d9:3b:1b:98:bc:7f:34:02:e0:50:b5:
                    e2:34:86:d1:30:be:29:56:45:e1:da:8a:8a:3c:72:
                    2b:f3:f8:9c:58:fc:ee:1e:a5:e9:6f:d3:09:7c:0f:
                    4a:0b:4a:75:aa:4b:82:37:9f:9e:1f:8e:29:3b:9e:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A4:DE:33:DC:0A:6F:06:49:21:4B:71:C5:D0:43:8A:27:97:3B:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c3c467-0357-412c-8f21-70113f26e16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.172.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:69:08:06:09:07:ca:70:bc:d1:a4:41:30:46:45:a1:f0:
         db:91:2e:32:d1:70:08:0a:d8:65:39:fb:53:01:be:f2:60:67:
         fa:93:6e:9c:a8:60:39:82:e8:0d:1f:5c:b7:a7:22:b9:0c:d9:
         a5:d6:94:a5:a4:50:79:b1:f8:e6:32:c3:fc:86:ed:70:76:d8:
         8f:7f:ca:84:4b:af:76:b7:d2:79:ba:2c:e9:c8:64:72:ae:fd:
         b0:9e:98:e4:b0:64:92:71:74:b0:37:4b:ff:b5:a8:56:23:6a:
         49:3c:75:7c:e8:2c:04:1f:60:03:9c:dc:31:c4:1f:e7:cc:7e:
         61:a0:fb:da:11:11:06:e8:33:5b:25:ab:76:57:7d:cf:5a:79:
         22:a3:39:7a:e3:46:24:dc:9e:2e:6a:7f:68:5e:db:6b:56:8e:
         d1:99:e8:05:cf:ff:1f:42:63:f9:2d:72:cb:15:e0:4c:d8:7b:
         61:27:3c:bf:2d:d2:cc:a7:88:27:f3:eb:15:89:05:76:c9:a0:
         cd:b4:ad:52:71:d3:ed:ad:59:79:eb:07:47:ba:68:c6:6b:40:
         f8:91:05:e9:da:db:13:c9:d9:4a:8e:84:85:db:66:96:f5:09:
         a5:95:30:94:66:6e:0b:80:d2:6e:42:71:93:42:9b:52:a0:13:
         0a:9c:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:25 2024 by rpki-client on console-fra.rpki-client.org