Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca56fb2e-e599-46f0-afa9-77b4761529b8.roa
File:                     ca56fb2e-e599-46f0-afa9-77b4761529b8.roa (raw, json)
Hash identifier:          jat8Q18rF9H7W3PIXqaLAV25TqkBDw9U0JeSgIEHhus=
Subject key identifier:   0C:93:6C:46:9B:B0:8A:11:04:92:3C:91:28:DA:2D:F1:E8:97:B0:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B2E944071874AF65C5BE78E42D5D984995EDCEE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca56fb2e-e599-46f0-afa9-77b4761529b8.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        165.178.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2e:94:40:71:87:4a:f6:5c:5b:e7:8e:42:d5:d9:84:99:5e:dc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=bddf0b90e06f35ff43959336ad9862f1aba2444e140429fe902bfc670313951d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b7:32:42:d3:a1:c3:b2:32:6e:cc:d9:a7:bc:
                    d1:81:45:3b:50:56:5e:6d:01:33:f1:dd:0c:ce:fd:
                    22:ee:41:f4:e9:4e:df:9b:34:21:ae:c9:b3:1d:4d:
                    08:4c:8c:d6:2c:f4:e1:75:fd:f3:39:cc:a1:b3:0a:
                    2a:7c:9d:65:a7:67:d4:67:c0:80:10:88:6d:a5:26:
                    c6:6d:7d:c0:c7:f1:53:b9:fc:3b:5f:fb:5b:93:d4:
                    a4:45:a7:e0:85:e8:f9:6c:60:82:30:35:f4:b9:f2:
                    8f:1f:b1:f8:1c:57:c2:f3:e6:ae:6e:04:5c:8a:21:
                    45:41:db:61:14:63:3c:7d:ee:7a:97:0a:33:3c:27:
                    ae:99:23:59:20:71:59:93:ad:70:54:bd:00:f8:cc:
                    9f:b2:5e:32:1f:50:51:7f:6a:1d:db:db:f5:27:86:
                    76:44:bd:75:ee:71:16:a3:17:27:6a:44:fd:4e:92:
                    1d:16:20:cd:55:72:bc:0d:08:6a:81:05:b7:29:f8:
                    ff:d2:9d:52:a3:5f:5b:80:53:ef:b8:3f:75:16:72:
                    21:c1:e1:1e:eb:d5:2c:e8:04:cc:45:22:eb:8d:d8:
                    07:2d:00:18:46:64:56:3f:6f:a1:f2:da:44:bd:f3:
                    e4:72:78:95:7b:d1:bd:1d:02:9d:d4:6e:fb:71:32:
                    ce:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:93:6C:46:9B:B0:8A:11:04:92:3C:91:28:DA:2D:F1:E8:97:B0:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca56fb2e-e599-46f0-afa9-77b4761529b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:b4:0f:c7:37:a5:13:11:20:17:f6:d7:dc:d7:16:a2:53:e3:
         06:f1:88:ec:fd:ec:fa:62:50:99:3e:7c:34:c5:b9:48:91:00:
         d1:96:b9:b2:c6:74:ce:86:ca:63:13:f5:9b:e2:4e:b9:a5:cb:
         c5:6a:35:a8:c4:93:b7:3f:4c:74:89:cc:56:4c:4d:84:8b:d4:
         f1:80:07:20:0c:24:2f:24:39:60:30:3a:56:64:7d:ae:da:e9:
         66:3a:ee:90:1f:a8:f9:7a:b8:70:1a:c1:27:9f:46:97:6a:e5:
         49:22:21:9a:00:3e:f9:ca:b4:64:b1:91:81:bd:3b:2b:0a:bb:
         f6:91:ac:b9:0e:16:23:bc:b5:16:7f:cd:e8:df:cd:11:86:1e:
         ab:5f:c3:e7:28:63:2e:9b:b1:c7:54:0b:01:3e:93:76:99:41:
         c4:55:bd:22:12:99:7c:ff:4b:30:dd:3e:d0:96:14:d2:0b:d2:
         e2:52:1e:35:0b:35:87:5f:e1:96:a8:79:b1:51:c3:fa:a5:76:
         df:32:9e:70:90:cb:3f:b3:78:59:cc:db:f5:24:1e:69:81:37:
         17:2e:fa:47:54:75:74:54:83:a6:7b:56:75:a4:c5:6b:e0:80:
         f3:fd:01:18:6e:fa:8a:2f:b5:db:49:ed:70:0d:b2:e2:37:9f:
         fa:9a:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:03 2024 by rpki-client on console-fra.rpki-client.org