Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc8bb403-7215-4a2f-a99f-c3ef521f9a9f.roa
File:                     cc8bb403-7215-4a2f-a99f-c3ef521f9a9f.roa (raw, json)
Hash identifier:          Ad9Dl9CXRyheSkkv47JBPut/K73QnRlrruh1X1CIF4I=
Subject key identifier:   D5:FF:20:D1:8D:24:4B:B4:0C:5C:A1:6D:9C:2C:E9:CE:2F:F8:E2:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       154944D5461F30142320B07EB708E36A9F30C259
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc8bb403-7215-4a2f-a99f-c3ef521f9a9f.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        23.234.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:49:44:d5:46:1f:30:14:23:20:b0:7e:b7:08:e3:6a:9f:30:c2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=5babf8e4a09f0f40c425527f6222967cfb171fb6fc8b2317a4ea0cbe86fc0dd9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:b7:4b:fb:9d:b6:85:2b:a6:69:bb:95:09:
                    10:04:b6:0e:0d:27:61:84:1e:05:3a:8f:34:34:4e:
                    bc:f0:9b:72:46:05:93:42:d5:60:fd:f6:a9:74:5d:
                    df:32:41:c8:a8:7f:bb:0a:52:f1:4c:0a:2c:9b:23:
                    b5:08:ad:1f:19:50:a5:f3:ec:64:fa:4e:2e:a9:ce:
                    ba:f1:94:f3:da:c4:16:c5:9e:88:04:cc:f7:5b:20:
                    51:11:4c:cf:35:ee:4e:fe:ba:70:83:35:2f:55:52:
                    08:ab:7d:6d:98:df:a8:46:6c:f0:65:64:db:4d:1e:
                    59:a9:b8:b1:2a:f1:fb:a2:68:c2:2d:f6:73:b3:7e:
                    8e:36:ca:06:12:60:17:70:9e:84:4e:cc:47:cb:93:
                    f4:db:bb:24:6c:ba:99:63:6f:2b:7c:79:a5:9f:f2:
                    b1:b8:92:25:37:0e:ea:7c:9f:d4:a7:69:0a:b0:26:
                    16:79:8c:84:31:20:ee:65:1e:fa:b7:68:6a:3f:4f:
                    5c:b7:f6:1f:3b:89:e9:e1:05:e3:b4:54:c1:7f:99:
                    08:e4:78:ee:00:2b:28:c3:71:cb:d4:b1:29:6b:76:
                    e9:f6:4e:e8:d0:32:d3:9d:55:83:d9:20:74:fc:27:
                    2c:78:ed:33:6f:a3:6b:45:64:7b:92:7e:c7:c9:ae:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FF:20:D1:8D:24:4B:B4:0C:5C:A1:6D:9C:2C:E9:CE:2F:F8:E2:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc8bb403-7215-4a2f-a99f-c3ef521f9a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bc:da:a6:f0:cb:28:ed:7f:8a:01:25:79:33:84:b6:28:d3:07:
         f9:cb:fa:8e:ea:29:c1:57:6a:c0:12:0d:37:6c:80:2a:5a:70:
         c6:46:37:9a:a6:87:a8:5d:cb:f4:f9:eb:f4:b2:cc:57:ab:10:
         c9:49:76:f8:a4:0c:8f:86:8a:93:1f:56:c1:d7:3b:8a:81:99:
         e4:b3:51:f1:49:79:f8:ef:d1:75:6b:c5:8b:3d:a4:d8:5d:58:
         0b:e5:90:ea:fc:43:f3:9e:29:e4:95:ea:96:ae:31:4c:26:c6:
         8f:6d:95:84:84:4b:7b:29:47:44:21:1c:87:64:59:c4:ac:01:
         9f:da:1d:2a:4e:80:cf:1b:00:37:89:60:10:ed:09:d4:1f:d9:
         ce:99:bb:1f:56:a5:1c:ab:0f:e1:65:6b:11:64:47:43:0d:78:
         42:9a:34:a8:0e:3f:8a:9e:16:19:a6:dc:20:07:aa:48:03:44:
         8b:57:99:bb:66:0e:1a:ec:f2:af:43:d2:7d:e0:8e:a4:f8:cf:
         64:f9:d3:fa:b9:0b:56:41:ba:01:13:87:1e:fc:50:2b:e1:c8:
         a5:8a:44:68:c7:2d:79:76:14:19:8b:55:49:75:79:7b:ff:b7:
         f8:bb:1a:6e:8e:a4:7f:8f:d5:70:d3:a7:3b:b6:31:a1:31:0d:
         ef:9a:8f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:29 2024 by rpki-client on console-fra.rpki-client.org