Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d01b026e-ec8c-44d3-896c-6492c2fa8445.roa
File:                     d01b026e-ec8c-44d3-896c-6492c2fa8445.roa (raw, json)
Hash identifier:          NJWoxBRSMA+KwMJJL1ClV3argDpVaqPu2oG1FXEVoPs=
Subject key identifier:   CC:C9:9D:23:27:1E:34:C1:25:AD:50:43:79:24:C9:7A:39:89:0D:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64B4F957539CC01522986B234EE7F1BE0AF8CB0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d01b026e-ec8c-44d3-896c-6492c2fa8445.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        185.169.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b4:f9:57:53:9c:c0:15:22:98:6b:23:4e:e7:f1:be:0a:f8:cb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=7b55af4322629ad990d143bac85b99c1b46441057b46b476c9eca0eef9562b15, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:fc:32:cd:16:3c:e4:72:8a:0b:cc:de:68:
                    da:5d:c4:d9:f0:8d:4f:67:01:73:b5:82:ed:46:f3:
                    2a:dc:c1:0e:83:0d:44:54:c7:72:a4:59:8c:2d:92:
                    71:29:05:b3:ab:22:dd:66:01:59:3f:e6:28:d7:11:
                    41:59:e3:a0:64:c5:0b:08:b2:c6:b1:ad:de:23:c1:
                    ea:3d:5c:e8:f8:86:ec:91:02:9f:ff:64:a2:18:8f:
                    2a:94:14:78:d6:4b:c6:b1:69:71:85:cf:e4:3c:49:
                    b8:07:a2:82:c8:7b:34:fb:be:64:c3:c5:89:ed:13:
                    20:68:02:2c:ee:4a:94:27:fb:06:5b:5b:74:42:07:
                    97:c1:50:29:c3:38:dd:ef:43:be:5a:6e:20:02:8e:
                    18:18:b6:09:9d:88:e1:6e:63:fd:b1:6b:38:5b:81:
                    79:03:a5:de:b7:a4:56:20:e1:85:cb:35:83:8b:9b:
                    d8:9d:fc:d0:c2:6d:29:16:e2:43:03:b6:76:bf:b1:
                    26:9b:99:2f:e0:69:79:b8:49:2d:1d:39:45:31:38:
                    9a:7b:a0:82:17:6f:55:38:c6:d4:c9:ac:30:6f:ca:
                    3f:6a:72:bc:bc:ce:2a:26:09:e9:e2:71:b3:ad:42:
                    52:f4:51:52:ce:c9:d5:c7:b0:94:db:29:de:6d:89:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C9:9D:23:27:1E:34:C1:25:AD:50:43:79:24:C9:7A:39:89:0D:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d01b026e-ec8c-44d3-896c-6492c2fa8445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:57:07:fd:31:b0:5a:8b:c4:d9:6f:2b:60:6e:95:0c:24:ed:
         9a:d6:3d:48:a8:58:c1:ab:39:ec:26:be:dd:05:e3:15:ea:2a:
         6a:44:75:21:90:58:34:49:52:53:f1:80:b1:8f:d4:03:c8:df:
         2e:cc:4f:f3:23:a0:3d:37:a1:c0:a1:de:d2:6b:5b:05:15:99:
         54:88:7c:c7:c3:65:3e:1e:f0:5a:da:dd:cf:c2:f8:62:84:c2:
         d5:c8:db:7c:e0:a0:1b:60:73:3d:7f:38:43:5a:df:1a:f9:94:
         6f:2b:ff:9d:60:33:32:69:dd:75:98:13:a3:4a:57:4a:e0:d6:
         0a:cf:b2:a9:33:28:12:9e:e8:04:75:57:55:b9:69:c3:95:db:
         eb:60:92:7c:b1:55:ae:b3:62:8b:da:11:f7:10:a4:33:6f:fa:
         39:4c:dd:6e:0a:0e:63:60:3d:f8:52:2a:6d:6b:6e:0d:b1:f3:
         3d:cf:bb:38:45:c1:f8:a0:4a:71:34:aa:3c:cc:ba:09:dc:1d:
         63:72:75:ae:7a:8c:b6:7f:89:a5:4e:d7:52:61:57:2c:68:37:
         80:49:a6:e6:28:05:da:01:27:dc:84:23:d4:d6:f9:fe:5d:97:
         70:d1:d0:18:bd:40:7f:1b:73:2e:39:cd:89:ff:52:de:16:2d:
         4f:66:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:48:57 2024 by rpki-client on console-fra.rpki-client.org