Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da0f8372-94c3-46dc-84b1-7be408de4df2.roa
File:                     da0f8372-94c3-46dc-84b1-7be408de4df2.roa (raw, json)
Hash identifier:          EjC4HthYOep7l2YEjEZ0lRU6bbmm/tItCj5Gl+F4FsU=
Subject key identifier:   29:91:82:78:3F:17:27:B5:D4:5A:DB:C7:E8:41:CD:13:80:A9:13:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       414AFB6B5106B00BA5BE648FC7A4417D41374886
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da0f8372-94c3-46dc-84b1-7be408de4df2.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        64.73.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4a:fb:6b:51:06:b0:0b:a5:be:64:8f:c7:a4:41:7d:41:37:48:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=4f67cd649dc5b45c28df49dc4e2c018da73ab59a0dab6db6dba6ddbebbb5d074, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:c6:c4:d1:15:ef:bd:36:04:7c:a2:02:ea:
                    14:62:b2:13:70:5c:e9:a1:88:c5:71:79:ad:f2:ac:
                    e9:e0:f6:78:ed:ad:c0:31:ec:05:25:d0:ff:f7:c7:
                    4d:f2:2e:c9:ad:c1:a9:92:b0:b6:c7:9a:aa:be:be:
                    dd:20:a5:60:17:32:30:d1:ab:69:b7:39:22:3d:d5:
                    46:e4:ed:fb:2e:94:21:9f:e3:32:73:e3:ff:03:52:
                    9b:19:8b:72:70:68:a7:08:ca:a1:58:32:05:d7:08:
                    b2:c3:02:96:7c:97:b4:5c:91:8e:db:1f:d0:e3:87:
                    7b:2c:35:18:1f:35:5c:1f:d6:be:90:32:56:d3:0c:
                    1e:6b:9c:90:5e:b5:46:4d:67:29:cf:a9:73:c5:04:
                    a9:89:ba:40:70:88:c1:25:80:a9:c3:ca:54:e7:78:
                    af:17:b3:4b:79:35:53:20:bf:df:37:bc:c9:41:bf:
                    33:19:80:45:ce:1a:fc:c2:2a:3c:e3:ea:d6:c7:3c:
                    0e:9d:7a:be:c9:1e:4b:ac:c8:9b:90:64:4c:db:22:
                    0e:2b:1b:51:84:77:37:8f:b3:58:e5:61:55:45:7a:
                    d2:fd:d7:6f:93:12:f4:a2:2f:be:3a:49:fa:65:60:
                    7d:c0:db:73:30:e4:c5:73:01:aa:4f:42:58:25:ed:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:91:82:78:3F:17:27:B5:D4:5A:DB:C7:E8:41:CD:13:80:A9:13:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da0f8372-94c3-46dc-84b1-7be408de4df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.73.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:c0:bd:1c:40:03:ae:f4:a5:6d:4d:64:a3:82:38:ae:64:b3:
         93:9e:fa:ce:59:6a:79:91:93:08:47:67:cb:34:2f:fc:51:f2:
         c0:e3:86:0e:4c:a5:b9:36:83:b6:75:cb:e3:bb:03:eb:82:96:
         80:3c:68:45:62:f1:05:b3:92:4f:77:d1:62:48:76:f1:18:14:
         76:bb:78:86:23:fc:7e:c4:30:08:a8:ba:2d:69:2f:ff:1d:fe:
         d7:2b:e9:a2:d4:e4:dd:8c:9c:57:66:5a:41:20:40:e1:7d:48:
         45:36:67:fa:ed:6a:7f:b3:0f:b3:d4:66:cc:23:b6:54:7b:19:
         a1:cd:21:91:df:71:37:31:b5:de:7b:ab:2a:38:95:6a:3c:a9:
         ad:be:f4:29:b4:0d:3c:6f:b8:57:63:67:d9:06:25:4b:e8:d2:
         cf:d1:03:16:cc:ec:eb:eb:f1:e9:cf:61:33:b5:72:99:a5:5a:
         9c:e6:71:90:db:6f:98:ff:44:f7:0c:d1:b6:00:bd:49:79:b8:
         b2:4e:04:36:0b:e2:9b:17:24:b8:86:ef:66:1d:45:1e:02:01:
         53:c9:7e:56:a9:96:50:e2:cd:af:c5:70:86:25:19:33:1d:3c:
         9b:42:79:47:85:6e:1a:1e:08:5e:2f:a9:a9:ae:3d:fe:69:c4:
         1b:ef:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:41 2024 by rpki-client on console-ams.rpki-client.org