Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e47b9483-80c8-4d54-9e41-4097853eda1b.roa
File:                     e47b9483-80c8-4d54-9e41-4097853eda1b.roa (raw, json)
Hash identifier:          yxv7sO4yHUjpaJALhJ1/t1j/Tsk7fFPBAInKfsbWt8c=
Subject key identifier:   E6:3B:3A:80:F9:A1:EF:F0:9E:B7:CA:8A:75:CA:57:62:F7:13:7D:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       586BDD57029DE320556BF5854AD67BFD74509A36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e47b9483-80c8-4d54-9e41-4097853eda1b.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        207.223.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6b:dd:57:02:9d:e3:20:55:6b:f5:85:4a:d6:7b:fd:74:50:9a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=dc7198bd94bb9c21c57653e25fb7cd4fca3008a64f8f48c2b11f233f0b8e430a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:1e:cf:f6:5b:8d:88:74:ae:0d:56:7c:84:
                    3c:b5:be:27:d1:f1:60:63:76:e1:a7:20:b5:bf:66:
                    c2:8b:d5:23:68:c6:c5:1a:8f:05:2e:de:e8:b0:d9:
                    d7:d8:d5:c1:3d:7e:cf:8b:cd:06:13:0e:5c:22:f0:
                    22:e4:42:65:60:a8:56:3a:44:bc:c6:92:2c:fd:d7:
                    e8:be:13:64:8b:88:a3:72:65:ba:f7:7b:bf:c3:f3:
                    1e:73:bd:6c:e9:81:ca:2c:a6:b5:ae:df:7a:62:c4:
                    b4:24:25:b2:e7:95:85:49:90:0e:28:b8:ac:7d:f3:
                    06:42:2a:e3:84:56:a3:90:d1:b1:a4:db:6a:64:68:
                    65:45:f3:07:a9:b2:b2:be:4e:5b:98:d1:7d:fc:65:
                    14:63:33:1a:f0:ef:94:3b:6b:d9:85:3d:ff:a8:cd:
                    d2:11:6e:0b:21:df:6c:ba:a8:46:56:2c:ff:9f:aa:
                    7d:16:4b:c6:1e:b8:5d:d3:51:22:83:d3:97:2b:f1:
                    75:8f:fd:5a:f7:5d:25:55:90:af:fe:d7:bd:b4:6d:
                    cd:cf:eb:12:ec:52:03:ee:06:ce:3d:6f:30:09:7d:
                    67:3c:1e:42:b2:e9:17:a8:26:58:24:56:2b:82:c8:
                    93:b3:cf:c4:3d:51:11:02:cc:74:77:e3:b5:c1:e8:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3B:3A:80:F9:A1:EF:F0:9E:B7:CA:8A:75:CA:57:62:F7:13:7D:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e47b9483-80c8-4d54-9e41-4097853eda1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.223.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d0:ba:b5:0b:c0:c4:82:ba:7d:c0:bd:bd:b2:a8:e1:ed:06:d6:
         3c:ec:e3:0e:e8:96:3f:a1:c7:d6:7c:8d:b0:bc:66:5e:30:e2:
         cf:82:7b:80:36:25:6c:71:74:06:dd:cb:0a:36:b9:3a:54:b2:
         95:78:31:1f:8d:24:c9:60:06:cd:6a:a7:5e:d7:93:99:26:0b:
         d2:1b:1a:a8:ce:f4:56:dc:2b:6b:bd:cf:6e:ee:de:1a:c3:56:
         33:a6:cd:f4:2e:df:1f:ff:6d:04:8f:cc:30:23:4f:9c:1b:cc:
         24:6f:88:4c:3a:fd:ef:46:08:46:6b:0a:e5:d7:c1:ac:f0:15:
         dd:1f:aa:26:d0:d7:88:5a:1a:83:c4:4e:20:7b:33:e0:17:75:
         bd:e1:de:53:d2:f5:99:72:b1:ae:3c:96:08:60:2d:f3:12:52:
         1a:53:87:2a:76:5d:94:f3:09:87:c2:13:32:fb:43:c7:0a:e4:
         3a:46:e0:8e:46:de:f2:af:24:ae:d1:5c:d6:72:6b:8b:40:1c:
         a3:80:d9:8e:fa:f3:0f:6d:cb:f4:e5:58:c3:21:b9:23:24:0f:
         bc:a2:17:f9:e3:11:2b:c7:db:b1:6c:fb:37:e3:d8:9a:b7:57:
         a3:84:dd:72:fa:e6:3e:43:2d:ae:9d:77:05:2c:c4:9b:99:48:
         d8:db:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:48:59 2024 by rpki-client on console-fra.rpki-client.org