Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e806188c-ea90-4e62-ad8e-1af756d0507a.roa
File:                     e806188c-ea90-4e62-ad8e-1af756d0507a.roa (raw, json)
Hash identifier:          UOqg/PLpIgUufABXRcex7lDuvmBrmzwuRcyeIkAh4Ek=
Subject key identifier:   60:4B:8E:CA:91:6F:B9:9E:17:43:18:95:B2:4F:7A:E0:3C:DD:B5:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       322B6CBFE8A9DD9471C78042F6541365B3E92B12
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e806188c-ea90-4e62-ad8e-1af756d0507a.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     701
IP address blocks:        162.208.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2b:6c:bf:e8:a9:dd:94:71:c7:80:42:f6:54:13:65:b3:e9:2b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=7345776d54cc05a1aad46fa68ef303a076800a5ac8e0dd3c9e3aab19c71b9137, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:28:b8:00:97:52:b6:c0:b4:20:cf:07:bb:
                    eb:9d:a8:42:e6:01:60:9b:93:00:ee:da:5d:4a:2b:
                    65:b9:fb:1d:7e:98:1c:95:c2:1f:0e:76:0e:59:59:
                    eb:2c:64:af:4d:a5:24:4f:49:64:bc:a2:8f:d4:62:
                    e5:1d:0d:aa:ff:76:a9:c1:bd:08:3b:ad:82:dd:7a:
                    f3:01:1e:5d:a9:e2:8c:9f:1b:e5:bf:6f:9e:2c:c3:
                    38:5d:26:73:9f:a0:93:f1:75:89:14:4f:f0:d6:16:
                    2f:90:c5:b0:01:e7:03:b6:15:30:b3:ce:de:a7:26:
                    f9:d1:c6:ce:9c:51:b3:4c:37:65:23:a0:3b:40:5e:
                    62:e1:52:f2:7c:bb:2e:45:07:07:51:10:9c:01:66:
                    44:36:01:7e:fb:c4:fd:b0:94:c6:a6:1d:0a:7e:28:
                    28:04:65:d6:66:4e:6a:42:7c:15:32:9d:80:8f:82:
                    54:20:60:23:23:65:b6:01:e2:dc:80:65:55:9d:26:
                    4a:77:21:0b:6d:cf:7d:37:32:c6:06:92:d9:9f:e1:
                    1a:c7:6b:0f:e3:ed:3d:71:82:a3:df:9f:29:6c:96:
                    39:03:69:0b:d3:c1:22:41:38:6c:b1:62:35:94:42:
                    7e:7b:96:c8:a5:1f:37:d0:ea:b4:b7:92:ea:aa:2d:
                    4b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4B:8E:CA:91:6F:B9:9E:17:43:18:95:B2:4F:7A:E0:3C:DD:B5:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e806188c-ea90-4e62-ad8e-1af756d0507a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:0b:a6:06:ef:fa:77:ab:14:81:4d:f3:2e:d6:66:00:2e:b4:
         08:f4:94:e3:34:b0:81:81:07:a1:8f:cb:3b:ab:b4:8c:96:68:
         1e:3d:ee:5e:4f:01:6b:7f:eb:49:e3:1c:30:0e:f1:af:47:4b:
         63:0e:b6:39:ec:1b:91:96:55:2a:e2:fc:9f:88:8a:5f:b7:50:
         27:15:0d:76:84:81:82:c9:f2:3d:5e:bf:b5:9a:08:ed:7e:94:
         21:3a:28:99:2b:64:3d:55:2a:4a:70:2b:f2:aa:4f:34:e4:da:
         b4:c7:e7:0f:54:e4:b3:ea:f2:85:8f:1d:9e:5b:53:0d:77:bc:
         e8:57:90:df:7e:56:0a:7f:ad:18:3c:90:26:04:b7:0e:cb:1c:
         2b:07:a6:df:b4:f7:41:94:69:f0:ee:5c:89:b2:88:d0:ed:03:
         6d:45:47:00:d3:67:fc:0d:c1:91:ef:e9:ce:da:8d:a3:16:9e:
         44:80:5e:84:3d:a6:d7:41:bd:69:3e:86:fa:95:46:c3:ea:07:
         f5:4f:5f:04:7e:94:f1:5d:9c:41:06:44:bd:7b:1a:0a:6a:4c:
         5c:79:da:1a:0e:70:ba:2c:c6:29:82:ef:36:82:de:ed:17:72:
         a5:45:b4:80:b5:90:2c:c7:99:6a:17:01:a0:d3:5e:cc:a8:03:
         e7:e3:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:42 2024 by rpki-client on console-ams.rpki-client.org