Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea49d48f-bd00-4367-84d0-1102e24e6115.roa
File:                     ea49d48f-bd00-4367-84d0-1102e24e6115.roa (raw, json)
Hash identifier:          EMpN24RuRAhZuhMxrzwu/XZjIkkfVr1LAJyxjhIfyUY=
Subject key identifier:   D0:50:65:31:14:B9:D5:89:28:D2:77:68:5A:72:FE:70:5F:D5:85:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       461411F26DC3F3A54865505C6EBA21AF48BA35E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea49d48f-bd00-4367-84d0-1102e24e6115.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:14:11:f2:6d:c3:f3:a5:48:65:50:5c:6e:ba:21:af:48:ba:35:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=e9c8da7d5b41f0f7be515bb79026333ae205ece5779e0688816727930adb4458, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:31:4f:58:58:24:22:32:99:02:37:6f:54:
                    67:28:f0:2d:92:c6:09:55:b7:be:41:c2:6d:af:4c:
                    d8:95:4f:68:dc:fc:98:6e:83:5d:44:fc:f2:26:2e:
                    5f:03:5e:3f:b3:3a:54:cb:cb:41:53:b3:7d:4b:6b:
                    39:d0:ae:c8:a4:84:81:f0:59:99:0d:e9:2b:2b:ba:
                    28:cf:8f:c1:e8:16:37:ee:15:b3:1c:c3:35:54:ca:
                    94:9b:01:5a:31:73:cb:72:0e:99:50:33:06:70:9a:
                    72:f6:6a:ef:e4:bb:b9:d8:c3:82:f7:20:f8:10:02:
                    b8:e9:81:57:c4:ef:84:ff:f0:9b:83:40:ed:c2:f6:
                    85:aa:ba:e8:6a:22:f7:b4:14:3e:1c:74:37:a8:8c:
                    f3:3d:b6:82:d2:95:0c:3c:3f:47:92:d3:0e:a5:3e:
                    a8:43:dd:77:c6:d4:6c:36:db:d6:b4:95:5a:f7:d7:
                    ce:07:39:0a:b2:6f:9e:5b:44:ea:25:f7:77:e1:5f:
                    e8:07:c7:d6:21:df:6d:e5:de:94:65:bd:8b:a7:47:
                    c4:83:a0:4e:d9:6f:e5:79:e2:3e:1d:60:60:83:c3:
                    5a:27:24:60:32:d7:46:91:3a:2d:08:bb:0d:f7:b3:
                    ac:9e:83:b1:a6:66:ec:09:e7:a0:74:68:b9:b2:6a:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:50:65:31:14:B9:D5:89:28:D2:77:68:5A:72:FE:70:5F:D5:85:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea49d48f-bd00-4367-84d0-1102e24e6115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d5:6d:11:ee:0f:d1:da:53:b2:49:cd:3d:fe:65:26:ef:98:
         ef:30:47:57:70:a0:4f:96:6e:fd:00:15:c5:0e:a7:97:c6:ce:
         7e:5a:26:6a:25:0d:17:c4:87:2b:69:f5:80:52:0f:29:e6:fd:
         45:9a:0f:71:7e:b1:1e:e1:65:f2:46:11:f0:71:4d:36:96:87:
         71:a4:0a:64:54:5b:b3:78:f7:5e:22:e8:ed:7c:c1:60:eb:de:
         90:1c:0f:ca:26:21:ec:37:64:ca:80:63:15:b3:ff:d9:f4:35:
         b1:1a:fc:44:da:94:c2:76:b2:33:ff:4f:dd:bf:3d:a0:84:e3:
         d6:39:55:0c:bc:be:7c:92:6c:b7:8f:c8:49:a4:48:4b:f6:41:
         b2:a8:d0:b0:a7:b9:08:05:f4:aa:be:51:3b:b2:c6:96:cd:d5:
         fc:ec:e0:8b:c7:27:6f:ce:99:e7:e4:57:4f:07:01:e9:d0:bb:
         22:5c:8c:69:00:52:00:cb:0d:55:b2:04:47:f7:93:c9:16:bc:
         72:36:e7:d2:5b:2d:30:9f:45:56:4f:a7:83:04:54:8c:dd:c4:
         6e:ab:a3:ec:c1:81:cd:6e:2d:75:a0:11:ad:3d:51:e8:5e:86:
         b7:01:2e:8b:90:01:8d:03:55:1b:57:3b:70:2a:ac:1c:28:3f:
         bf:da:3a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:06 2024 by rpki-client on console-fra.rpki-client.org