Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa
File:                     eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa (raw, json)
Hash identifier:          fMkmGCBSBeMe8RN0dX8XoEB11hKFNrMYICoXOcW4Q0k=
Subject key identifier:   3D:0B:46:CA:31:44:ED:64:07:21:E1:BF:B4:B6:01:81:CE:05:BB:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A4B397C20CF438A58EE6438A13E2F9B341A1564
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        185.169.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4b:39:7c:20:cf:43:8a:58:ee:64:38:a1:3e:2f:9b:34:1a:15:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=e149985454d1d6bd63ecdbe3a8e75e442afb8c01b9718fca1661c9d600cef485, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:72:88:68:b3:fb:87:17:97:af:ba:5b:81:02:
                    09:15:7f:e3:07:25:8d:72:43:e7:50:ff:31:29:7c:
                    75:b8:83:8d:ab:9b:7d:47:b5:7e:6a:3d:b7:a2:d1:
                    76:45:f4:b2:71:25:93:31:8a:6e:65:48:ce:91:b9:
                    01:41:ca:95:6d:c6:3b:1f:4c:ba:e6:58:c6:b9:8f:
                    4d:db:3b:3d:2d:af:a3:67:04:88:64:7b:fb:7e:52:
                    16:b5:d1:ca:d9:d5:a9:d4:44:08:7b:18:f8:2a:99:
                    d7:57:62:c7:c5:38:de:60:e6:84:c7:d2:18:d3:25:
                    e4:ec:d2:7b:84:da:2b:9b:72:b6:99:a8:71:54:8e:
                    ff:f2:bc:e6:ba:cb:fc:ff:1a:e0:bd:9d:5a:98:8c:
                    20:56:5f:c4:76:90:36:2e:b1:0b:7b:b7:09:a1:42:
                    c5:d1:cb:39:ae:32:25:06:13:07:05:1b:56:ed:e5:
                    bd:d5:53:b5:51:c1:00:71:a3:f9:ba:2d:7e:a5:bf:
                    a4:b1:44:ce:8c:5b:cc:cd:a0:79:be:1b:eb:92:c4:
                    8d:76:9d:8e:0f:d9:b7:55:d2:fd:fd:6b:aa:2b:a6:
                    16:25:2b:2d:82:95:bb:84:0e:43:79:f1:25:36:95:
                    98:2d:e9:01:13:ec:cb:b4:82:9a:59:e6:39:8b:eb:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0B:46:CA:31:44:ED:64:07:21:E1:BF:B4:B6:01:81:CE:05:BB:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:dd:1e:46:40:40:9e:48:60:2f:ad:49:a5:d8:ed:47:5d:10:
         6f:33:40:0e:85:e6:89:fd:ab:4f:28:56:a5:a6:c9:83:b5:cf:
         3a:35:26:d3:dd:dd:6d:95:ff:02:d9:7d:89:f1:64:cf:b9:2e:
         23:07:c2:61:07:d0:cf:fa:bc:46:5b:21:36:c2:86:5c:d9:94:
         f8:27:b7:5a:1e:9e:09:95:82:e1:0e:34:73:1c:f0:f8:aa:50:
         76:38:f8:a9:f9:5e:22:80:ba:46:62:f5:e3:2a:79:d4:5d:9f:
         93:1f:89:21:dd:8c:10:6c:ca:b7:cc:c8:17:ea:95:1d:a5:53:
         03:4b:d4:8a:97:57:b5:d0:9f:2a:2a:df:e5:25:28:2f:57:53:
         80:70:9d:13:30:2b:ca:49:eb:4f:87:25:cd:04:43:5d:34:e8:
         98:c3:b9:5a:8b:47:1c:7c:52:3e:ab:1d:40:9c:59:c0:62:9a:
         a8:6d:18:be:e8:4e:92:e1:78:91:65:23:2d:04:37:25:37:6d:
         cf:c9:1f:33:60:e9:35:33:0f:82:df:20:4c:a1:b8:5f:96:e5:
         0b:10:be:8e:3a:95:af:cb:c9:ec:a7:1f:3b:87:23:69:0b:c7:
         d4:0d:12:42:d5:bb:80:c8:19:ca:46:e7:91:32:e8:38:07:f2:
         d4:d5:d2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:06 2024 by rpki-client on console-fra.rpki-client.org