Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc0b1545-3d15-488d-94f5-d68d40e3f602.roa
File:                     fc0b1545-3d15-488d-94f5-d68d40e3f602.roa (raw, json)
Hash identifier:          BhE2ewTR1g8yFIJFf4YCmUo3grJz08NmkfdL5hh4Z+4=
Subject key identifier:   7A:7A:FE:AA:5A:98:6D:2F:2D:0D:03:78:D5:D3:C6:B7:0A:8B:17:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E6A9337AE83F31A5FF14746D077984833CE9891
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc0b1545-3d15-488d-94f5-d68d40e3f602.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        64.91.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6a:93:37:ae:83:f3:1a:5f:f1:47:46:d0:77:98:48:33:ce:98:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=184549b332d42560b0d2f8ad22295fd2bcffa4e999fe3fb653c2b12a9ca21735, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6d:2e:af:c7:7c:b7:17:1c:d4:c1:b3:29:c0:
                    84:9d:d6:33:0e:29:21:3d:7a:b4:cb:5f:63:75:84:
                    fb:49:c5:f2:76:1e:d2:aa:46:c0:b3:94:62:fe:a2:
                    97:5e:1e:12:8e:77:60:1f:4a:78:b9:72:ee:b3:fb:
                    f2:3c:2d:31:f4:b7:ac:e0:6c:27:89:b3:57:e0:18:
                    ff:c0:c0:bb:a4:66:68:aa:77:28:a5:4c:63:c7:33:
                    27:23:54:1e:21:70:ec:dc:98:84:5a:4f:40:ba:83:
                    bb:c3:0c:a1:57:ff:72:9f:e6:71:81:08:9e:07:26:
                    7e:9e:cb:13:4a:9e:70:90:f1:27:e6:76:07:8c:be:
                    e5:2b:07:b6:c7:47:a3:59:8d:d1:08:e8:e3:1b:ef:
                    93:6b:6a:7c:9b:0f:07:a6:54:39:12:a0:32:51:c8:
                    45:f1:b3:fc:74:fe:28:33:28:34:d6:8c:6a:10:72:
                    7f:49:1a:85:9b:7b:5d:ff:b4:04:98:c7:f3:50:0c:
                    96:54:2c:2c:de:e9:c3:3e:81:3f:84:56:25:ea:43:
                    6d:06:32:57:20:5c:80:79:69:ec:03:ed:30:19:37:
                    d6:f8:fb:18:c6:e1:f4:db:8c:26:e6:14:c6:e6:b0:
                    38:b5:4b:09:8d:db:e9:59:b2:63:82:c7:fe:39:cf:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7A:FE:AA:5A:98:6D:2F:2D:0D:03:78:D5:D3:C6:B7:0A:8B:17:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc0b1545-3d15-488d-94f5-d68d40e3f602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.91.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d1:91:5b:2d:85:22:96:e6:d4:2f:ad:d5:10:09:76:5e:81:c7:
         ed:40:b4:56:a3:7c:2d:c9:37:45:81:46:42:bf:75:c8:c0:d5:
         b2:b8:5b:95:82:18:38:14:9a:e5:4a:9a:51:3e:17:c0:f5:19:
         76:5f:3c:18:da:b6:21:3d:7b:70:08:b9:cb:b8:67:00:0a:63:
         dc:68:8d:09:ec:d5:aa:eb:d8:84:6d:f0:f1:c3:d6:2a:45:b0:
         7d:ac:a2:f0:09:e2:d6:84:a7:03:d5:fe:5d:00:4c:cc:83:85:
         6b:84:27:ed:6e:c7:7a:9a:b9:6c:1b:62:49:1a:38:b1:c1:fd:
         77:4b:e8:78:20:fa:7c:70:1a:37:5a:49:1d:04:d0:81:a0:9c:
         ac:0a:7a:d7:e4:cf:26:ba:e9:99:38:f0:32:47:f6:af:9b:4f:
         e4:78:47:a4:6a:65:56:5f:db:59:81:3b:72:84:dd:3a:8e:82:
         ac:ed:79:70:03:28:12:90:d7:cc:c5:db:81:a7:bc:c3:7a:7d:
         e1:55:b6:0b:fe:51:e3:7f:ec:3c:a5:98:86:53:eb:87:ea:39:
         3c:e2:f6:82:5d:5e:a8:e2:60:87:9d:d7:57:c7:6c:2b:d9:32:
         1f:3f:ed:a8:d5:ee:18:f2:26:aa:5b:36:ed:5a:0c:08:2f:ed:
         ca:ae:44:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:12:16 2024 by rpki-client on console-ams.rpki-client.org