Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0083d184-fb3a-42e2-8b2b-f1bae2b01be2.roa
File:                     0083d184-fb3a-42e2-8b2b-f1bae2b01be2.roa (raw, json)
Hash identifier:          YlBvHcS98rTT7JeYEwv+N7L2mbTmkU27wfBlj6MAq/s=
Subject key identifier:   4D:F9:F5:43:B1:BC:47:FE:E4:40:47:3D:ED:5A:45:34:05:CB:B2:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3ED3A858BB9B27C280706A600036EEDF5A61CDFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0083d184-fb3a-42e2-8b2b-f1bae2b01be2.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.112.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d3:a8:58:bb:9b:27:c2:80:70:6a:60:00:36:ee:df:5a:61:cd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=e7ed35d6af9c11b34b23f56dc0da1c7982320c639050503ca50bde7c0f42ff56, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3c:a4:5c:28:de:15:e5:9c:a4:eb:77:7f:f0:
                    35:27:01:a0:e2:09:15:b6:c4:d3:f7:b6:83:69:d5:
                    86:c7:ab:f6:db:63:70:25:7e:8b:b8:1f:67:fe:32:
                    82:97:b7:59:c3:1a:49:6b:0e:d6:21:d9:25:48:ff:
                    12:ac:cb:1b:fd:ea:b4:6b:93:af:41:10:a2:57:d8:
                    d7:be:7f:5e:b0:5a:5d:07:5a:2e:65:a1:1f:70:a2:
                    fe:e5:bb:8b:44:e4:41:87:51:d8:a1:5c:3d:22:8b:
                    02:9e:ec:72:c7:74:c6:5b:37:02:20:f2:58:d5:73:
                    b3:5b:9b:30:ec:6f:88:b0:3d:68:fb:8b:1c:ed:db:
                    d6:16:a7:23:57:41:23:57:f8:c5:f8:d6:14:dd:ba:
                    5a:c9:e7:0f:81:b1:08:db:90:09:45:d2:05:1d:8e:
                    72:e3:7a:51:ed:6c:79:ab:09:ee:5b:2e:42:75:de:
                    04:94:cc:1e:d8:57:f5:71:1f:ac:95:9c:b9:a5:17:
                    52:8e:0f:ca:f5:5e:22:74:80:3d:8b:55:e6:27:68:
                    6d:c6:e5:ee:19:67:1d:73:ad:fa:95:d6:1c:ac:fe:
                    27:c5:a6:b5:10:83:b6:27:7d:cb:86:bd:31:c8:4f:
                    4d:f6:20:85:d3:55:7d:30:20:6b:36:f9:6e:95:21:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F9:F5:43:B1:BC:47:FE:E4:40:47:3D:ED:5A:45:34:05:CB:B2:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0083d184-fb3a-42e2-8b2b-f1bae2b01be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.112.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:8c:00:63:76:1a:4a:66:11:a4:a0:86:58:0a:bf:a7:c4:
         9b:ef:ad:e1:78:8f:a6:43:cd:42:d3:b5:e7:b1:e8:48:08:e2:
         7a:09:38:a6:dc:6f:81:4f:af:ae:fd:f5:2e:78:0f:fd:3c:96:
         a9:0f:4f:96:18:79:ef:b6:ef:34:27:0d:11:b1:5b:4e:42:ef:
         45:1d:ed:e9:58:7b:3d:a7:4d:91:f7:d5:6e:26:70:f0:11:49:
         19:f9:12:ec:5c:4e:6d:31:a2:a4:e1:ec:f1:db:42:55:b3:41:
         c9:c3:b0:ee:ef:54:e5:73:64:fe:17:06:ab:6a:ad:7d:62:85:
         d5:f7:96:82:ce:dc:59:a2:51:46:25:0b:df:28:9f:06:d7:7a:
         86:18:fc:85:ff:fb:5b:57:b4:b1:90:71:7d:19:99:38:5c:15:
         67:09:af:37:04:f4:32:89:ed:ef:9e:00:84:b7:36:96:e9:01:
         0d:10:af:1e:9b:59:da:e4:28:14:1c:a6:6e:af:ee:1d:5a:44:
         a1:62:9c:0f:c4:3e:c1:fa:a6:aa:1f:54:7b:2e:1c:ca:d0:b0:
         c6:62:7b:ee:bd:43:b3:1f:10:9f:40:a6:fb:67:83:dd:08:2b:
         fb:a4:9b:c7:8b:42:95:5e:ef:27:0a:96:d7:54:49:44:4f:a1:
         e2:81:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:02:25 2024 by rpki-client on console-fra.rpki-client.org