Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04e57552-1dfb-41ee-9dd2-f14d4faacbb3.roa
File:                     04e57552-1dfb-41ee-9dd2-f14d4faacbb3.roa (raw, json)
Hash identifier:          +4H+ckITOmSlhFFsdzdBZOYmQhaXeNwhalKjMTfxr1Y=
Subject key identifier:   9F:9B:28:C0:F5:06:14:C6:81:95:38:93:00:56:14:93:5B:72:36:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46A4C6E72FDEAB97625F0884669C2FE6FA0AFF8D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04e57552-1dfb-41ee-9dd2-f14d4faacbb3.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.138.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a4:c6:e7:2f:de:ab:97:62:5f:08:84:66:9c:2f:e6:fa:0a:ff:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=07eb4e1d1d5675b610fd3973034f18d3290cec340b8de1e53b07d11bb0547b3f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:4f:be:0f:e4:68:4f:c8:d3:d3:b7:85:0b:
                    43:df:5b:70:ff:84:87:0f:b8:88:c6:6d:6e:cd:1e:
                    0d:e2:2a:0b:7f:ab:20:38:f5:50:3a:19:e6:9d:d9:
                    8d:6a:85:a2:3e:47:c6:7f:af:79:08:dd:66:77:89:
                    56:48:85:8a:c6:7b:d4:a3:fd:03:22:a2:40:d4:09:
                    4c:05:95:24:7e:02:fb:61:35:53:17:93:22:ea:f3:
                    9b:cf:c4:e2:ac:7b:a1:c3:b4:17:cf:66:24:ee:71:
                    29:b9:e9:4e:72:d6:43:5c:f5:e0:5e:9c:cd:08:da:
                    be:a2:99:92:94:bb:4e:61:70:b8:47:be:35:7b:0a:
                    0d:36:15:d2:c4:f0:24:e8:4f:49:33:66:d1:8f:be:
                    84:95:3f:e0:40:e2:54:bb:a6:6f:ce:f3:e1:c0:11:
                    47:a8:75:2a:d7:2b:82:22:2e:87:22:0f:6e:d4:09:
                    7f:fb:06:ca:9e:0d:34:1d:68:3f:b9:e7:af:10:e1:
                    c7:39:45:e0:b7:16:4d:5f:aa:a7:ba:7e:49:81:9c:
                    27:c0:3d:02:e5:b7:be:74:81:bf:1c:c6:0f:40:d2:
                    75:d9:46:06:a8:42:4f:e8:bf:8c:b8:13:21:48:70:
                    c0:1c:e1:47:78:84:df:d5:1f:37:2b:34:02:88:93:
                    e6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9B:28:C0:F5:06:14:C6:81:95:38:93:00:56:14:93:5B:72:36:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04e57552-1dfb-41ee-9dd2-f14d4faacbb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:9d:b0:ea:fb:6f:98:dd:2b:89:e2:6c:fc:eb:55:ec:59:
         6e:51:2a:fb:81:08:62:b8:6d:bf:dd:fc:8a:0f:28:6c:35:a3:
         71:c8:00:2b:ee:48:41:51:a8:7e:bf:4c:69:d0:f1:9b:57:16:
         1c:08:f6:e7:36:f6:f0:b9:db:a0:a2:79:63:88:04:e8:03:24:
         4b:cd:f6:19:95:e0:b4:2d:0d:9b:fa:c7:d1:a3:5a:e5:e5:d6:
         c6:15:7b:24:f6:28:ac:26:3c:35:38:93:0a:5f:4d:b6:63:64:
         21:02:39:d3:18:b1:6a:9a:85:15:5a:c7:d3:c3:b6:eb:98:3d:
         f3:cc:f2:95:98:72:06:e8:56:f3:7f:3c:e6:bb:3c:3b:29:fe:
         ed:a6:18:0a:ff:47:50:9b:f4:da:41:e8:ae:ed:4b:f6:b1:43:
         82:4a:be:b1:36:28:68:74:a6:97:05:9e:d6:75:4b:a7:74:bb:
         44:19:2f:30:15:c1:7a:84:02:4b:44:e3:d8:e1:f0:7d:15:0a:
         22:4e:37:bc:c2:4d:72:a9:aa:b0:e0:7c:7e:cc:eb:8f:9e:e9:
         c6:a7:8a:df:6e:c4:c5:6d:ab:bc:08:02:a9:c5:7b:e4:b5:62:
         f1:8a:0c:49:4f:8c:52:e9:15:2c:bf:80:bf:9b:4a:e9:da:10:
         06:66:f2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:30:59 2024 by rpki-client on console-fra.rpki-client.org