Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0536b0c8-c99f-4ba4-814b-20b42419ce99.roa
File:                     0536b0c8-c99f-4ba4-814b-20b42419ce99.roa (raw, json)
Hash identifier:          VxNKZ+44VNEYE4hP54aKUQFLXb25GKDYPqw2l+CicDg=
Subject key identifier:   1D:BF:75:38:96:D0:F9:7A:24:C2:2A:D6:7A:BD:DD:3A:42:57:67:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5BE4BE8347545479D0AE39AA3A9F935C050B5DD6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0536b0c8-c99f-4ba4-814b-20b42419ce99.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        147.106.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e4:be:83:47:54:54:79:d0:ae:39:aa:3a:9f:93:5c:05:0b:5d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=0e36c223fbcb6642762d039947f8b5593cfb626f979477f4d53a59b9593fa5af, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:8d:37:ca:09:ae:2b:f2:b8:5a:f6:cb:a2:
                    e0:ba:05:22:76:a1:f2:41:d5:63:b2:99:f5:10:c8:
                    e5:ad:01:f1:de:18:d3:20:2a:b7:6a:a3:a9:ed:bc:
                    e1:f3:1b:ba:34:b7:fa:61:b9:d1:a6:63:2b:71:76:
                    b3:84:cb:e5:55:38:b3:72:80:52:25:d4:d6:c6:59:
                    29:45:9b:19:96:29:ae:67:47:a6:ff:a4:9b:4a:8b:
                    c6:ac:8c:ad:c6:50:5f:2c:13:bc:78:c0:8b:bd:ce:
                    75:9b:2d:60:c8:30:81:39:5f:a2:c2:d4:62:a5:81:
                    0d:c5:e3:47:02:fc:2b:6e:d3:c8:19:3a:2f:fd:66:
                    3b:67:20:aa:87:7a:a7:9e:a7:a8:7f:a5:8a:38:4d:
                    53:20:f5:4f:24:56:01:8d:96:79:99:65:22:f1:6a:
                    90:3c:f2:63:15:94:18:79:79:ce:36:83:b7:0b:32:
                    17:b5:cd:7f:bc:ee:29:bd:3b:7d:89:99:c8:53:f8:
                    b7:31:23:cd:3a:4d:f1:c2:be:b8:b5:64:b6:f5:fa:
                    9f:8e:72:59:14:3e:23:f3:8d:a6:a6:5a:aa:3a:cd:
                    a4:4f:4b:83:c8:08:36:3d:fa:15:73:d4:62:e5:b3:
                    53:69:02:d1:ab:da:81:76:41:3c:0c:aa:cb:45:c4:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BF:75:38:96:D0:F9:7A:24:C2:2A:D6:7A:BD:DD:3A:42:57:67:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0536b0c8-c99f-4ba4-814b-20b42419ce99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.106.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:db:8e:51:4f:f4:9b:dd:d7:7f:ae:ed:02:97:ba:52:02:f0:
         58:34:47:00:b5:f3:16:5c:72:7a:ff:ac:24:cd:77:46:b0:e6:
         00:8e:8c:c0:10:a5:e5:e0:06:7f:a8:46:3a:f0:2c:64:f8:cf:
         8c:3b:ba:3d:52:ad:ef:7d:45:56:be:10:99:c2:e3:36:68:4c:
         47:0a:ad:a4:00:8f:1c:6f:8f:dc:1a:5e:1e:1f:97:47:5b:a3:
         18:fa:ad:e7:00:31:fd:1d:40:e7:29:58:e7:d6:69:2f:cb:1f:
         08:da:29:2a:cb:a1:c4:d7:7b:09:97:b4:28:8a:6b:87:ae:5f:
         21:24:66:00:ca:3d:36:21:d5:d7:4c:1c:91:f9:5e:e5:9a:c4:
         3f:25:1d:f9:47:90:ef:9d:f0:99:66:28:97:fa:69:4b:2d:33:
         5c:7f:a0:da:64:51:33:b3:df:7a:5d:82:44:82:22:6c:21:3a:
         c2:06:89:08:9c:e1:27:69:7b:d8:e6:10:47:3a:ae:d8:8b:4c:
         3f:8c:18:8c:f5:d9:1f:db:52:1c:a9:d0:b2:af:c1:4e:5a:dd:
         54:06:69:1e:1f:b6:27:22:b1:7f:e4:da:4d:e0:75:6a:9e:a0:
         a4:8c:fd:09:66:97:77:fd:0b:97:ac:b0:e0:b2:6a:f8:4a:e9:
         63:dd:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:19:17 2024 by rpki-client on console-fra.rpki-client.org