Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541c74c-5ba6-4a47-8a0a-55ac8feb33c3.roa
File:                     0541c74c-5ba6-4a47-8a0a-55ac8feb33c3.roa (raw, json)
Hash identifier:          xymLTkfjCyAPDQusCmol2tlfDf79EwqhbmJTv8hbssE=
Subject key identifier:   64:8D:B7:3B:DC:B5:2B:30:15:99:61:72:F2:6C:44:FE:7B:3B:73:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05D64714857B5E81F0BE4D577E6AD33E87E6B633
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541c74c-5ba6-4a47-8a0a-55ac8feb33c3.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d6:47:14:85:7b:5e:81:f0:be:4d:57:7e:6a:d3:3e:87:e6:b6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=da9f83a6aa0fcf3511b6acd75d67b252d43ac77340f0b6a238da5bd9828f3c8c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:06:d6:3b:73:56:94:68:66:e8:95:e3:a1:
                    c0:58:52:2e:b4:c2:8a:69:13:1d:85:53:81:19:56:
                    62:2d:96:95:35:cb:ec:62:bd:f2:29:bd:1d:0f:e3:
                    a2:b7:57:80:81:39:e7:45:fc:c6:8b:90:09:c1:60:
                    47:67:48:b2:42:e8:0b:e9:3a:51:fd:ef:eb:18:4d:
                    2c:5c:8b:10:ac:37:57:4e:0c:b0:c1:cc:60:38:9b:
                    5c:9a:97:45:8e:b9:c3:9b:c7:3d:7f:29:74:b4:81:
                    82:93:f3:69:b7:a4:35:f3:19:24:cb:f4:5c:fc:2b:
                    f2:a3:16:4e:08:9c:c2:a2:62:91:f0:a4:9d:e1:0c:
                    e0:23:7d:58:01:66:89:8c:24:82:82:53:48:c5:81:
                    d6:7d:e3:a7:4e:a3:81:eb:08:0c:59:1f:d5:a5:b2:
                    64:a0:ab:65:d7:b3:d1:e2:91:cb:36:2f:94:5b:8f:
                    65:06:6c:61:72:07:cd:c8:8c:c6:62:c4:e0:bc:1d:
                    97:8d:79:95:bb:34:80:49:50:47:8a:f5:bf:a1:4b:
                    eb:49:6f:5e:e5:60:65:b7:b0:8a:6e:39:71:d6:54:
                    4f:b9:3a:35:74:32:44:bb:63:f8:db:7e:db:a0:b7:
                    45:51:5e:7a:bc:20:0a:c5:23:84:c6:40:b6:4b:49:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8D:B7:3B:DC:B5:2B:30:15:99:61:72:F2:6C:44:FE:7B:3B:73:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541c74c-5ba6-4a47-8a0a-55ac8feb33c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:be:67:99:ce:e6:fc:14:12:12:54:b6:87:36:ca:c3:1f:
         ab:f8:55:4a:d7:d5:56:b7:5c:f8:43:ec:e1:26:9f:3b:0b:99:
         4c:4a:01:26:75:2b:25:d9:0c:d8:67:0e:43:f2:94:13:e8:2b:
         e2:4f:41:ea:b8:16:6f:3c:b1:f9:97:28:f8:b8:3c:7a:e5:b0:
         71:ef:66:58:25:86:00:01:44:f5:2c:9f:cc:3d:87:67:d4:08:
         33:41:b4:44:7f:b5:f0:fd:a6:6e:d9:f6:d8:df:7a:68:12:a1:
         69:48:a0:82:23:af:c5:b9:db:b7:9e:a0:7a:a8:29:42:f1:e3:
         1f:58:8f:b0:4f:cc:8e:99:7b:2d:1a:6b:05:1d:9c:87:93:7b:
         c2:55:ed:d8:48:0c:d6:b6:ed:da:cf:c4:69:a1:8d:a4:6d:f2:
         78:76:05:46:09:2c:41:ec:a3:5a:ce:7b:85:93:8d:2d:23:44:
         3a:61:4a:07:6a:f5:61:52:ad:75:cc:92:0a:92:b6:dd:f7:11:
         b9:89:60:9f:d4:49:35:70:89:62:04:b2:1c:50:0d:21:77:01:
         0f:47:aa:da:a2:02:30:8e:4d:13:e6:16:ef:c7:03:97:46:16:
         1a:75:18:a0:44:ea:f0:a8:80:31:dc:c8:ce:ff:87:c2:ab:ca:
         a8:04:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:35:27 2024 by rpki-client on console-ams.rpki-client.org