Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b8b72e4-99a7-4b3c-b295-3c0c09b1c378.roa
File:                     0b8b72e4-99a7-4b3c-b295-3c0c09b1c378.roa (raw, json)
Hash identifier:          1u0ZdUcu+ybP0vgrYAi2s7Ymk4Nd97AC0KlU8KqKOfA=
Subject key identifier:   71:AF:99:E0:B3:C7:A3:E5:87:C2:0E:18:99:F6:96:96:D3:1E:95:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B5CABAA7F83789A505B81B2DDCFFBBF23CFD8D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b8b72e4-99a7-4b3c-b295-3c0c09b1c378.roa
Signing time:             Sat 27 Apr 2024 00:00:00 +0000
ROA not before:           Sat 27 Apr 2024 00:00:00 +0000
ROA not after:            Sat 01 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        93.75.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5c:ab:aa:7f:83:78:9a:50:5b:81:b2:dd:cf:fb:bf:23:cf:d8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:00:00 2024 GMT
            Not After : Jun  1 23:59:59 2024 GMT
        Subject: serialNumber=ffbc373aa86dcd1faee05565735bbbc77b8365fc48e811b7f58a347e9e2acdc4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:92:54:53:16:4c:dd:92:02:6c:7c:e6:b9:
                    d0:f9:49:28:7b:35:4f:ed:3f:bd:12:85:b2:18:f0:
                    3b:6b:4e:84:fd:a7:1a:55:3c:2e:46:a8:08:61:42:
                    13:ca:28:61:f3:ca:65:d6:e0:e3:53:89:e8:e6:de:
                    4f:75:a7:56:b8:18:6c:de:2f:da:f7:14:bd:94:d9:
                    9f:db:88:ee:7a:67:99:de:c1:d1:3d:15:8d:b8:94:
                    a8:8e:df:29:e1:37:c7:f4:33:e7:92:1a:d3:5f:18:
                    48:03:9b:c0:de:3c:b2:cd:47:ae:a1:6a:c7:0f:ac:
                    1a:1e:d1:6e:3d:ee:95:98:4a:86:68:a0:ee:8f:81:
                    88:43:e8:40:8d:ee:fc:70:42:49:2a:49:ba:d1:b8:
                    2c:6b:02:96:9e:67:a8:5e:37:78:fb:d8:c7:17:76:
                    48:2a:38:2d:24:5f:67:73:52:5a:46:cf:cf:9b:2e:
                    20:54:3c:d0:e2:ec:ca:39:61:10:f5:b3:ce:72:f1:
                    78:8c:e7:8d:48:b8:ed:f0:1f:c3:c2:e7:6b:db:d8:
                    cf:cd:22:9f:f5:df:e0:71:b3:9b:64:18:12:05:5f:
                    4d:de:3a:1b:9a:1c:f2:3c:7f:2b:a1:a6:84:75:ed:
                    f2:ad:e7:60:a9:61:ff:27:80:fd:7e:f8:02:63:e6:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AF:99:E0:B3:C7:A3:E5:87:C2:0E:18:99:F6:96:96:D3:1E:95:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b8b72e4-99a7-4b3c-b295-3c0c09b1c378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:a3:f1:92:e8:5b:a2:34:44:b8:3c:ab:22:21:16:14:47:
         62:34:39:56:3a:1f:ec:f2:80:9b:3d:b0:9e:e7:ba:58:95:b1:
         aa:83:4f:85:e6:bd:1c:cb:a6:22:cf:91:7c:a1:c1:0b:b2:65:
         18:ef:84:ca:28:d6:fb:92:6b:e3:ff:2a:9e:e0:91:a7:32:08:
         2c:85:a1:18:9f:7d:42:dd:fd:78:86:9d:4f:2b:87:2f:29:66:
         82:71:c4:b2:22:43:c2:c2:5f:10:45:68:af:53:29:f4:11:a5:
         72:9f:bd:9f:71:ac:ef:1c:fb:61:07:e8:60:48:9a:e8:fd:f5:
         a9:30:9d:40:b2:30:c3:e2:a3:1e:f7:b3:df:a6:42:b5:64:29:
         b1:ae:dc:db:13:47:af:a4:ba:df:68:03:4a:6e:18:a1:e0:b8:
         e7:37:fc:e6:6a:4c:ad:ae:72:73:e5:02:c1:a8:68:55:24:5c:
         e7:6e:f3:5a:b6:fa:e9:02:ff:14:f8:45:75:25:c2:9f:3b:94:
         18:f0:99:74:e2:4e:f4:54:0e:b6:07:8d:d5:1e:2c:20:7f:07:
         57:09:cf:27:74:2f:32:42:cf:76:ca:90:f4:a9:c9:79:8b:7c:
         66:1c:ea:a3:1c:64:ed:b8:b6:2a:ad:a9:99:df:6f:64:ec:9a:
         38:3f:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:51 2024 by rpki-client on console-fra.rpki-client.org