Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c3c089c-ee8c-4cdd-843e-b25a7018b55d.roa
File:                     0c3c089c-ee8c-4cdd-843e-b25a7018b55d.roa (raw, json)
Hash identifier:          SjaATK3wI4ZwvL0RyQWQqffDH6qu/r/Xndu9NeajxKw=
Subject key identifier:   56:53:C4:6E:93:6D:35:EE:33:41:C2:7B:D4:0F:82:71:28:61:4D:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       71329E04AA1532B161F177E9A78489C417D6DEB0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c3c089c-ee8c-4cdd-843e-b25a7018b55d.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        161.178.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:32:9e:04:aa:15:32:b1:61:f1:77:e9:a7:84:89:c4:17:d6:de:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=90353331886c012cddb3ef7707ca1ed959f05e031e245a6f43b9a02bb5d1961f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5b:c2:6a:65:f2:6c:26:05:65:38:95:cc:d7:
                    40:dc:c3:37:fe:d8:a9:da:91:6f:6d:0c:05:0e:7f:
                    1b:18:ea:0b:75:cc:18:24:08:e4:42:50:d2:95:db:
                    0a:e3:77:7f:0e:96:b1:0e:32:5b:f5:cb:cf:30:5b:
                    ad:3c:a0:86:59:bc:2a:2a:72:cc:57:df:b1:b7:04:
                    42:1c:68:12:f9:7d:10:a3:39:da:5b:e6:eb:01:76:
                    7e:dd:18:c7:8f:8e:65:fe:98:f2:9e:58:a3:bf:19:
                    b1:9f:33:87:9c:f4:d0:88:a6:92:74:63:c1:8d:f0:
                    44:79:40:ef:1b:e3:78:df:04:48:72:16:59:a0:72:
                    d8:eb:89:1f:17:5e:c3:8e:fb:56:fe:c3:a5:76:f6:
                    01:0d:4d:d7:e7:ab:7a:6e:36:d6:17:51:de:16:09:
                    44:87:36:6a:a8:e8:34:12:22:df:f7:5b:9b:4f:ef:
                    ad:08:59:5d:c0:0c:ad:f2:80:3a:40:b3:29:fa:96:
                    64:da:21:62:6a:ad:2d:7b:5a:d1:ed:78:43:7b:61:
                    91:e1:7c:72:1d:f3:80:28:a2:84:6f:eb:c0:12:2b:
                    0a:b4:0a:90:74:e6:f5:6a:dd:d4:b8:2f:07:7f:2c:
                    89:a9:1b:6c:7b:22:80:65:1e:34:13:b1:f2:29:4c:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:53:C4:6E:93:6D:35:EE:33:41:C2:7B:D4:0F:82:71:28:61:4D:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c3c089c-ee8c-4cdd-843e-b25a7018b55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:f8:e4:1e:f9:24:2d:bf:ad:a0:e8:29:7a:d1:6d:e5:d2:f9:
         9f:51:f6:c1:71:b4:f8:c2:a4:53:d6:d2:fb:8b:6c:00:9d:43:
         cc:f5:a1:09:b4:de:b1:55:a8:03:62:7b:5e:cd:c7:b4:51:c8:
         cb:d7:fd:6b:20:0e:49:c6:43:45:5c:f1:ad:58:6e:d7:3e:6c:
         89:3d:f1:29:ae:7b:a2:04:4b:e5:dc:d7:51:d0:7d:a6:6a:f2:
         9e:3c:03:f3:42:58:08:9d:39:50:e3:0a:c4:86:71:66:78:7c:
         29:00:45:fd:50:0a:d0:6c:b6:73:f8:f5:a3:ff:26:e1:bf:0a:
         9f:22:59:32:df:dc:af:6e:c2:56:72:13:88:05:e0:2d:4b:a7:
         d2:99:57:6f:f0:cc:52:e9:d6:16:7d:f3:d0:b5:26:46:17:7b:
         06:f1:99:51:b1:36:e0:3b:44:5c:42:a5:c6:14:b1:14:22:e4:
         9a:da:c9:4a:a1:3b:9d:9c:5a:d5:41:28:5c:42:6d:7f:94:9d:
         f2:b3:05:02:d7:d8:03:8b:83:74:67:13:7a:3a:d9:a3:b5:1d:
         7c:2c:55:dd:28:dc:82:61:bb:70:0f:5c:8a:2a:59:45:9c:58:
         4b:1f:c0:11:85:30:4a:6e:96:bb:4d:70:fd:23:e9:bb:a8:a6:
         ee:2c:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:52 2024 by rpki-client on console-fra.rpki-client.org