Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17d264a9-6eec-4bc3-acc6-d624122a02d7.roa
File:                     17d264a9-6eec-4bc3-acc6-d624122a02d7.roa (raw, json)
Hash identifier:          8WsCHFi4qX/01W5IlIruCNYnS4iH0Fi3eFaTv7J7NiE=
Subject key identifier:   9A:9B:D3:74:B2:58:BD:FF:84:AF:F4:2A:C6:D3:7E:01:14:81:50:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15645F910FF0E7320315FB32CB1FE9EEE6B3903F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17d264a9-6eec-4bc3-acc6-d624122a02d7.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        130.186.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:64:5f:91:0f:f0:e7:32:03:15:fb:32:cb:1f:e9:ee:e6:b3:90:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=342c75fac1c996c84938277b8a54d7685492653afe594ff61a68af204ae7aea1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:50:6a:b2:28:c2:f3:9e:99:20:14:8f:c6:
                    02:b1:04:bc:36:af:d5:ac:e7:11:55:b7:8f:2e:27:
                    a3:e3:9c:f4:cf:71:a0:48:47:f4:17:74:82:55:7b:
                    83:7c:20:ba:50:3f:8c:e9:45:6e:27:da:a6:51:92:
                    eb:25:eb:e0:43:6f:f9:47:d0:a6:e7:09:99:19:9a:
                    81:4b:c0:22:0b:19:7e:51:c8:2a:b7:26:47:e6:1b:
                    c5:11:4d:dc:5f:e2:cc:1b:01:23:66:87:27:9e:cf:
                    21:ce:d7:21:13:9c:44:8a:77:12:09:08:b1:74:8e:
                    e0:e0:f5:68:ec:c9:27:9f:9b:f1:7e:e4:18:bd:49:
                    35:3b:6f:a5:63:28:91:a8:cb:a3:b0:e1:43:02:8a:
                    e6:dd:4d:a3:07:3e:2b:d7:ad:cf:75:60:ca:0f:7e:
                    28:7f:93:54:f7:99:64:f4:9e:d5:64:91:88:9e:26:
                    b4:bd:28:e4:dc:53:77:01:e2:de:9e:7a:9a:45:59:
                    1a:3b:e9:ba:54:3c:29:fc:85:6b:6f:13:8c:86:8c:
                    3e:ff:88:20:09:bd:3e:d7:6b:b7:7f:31:0a:9c:61:
                    6c:1e:dc:e8:f2:b0:0e:e0:13:df:8d:3e:27:3c:1a:
                    c5:4a:1d:77:c9:da:60:03:ed:52:f0:dc:0d:ee:3b:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9B:D3:74:B2:58:BD:FF:84:AF:F4:2A:C6:D3:7E:01:14:81:50:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17d264a9-6eec-4bc3-acc6-d624122a02d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.186.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d9:56:19:9f:11:50:8f:8e:25:6c:10:85:1d:a8:7f:6e:b8:91:
         59:1a:bb:a3:14:12:0c:05:ed:4a:e7:b9:fe:2c:a5:64:63:2b:
         24:3a:74:58:c3:bd:42:b5:e7:3d:38:b3:52:98:15:87:e9:aa:
         88:9b:31:b0:4d:7c:6c:e5:73:4e:c4:51:15:d3:47:d0:4b:16:
         0c:7b:f3:4d:d3:d4:13:ff:70:ec:e9:cb:52:42:00:98:8a:3e:
         7e:4f:d4:3e:6e:b8:35:bb:e4:83:ac:46:ec:a8:af:c6:9d:39:
         b3:62:04:b0:33:c9:bc:f9:79:b4:34:88:ad:1b:dd:ea:79:e9:
         83:43:30:36:23:a4:f2:da:72:a3:de:f0:60:60:a0:c5:4e:2b:
         a8:d4:f8:c9:07:37:e6:69:31:d4:80:ef:00:2f:64:2b:e4:33:
         ac:45:96:47:6c:3d:83:e2:81:e8:5e:46:11:41:bc:02:0b:5b:
         e9:bf:6a:72:0e:e1:6a:32:89:9b:24:b2:23:f0:ae:5e:32:16:
         73:f0:b6:95:8d:c0:32:3b:ef:0e:a6:24:16:f7:52:a6:6e:4d:
         58:82:87:e0:85:9d:25:2d:75:2f:da:72:3f:2e:52:ed:1e:c6:
         f1:ff:6d:f5:6f:14:90:0c:b2:1f:4e:51:30:fe:12:04:39:90:
         5a:65:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:06 2024 by rpki-client on console-ams.rpki-client.org