Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ef99c30-7cd7-4c0e-994b-6d5ab5cdecd7.roa
File:                     1ef99c30-7cd7-4c0e-994b-6d5ab5cdecd7.roa (raw, json)
Hash identifier:          WAsHNIOx/NIdGNyMQJkkYecgx/SyCkC0dOHjKC40lVw=
Subject key identifier:   AD:80:54:14:59:33:68:A4:A1:ED:B1:90:95:D7:E0:60:C6:C2:B3:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A63BF40FFE379E7A3E767564C962803A59ABCCB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ef99c30-7cd7-4c0e-994b-6d5ab5cdecd7.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        75.22.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:63:bf:40:ff:e3:79:e7:a3:e7:67:56:4c:96:28:03:a5:9a:bc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=698c08a81ca9a584dc4b97ef760416e64a41305655a5fc48904a590a5b5df769, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:7a:ed:f9:d1:15:dd:28:46:09:91:60:66:
                    1c:ef:8c:33:f7:ab:b4:a9:0f:10:59:92:0d:6d:32:
                    23:0c:29:53:15:b4:fc:c9:d3:1e:a9:c7:a3:cd:9f:
                    a6:54:b5:f7:5d:15:a9:59:07:da:ff:e7:4d:66:37:
                    ab:32:66:7f:4b:b5:b6:56:73:00:63:30:9b:c4:cd:
                    c4:cf:99:99:0a:7a:bf:50:05:f5:c6:f1:fe:61:f3:
                    e6:a2:d5:87:b9:e6:cd:1b:37:a3:d4:4b:8d:89:3a:
                    69:11:9f:ba:27:81:81:9c:48:aa:8c:8f:b5:98:4f:
                    13:44:f3:cf:f1:48:cc:36:38:a8:8c:f2:21:62:2c:
                    f3:20:61:2e:8c:fc:10:68:d2:e7:f4:ce:2c:94:fa:
                    bf:28:bc:6a:ae:53:d6:1c:95:73:1d:03:2a:f0:5d:
                    83:88:d6:e2:d0:1a:59:c2:26:4e:54:d2:4a:ec:c2:
                    ea:da:bd:60:2a:a5:4a:79:4a:cf:75:6e:fd:ef:a3:
                    10:35:4d:4e:ae:d6:83:88:75:da:24:cd:e2:8e:5f:
                    8f:98:52:d4:5d:09:9e:fb:16:97:31:d4:b9:f3:b5:
                    8e:ae:82:99:5e:16:7e:24:69:25:b0:4b:6f:53:3f:
                    d1:fa:67:6b:5a:70:17:de:6a:23:1a:7c:7e:aa:7c:
                    f2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:80:54:14:59:33:68:A4:A1:ED:B1:90:95:D7:E0:60:C6:C2:B3:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ef99c30-7cd7-4c0e-994b-6d5ab5cdecd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.22.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:02:3c:9f:24:83:70:cb:e2:9d:d7:70:e6:2e:14:46:2d:13:
         83:fd:d9:9e:2f:ff:99:86:f1:8f:73:93:63:5b:b9:53:1d:7b:
         c5:1c:dc:ca:05:dd:22:d0:36:88:2e:f9:cd:11:c8:7e:0e:47:
         07:37:3b:bc:4b:fd:fe:c1:dd:3f:3b:b1:87:97:51:0f:19:f2:
         e4:67:eb:2f:53:79:36:aa:a9:6f:43:ff:74:fb:fa:5d:52:87:
         92:86:1f:77:23:aa:67:cd:55:b1:e3:05:88:7b:42:5c:40:d4:
         0e:89:a9:f5:b3:b6:09:8b:f4:d1:7b:6f:cd:cd:08:ca:53:03:
         f5:fe:8f:44:80:20:da:a4:26:03:92:32:6f:2c:a9:1c:de:c9:
         74:29:81:40:cb:05:58:bf:08:59:d8:08:ce:12:38:fe:c3:4d:
         c3:3d:42:a5:9e:37:74:93:a3:8d:69:be:e6:2c:d2:d4:c6:65:
         f6:fc:e7:c9:23:35:eb:2f:7d:d4:a5:c1:43:61:f2:99:b2:a2:
         f1:d8:d4:15:f8:11:95:ab:6c:97:22:94:26:85:5c:f3:15:ff:
         3a:e1:d4:af:85:30:92:18:4a:26:29:96:45:38:73:58:4c:dd:
         a2:3a:7d:7b:29:78:c1:25:de:b7:04:31:84:eb:33:60:71:e6:
         da:4b:02:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 17:25:45 2023 by rpki-client on console-fra.rpki-client.org