Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/209b530d-f6f2-4efe-b60d-47e3476f6a99.roa
File:                     209b530d-f6f2-4efe-b60d-47e3476f6a99.roa (raw, json)
Hash identifier:          a5FGeKJm3FlV0dEXxjB9TS6fqGAbQ5JgT+8dJGD5+V8=
Subject key identifier:   85:E0:B7:5F:70:33:76:33:4A:C9:1C:49:44:D3:20:43:07:32:9D:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FB290CC00DAE9B4720DB19E3A5E0DBEBD91F249
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/209b530d-f6f2-4efe-b60d-47e3476f6a99.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        40.163.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b2:90:cc:00:da:e9:b4:72:0d:b1:9e:3a:5e:0d:be:bd:91:f2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=650cc111df7e65f56b7ec4e40a3fa75360775e38d850bde029b1f70be1e28a27, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:32:8b:f9:a9:06:ab:0c:4c:bf:ab:ad:d5:5f:
                    fb:2f:1e:10:69:b9:a8:9f:01:b0:cf:24:3f:36:7c:
                    df:95:a4:b8:88:d1:37:97:7a:86:dc:83:90:ca:09:
                    45:d4:6c:c0:a5:af:ed:24:5f:c2:6d:ed:d9:63:80:
                    19:87:d1:18:74:ee:ce:2d:5e:52:d0:4a:0c:9d:4c:
                    88:a9:bd:a3:6e:26:f1:ef:a9:1a:ea:91:57:dc:42:
                    94:10:f8:8a:57:44:f7:11:e3:d8:19:d9:dd:e7:77:
                    82:70:82:72:be:1d:31:64:99:53:b1:44:68:67:90:
                    e1:fc:cf:fb:68:33:4f:f2:47:3d:cf:75:71:d8:70:
                    c0:aa:4f:1d:64:5d:44:56:5e:04:1e:16:04:fb:2c:
                    6a:b7:9d:26:54:23:c9:96:5d:2d:f7:fc:6b:b1:0f:
                    8e:7a:66:ab:f7:3d:19:94:9f:f4:ca:3d:57:c3:5b:
                    80:d9:5a:63:c7:3c:ba:44:08:7a:45:4c:93:b4:c2:
                    3b:39:52:8f:f7:61:3c:65:cd:6d:db:11:37:f2:dd:
                    2e:e2:62:a0:23:42:c5:0f:f9:d3:f7:1e:c4:b1:bc:
                    26:1a:9f:da:b4:50:2e:12:23:d3:14:80:26:af:4d:
                    7e:48:f9:34:19:8f:7e:6e:cc:28:8a:8b:a3:3b:cd:
                    7b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E0:B7:5F:70:33:76:33:4A:C9:1C:49:44:D3:20:43:07:32:9D:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/209b530d-f6f2-4efe-b60d-47e3476f6a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.163.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:1a:82:ea:bb:5b:d7:d8:8a:1e:6f:10:0c:a9:c0:f8:31:f0:
         45:5c:79:c2:4c:ab:63:11:ac:87:b1:56:64:bc:d3:ba:d8:ab:
         85:2e:ec:4a:32:4e:af:34:2b:f2:d6:71:a1:4c:84:90:99:f7:
         d7:1c:a2:02:63:b9:09:8a:a3:03:56:2f:2e:49:83:cf:d8:64:
         da:41:a3:88:79:d5:dd:f4:b3:47:63:df:c5:24:db:f7:56:d4:
         f8:c6:06:2d:81:56:81:67:3f:22:a8:13:9d:49:01:05:d4:c7:
         e2:48:ce:f1:35:95:d8:55:26:42:e3:ff:fc:e7:a8:fb:15:8f:
         4f:ff:85:5a:df:e8:e8:b2:b4:14:f6:1d:7a:ac:2d:0c:6d:86:
         47:2c:8f:2a:88:7b:c3:b4:1f:e1:b1:12:1d:a8:f2:92:6e:0e:
         74:a1:39:a6:c6:60:32:f6:c0:ff:76:82:82:a5:ac:5f:15:b3:
         50:8a:7a:24:bb:4a:3f:47:9f:45:1f:e8:fd:63:25:83:48:d4:
         bf:ea:2f:99:1a:1f:51:cf:5e:74:fe:66:06:dc:3a:d5:a6:bd:
         2b:a4:ac:6e:12:05:0e:f7:01:22:d1:0d:02:76:26:06:5e:96:
         90:ab:e0:d3:d4:b8:09:d5:59:36:33:69:08:d9:94:fa:d7:42:
         7e:0e:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:22 2024 by rpki-client on console-ams.rpki-client.org