Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa
File:                     2309db7a-9533-458b-bc2b-77dd1708ae8a.roa (raw, json)
Hash identifier:          vI/SdFLCm8fBwKPkmvmuQMBJYTN0xUanxq08eXh7pco=
Subject key identifier:   E0:36:56:BB:4D:D5:89:DA:3A:46:4F:9A:1F:82:8E:D0:16:E6:35:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FA0A6EA3441ACE3F3EE95A226812000A63A6072
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a0:a6:ea:34:41:ac:e3:f3:ee:95:a2:26:81:20:00:a6:3a:60:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=70f3158cc7d5e58b1ed2a63b92a934f7b0a93f87d003979a6ddcb2efa3006a99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:73:70:44:b4:cf:b7:3b:1b:ed:6e:2f:11:
                    28:ab:cb:75:ce:75:8c:63:2f:4c:91:c9:f3:3a:43:
                    42:69:ca:3a:39:b9:23:f0:1a:2d:7e:b7:39:99:64:
                    39:92:db:32:53:58:94:40:3c:a3:28:5c:77:77:d7:
                    7f:54:44:40:80:ed:43:29:6c:9c:d9:82:d5:4b:5a:
                    e6:61:23:18:da:43:02:37:d1:90:68:14:37:6b:be:
                    bb:4d:84:a0:f2:52:fb:22:d7:94:23:6e:ff:c0:0d:
                    df:43:48:81:59:a7:20:93:18:11:60:33:90:eb:26:
                    9f:46:34:46:ec:cb:cc:44:78:5f:8b:90:03:17:df:
                    ec:8d:48:30:c8:cd:5d:a7:31:37:2c:f8:fb:dc:fc:
                    ce:cb:c5:99:43:b5:99:08:21:cc:4f:0a:c0:5e:81:
                    f4:f3:ef:89:75:0d:d5:87:8b:56:f0:ae:41:b9:99:
                    39:63:0f:37:41:0c:15:d0:d3:d1:00:4e:58:e9:ad:
                    a8:23:67:30:b3:e0:4c:61:5b:26:b2:48:b3:b0:d7:
                    01:fd:f4:c6:11:d5:5f:de:f6:ff:24:e0:03:22:be:
                    6e:91:70:6d:5e:9a:9c:64:59:b0:3a:d8:97:b4:7c:
                    72:7b:eb:1c:1f:67:1f:d2:56:c1:e2:d0:87:74:79:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:56:BB:4D:D5:89:DA:3A:46:4F:9A:1F:82:8E:D0:16:E6:35:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:08:3a:18:4f:5f:4a:e5:fe:1e:94:9b:5f:45:c2:1b:87:00:
         7a:21:8b:25:70:e5:f2:28:48:4c:93:dd:16:6d:df:35:54:05:
         ee:42:a4:dd:c1:87:50:6b:4e:e4:83:ef:5c:41:0e:71:32:ca:
         1f:23:a3:2e:a0:53:b9:65:d4:97:5e:fa:cd:d4:87:76:40:07:
         b9:ce:3d:df:36:94:12:17:45:f6:73:89:23:4e:29:10:5b:da:
         9c:f9:cf:12:32:2b:01:bd:38:f7:07:33:2f:81:1d:f5:03:1d:
         5d:5b:f6:f9:45:6e:a6:3c:42:fe:bb:06:09:40:d7:45:ad:bf:
         35:b6:44:cb:b1:a5:42:b2:f7:23:ec:f5:fc:39:cb:6b:ca:3e:
         4b:01:3f:a0:d3:ec:ab:6f:dc:1d:e9:90:c2:38:13:9f:bb:3d:
         c5:5b:9c:9b:8e:62:ac:0e:30:bf:0c:ae:c2:04:c1:93:5a:a5:
         0b:88:a9:71:1b:90:62:f5:7b:0c:80:26:ca:24:51:7e:fc:3c:
         3c:35:9d:c3:28:71:26:83:ad:a2:66:9d:4b:3b:9f:89:35:c9:
         af:f6:49:6e:5a:39:25:6e:27:e0:43:6e:77:96:99:d7:c7:e6:
         9f:03:27:aa:4e:26:d3:14:3c:aa:40:02:6c:c5:1b:a9:9f:ba:
         b0:e2:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:15 2024 by rpki-client on console-fra.rpki-client.org