Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315cda05-f16d-43f1-83d5-40e86c38635c.roa
File:                     315cda05-f16d-43f1-83d5-40e86c38635c.roa (raw, json)
Hash identifier:          6/fRTA52RCHDrbqOCSiS0Pa2UQICY2r6ihRkbpv8tU8=
Subject key identifier:   99:E7:55:1F:25:23:46:A1:1B:DB:92:3F:0B:F9:8F:9B:CD:B2:93:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       555F877B3C62FAF7705F78148B3EE8BBAAB1A1A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315cda05-f16d-43f1-83d5-40e86c38635c.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        32.144.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5f:87:7b:3c:62:fa:f7:70:5f:78:14:8b:3e:e8:bb:aa:b1:a1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=6d8f612b040893101f06a1af6ae436ac926f6d29306fc81c9fb9db5837b2243c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:11:55:c1:01:95:32:1e:81:88:e7:e3:5a:9e:
                    4a:02:54:06:4c:f6:4c:dd:a4:7b:02:df:e3:3d:d1:
                    19:22:ea:f2:62:67:11:ab:49:e6:f9:4d:84:ab:58:
                    d6:e3:02:d9:24:3a:9b:2e:13:86:55:47:8c:bd:f9:
                    ad:7d:e5:3b:74:77:e2:17:73:d2:69:08:8e:9e:c1:
                    a3:dd:e5:06:c7:49:c0:f0:66:2f:de:6a:2d:99:df:
                    f2:a4:92:be:c1:b8:dd:59:49:30:c4:ab:f3:aa:95:
                    99:9b:7b:d1:74:5c:be:24:58:38:5f:b7:96:b3:18:
                    ab:f3:a6:fe:4d:eb:1a:53:7a:cd:2b:b4:10:20:21:
                    ea:e5:12:30:3a:4b:82:b3:6a:8c:ee:0e:3b:5b:51:
                    5d:24:62:91:f2:f7:7e:1e:29:2f:5b:b8:9f:4f:b2:
                    6c:6d:7e:6d:88:29:87:0f:36:03:e9:e6:32:1f:6e:
                    67:38:0e:73:52:7d:b5:08:1b:9e:11:3f:06:f2:3e:
                    a5:33:b2:5f:1f:2e:7a:17:d5:24:0d:f1:c4:56:42:
                    c3:ff:45:e5:8a:02:fa:81:30:fe:57:aa:ac:c6:81:
                    a3:7e:93:44:41:50:79:b8:2d:92:ba:5c:d8:8d:70:
                    58:1a:dc:dd:16:41:82:34:dc:8a:24:a0:63:64:50:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E7:55:1F:25:23:46:A1:1B:DB:92:3F:0B:F9:8F:9B:CD:B2:93:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315cda05-f16d-43f1-83d5-40e86c38635c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.144.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         8e:3d:0f:fc:d7:a9:14:23:fc:40:e9:78:14:7f:9c:e0:65:f2:
         fa:c4:26:07:c4:46:7a:a1:d2:a2:9d:10:43:96:17:28:39:b5:
         0f:3c:54:4d:8c:af:52:6a:0a:a1:0b:c7:62:68:4d:2b:54:51:
         b7:9d:82:d7:b5:3b:41:fe:8d:62:8d:9e:37:4b:ff:d4:49:55:
         de:5c:fd:05:69:6a:80:e1:f3:da:e2:24:a7:70:72:df:2d:1c:
         80:18:3f:d5:5a:be:b8:a1:94:1a:12:bc:98:67:94:91:2b:d4:
         c2:50:19:28:d0:13:89:76:6e:a4:cf:83:5a:42:5e:97:f2:81:
         55:ea:06:9c:8c:ef:72:f5:6f:92:b0:82:91:54:8e:62:cc:54:
         4b:5b:ea:47:91:54:7f:54:ad:17:1e:b3:6b:b5:cb:d4:9b:ce:
         5e:5a:0b:b3:71:12:9f:27:4a:95:b4:67:bf:28:bc:06:4a:51:
         02:6b:36:17:3a:83:c9:6e:cc:1b:6a:e4:fa:ea:6a:ce:0e:14:
         91:d3:da:cc:70:0d:42:ce:e1:ca:28:3c:f9:27:ba:5d:3d:fe:
         3e:4d:d9:af:5e:a5:f2:80:15:1c:3c:d0:34:3f:83:7f:1c:d7:
         7f:83:d3:51:5e:1c:30:75:b8:82:27:4d:00:9d:51:8b:1d:cc:
         85:dc:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:25 2024 by rpki-client on console-fra.rpki-client.org