Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33ce2add-fe4e-4a9c-8f90-8e6774cb7050.roa
File:                     33ce2add-fe4e-4a9c-8f90-8e6774cb7050.roa (raw, json)
Hash identifier:          Q0M28i2ns7oAiJh7QTBRValuECIEwzsBh4aU8T97jng=
Subject key identifier:   77:ED:A1:16:6D:82:49:86:09:E6:55:24:C7:87:02:16:8C:63:5B:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25D5AB2B727E0F30D88C8798F4AC522204DF573C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33ce2add-fe4e-4a9c-8f90-8e6774cb7050.roa
Signing time:             Sat 27 Apr 2024 00:00:00 +0000
ROA not before:           Sat 27 Apr 2024 00:00:00 +0000
ROA not after:            Sat 01 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d5:ab:2b:72:7e:0f:30:d8:8c:87:98:f4:ac:52:22:04:df:57:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:00:00 2024 GMT
            Not After : Jun  1 23:59:59 2024 GMT
        Subject: serialNumber=c97304931340d7dd4f3f194e3dd9a0b1f9e0d7a5bb9a9865b1cb2dc17e0bf6e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:85:6f:90:54:fa:96:15:23:9f:fd:2d:7a:
                    d4:d1:6f:82:e3:95:86:e6:b5:cd:9c:f0:4a:0d:e4:
                    53:36:05:f2:2f:21:46:a2:e1:3a:09:65:4c:16:b2:
                    cc:10:98:e5:24:70:2f:0e:c9:ae:5c:95:e8:94:3d:
                    72:f3:b7:62:df:8e:f2:5d:37:ed:88:da:4b:95:22:
                    4d:73:6e:6b:d6:b4:c9:b8:2a:b7:25:b6:d1:93:c6:
                    db:f1:2d:e7:48:dd:c0:68:58:07:91:b3:40:a6:fa:
                    4b:98:44:0c:a7:98:7d:e7:1e:81:de:03:ca:a8:28:
                    b3:d6:60:4c:3f:ce:83:94:d1:e1:96:d9:bc:b7:66:
                    6d:97:69:bb:f9:bb:e3:f9:3a:4c:ec:10:99:de:7f:
                    57:03:e7:9b:ff:dd:7c:db:5e:ce:90:26:92:6c:bf:
                    45:2e:bb:29:8e:c0:44:83:85:cb:c2:a1:e5:ad:d6:
                    7c:26:14:c7:80:fc:bd:c8:8a:e6:3d:49:35:f5:b1:
                    83:5d:ab:44:9e:0a:71:1c:47:2b:9d:f7:d3:73:eb:
                    ec:bb:1e:1d:8b:c4:ee:71:45:3f:a6:aa:5d:f3:42:
                    0e:94:7f:d8:ed:50:3f:36:51:6a:65:ab:b3:d7:7e:
                    c0:57:68:2b:c5:fe:c0:1e:4e:69:ee:c3:8e:03:97:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:ED:A1:16:6D:82:49:86:09:E6:55:24:C7:87:02:16:8C:63:5B:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33ce2add-fe4e-4a9c-8f90-8e6774cb7050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:f7:69:1c:1a:b0:7a:03:5f:b9:a6:f6:7c:89:e7:33:e3:7a:
         9d:7b:d6:e4:82:e2:8f:27:e4:3b:e3:6a:50:0f:de:05:23:14:
         ca:31:4e:33:27:50:80:7f:18:f9:09:90:79:bf:29:c4:75:b6:
         d7:f5:66:52:f0:e0:84:31:18:74:64:4b:a4:18:3f:f9:de:8f:
         11:b4:27:19:06:52:2a:d1:2b:b2:9c:8a:a2:53:93:aa:41:b2:
         60:ac:9a:e3:38:9e:c4:14:14:dc:fd:c6:00:89:92:54:99:b9:
         e1:a7:8f:87:bc:79:9d:68:5a:be:77:10:10:3e:48:cb:07:64:
         80:8a:73:96:ac:db:bc:f3:a2:63:8d:40:41:3a:57:51:d7:49:
         89:ac:e3:7b:f8:0f:a7:29:06:d6:82:26:bc:c4:a9:1b:52:f3:
         f0:30:36:18:a0:dc:2b:6d:c7:b2:f8:8b:91:a7:78:fe:95:2c:
         a0:70:c4:2f:7c:ed:2c:d7:16:fd:be:86:47:f7:20:25:56:e4:
         de:99:bc:9e:19:dc:31:21:ea:09:e6:36:68:26:44:3c:e9:4b:
         cb:5b:a6:ce:7b:1e:13:5e:8b:6e:0a:db:54:3e:0f:91:34:20:
         13:bd:c8:69:14:32:a9:5c:91:34:53:b1:5a:8b:49:dd:5d:e1:
         41:e0:46:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:41:06 2024 by rpki-client on console-fra.rpki-client.org