Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c884bc-661c-40e5-b482-3e818092414c.roa
File:                     34c884bc-661c-40e5-b482-3e818092414c.roa (raw, json)
Hash identifier:          UO0Tq4bc8Ftx9HRBWOX80WIVaFmAaHchsr6F8gxIVRc=
Subject key identifier:   77:13:D5:06:B2:FC:DF:D1:69:8B:ED:8E:36:BD:91:C2:40:C1:5D:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C7A50278587D2ED2DB42448799936B0061828A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c884bc-661c-40e5-b482-3e818092414c.roa
Signing time:             Tue 29 Aug 2023 00:00:00 +0000
ROA not before:           Tue 29 Aug 2023 00:00:00 +0000
ROA not after:            Tue 03 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Aug 2023 12:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7a:50:27:85:87:d2:ed:2d:b4:24:48:79:99:36:b0:06:18:28:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 00:00:00 2023 GMT
            Not After : Oct  3 23:59:59 2023 GMT
        Subject: serialNumber=e418496597a83eb7dd6640777850cc7b2bfcec27734c91dde3f245b17bbbe435, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:7e:d8:32:d8:43:9e:26:77:5b:11:4b:21:
                    e6:dd:bb:ba:4e:7e:eb:a4:0b:18:d9:f5:aa:a8:c6:
                    82:50:56:e1:e0:15:59:ee:19:0e:c7:1b:bc:c6:68:
                    aa:d4:b7:33:fe:14:4b:dd:90:b8:95:1a:cb:af:b2:
                    cc:2a:05:76:c8:6b:84:cf:f3:11:28:e1:e5:61:6d:
                    64:28:52:ff:ca:57:e6:3a:3e:1b:b6:cc:a8:fc:b1:
                    77:b6:b5:8d:0e:a4:36:c0:31:70:9f:c2:7f:22:a8:
                    27:af:1f:84:fe:2d:cb:8b:b2:c9:56:55:2c:71:f6:
                    d4:77:eb:79:90:fb:5e:cc:2b:44:3d:e8:6d:8d:18:
                    29:95:4b:5b:53:a3:8c:8a:c8:c7:45:c6:d4:94:89:
                    da:78:42:48:1a:d6:91:aa:7a:5c:a8:89:be:f3:34:
                    cc:32:94:fd:d1:38:40:1b:37:28:33:73:e0:68:4e:
                    5c:e1:df:77:3a:cf:75:2c:64:42:58:e8:0e:9e:51:
                    cc:66:a3:ec:55:25:f8:25:c2:88:a1:5f:a5:1f:9a:
                    de:c4:17:91:a3:06:72:3e:81:cd:6f:2c:98:8d:8a:
                    db:dd:f4:03:32:3e:fc:01:b9:a4:ae:22:b1:8c:da:
                    34:01:6e:86:29:9a:d6:c1:82:cd:b3:f1:fa:12:b2:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:13:D5:06:B2:FC:DF:D1:69:8B:ED:8E:36:BD:91:C2:40:C1:5D:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c884bc-661c-40e5-b482-3e818092414c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:55:d1:b1:c9:f4:10:24:8b:a7:27:79:2a:e9:0c:14:88:c5:
         cc:c8:dd:ba:b7:45:6d:7c:15:e3:c7:e4:f8:04:74:f2:e3:98:
         85:b5:23:ad:5d:c0:82:f3:09:85:28:74:d2:b2:51:18:c6:4a:
         ee:64:d5:5a:96:78:0d:ba:30:7a:91:42:da:d8:2d:0c:26:d3:
         ba:0f:9b:81:45:0b:b6:f4:5f:45:6d:b8:1a:08:f3:60:24:e6:
         ee:ae:85:f4:f7:92:9a:00:8d:d2:bd:b7:98:f6:21:0c:93:d6:
         3f:f2:a5:89:4a:74:4f:36:3d:3a:c2:08:93:86:75:9c:a4:8f:
         31:99:14:0b:dc:8a:43:36:f6:ad:06:f5:d5:e0:a6:61:ff:e9:
         09:5a:8d:e5:fa:31:de:10:2a:7d:dc:33:f4:95:c6:6c:43:18:
         a5:2d:fa:45:6d:c5:22:86:e1:84:e2:36:b6:e2:cc:f8:ca:86:
         a7:17:19:c8:d8:d2:68:b8:0e:8e:78:4c:c5:72:7b:bf:16:f0:
         34:3e:f8:2f:1d:61:5d:b7:f9:84:b8:ac:49:73:77:23:73:f0:
         b2:9a:5e:7a:0b:e2:60:b2:8c:80:74:f4:58:a8:3a:81:92:cc:
         7b:7f:3a:1a:99:9f:f3:18:ec:89:18:23:fb:30:1f:5f:92:b3:
         e1:f4:ba:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 00:34:11 2023 by rpki-client on console-fra.rpki-client.org