Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3622ccb2-5aec-414a-96ab-d18c952a9a01.roa
File:                     3622ccb2-5aec-414a-96ab-d18c952a9a01.roa (raw, json)
Hash identifier:          fv/nqI6Cc823HqAF/4JGxUu6e/zOfQadPbXwD6Rg2bk=
Subject key identifier:   06:A6:A5:67:3B:1C:18:CC:3D:02:56:9E:A1:C6:13:C6:95:81:DA:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E0F9936AC269EC9BBFD4EC60636EA959ED47CF6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3622ccb2-5aec-414a-96ab-d18c952a9a01.roa
Signing time:             Fri 26 Apr 2024 00:00:00 +0000
ROA not before:           Fri 26 Apr 2024 00:00:00 +0000
ROA not after:            Fri 31 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        155.50.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0f:99:36:ac:26:9e:c9:bb:fd:4e:c6:06:36:ea:95:9e:d4:7c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 26 00:00:00 2024 GMT
            Not After : May 31 23:59:59 2024 GMT
        Subject: serialNumber=dd7dabed1bd6f3c0a76b7d2d923631a5e6e19e0da291da3c0ae207dc1784ac0b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:04:a0:7a:27:6d:ff:c5:7a:68:c7:e7:7c:
                    e3:f9:d6:31:0f:0f:e5:96:e1:3d:b5:85:81:6f:92:
                    35:55:fb:a4:ca:a4:60:2a:2d:d2:81:29:df:a4:21:
                    3b:d2:0b:e5:72:dd:98:15:cf:8d:7a:e6:cd:f0:48:
                    2a:7f:7a:58:08:68:87:0f:d0:36:af:15:e2:c5:26:
                    ef:97:7f:02:f5:56:9d:cd:04:ab:26:34:e9:63:1f:
                    87:41:d2:c1:6f:3b:b8:ee:15:52:47:a9:78:1a:04:
                    f1:06:cb:e9:65:8d:35:52:31:7c:5d:bd:c4:6a:bc:
                    72:c1:0b:4a:fe:6e:a9:5f:b5:ac:74:2a:40:1c:40:
                    f8:88:a8:07:bd:5d:6b:1a:1d:d2:b2:18:4a:cd:2b:
                    b3:3a:0d:0f:8b:69:69:1f:a9:e7:aa:0a:60:65:20:
                    05:c6:21:85:33:5f:d6:ee:fc:3f:63:05:4b:66:88:
                    13:2b:b5:f8:13:5f:bc:ab:3b:0e:b2:be:e2:42:3d:
                    cf:90:0a:fe:33:8f:87:be:8a:b3:9c:3f:08:ea:51:
                    97:6a:db:1f:dd:16:16:36:90:17:77:93:ec:32:88:
                    d8:d0:60:cc:a4:0c:a6:70:a9:a8:28:e2:57:a5:05:
                    2a:8b:dd:80:f3:73:55:9f:56:96:ed:17:0d:7c:07:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A6:A5:67:3B:1C:18:CC:3D:02:56:9E:A1:C6:13:C6:95:81:DA:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3622ccb2-5aec-414a-96ab-d18c952a9a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.50.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         21:5d:cc:20:7c:ac:c4:99:3a:d1:cc:b8:6c:67:6d:c9:0c:01:
         7e:f5:6e:fe:64:7a:46:e6:82:66:86:aa:11:54:01:8e:09:3f:
         93:fd:2b:55:12:9d:37:35:52:e2:91:d3:4b:49:e5:89:03:9c:
         80:11:fb:7e:6d:77:6e:c7:12:66:02:5b:00:d7:58:30:4d:ec:
         7e:f2:af:bf:db:28:d5:c2:1e:4e:36:c9:5c:4a:d7:02:ec:e5:
         1b:f8:01:c8:ec:10:c0:4b:d2:22:ad:c7:88:56:33:3f:ae:3f:
         bc:59:84:26:ba:ca:1b:43:16:19:91:66:68:03:b0:11:c6:3f:
         34:f9:eb:a8:c0:ef:ee:70:37:58:c9:64:88:38:d7:05:ed:31:
         ca:8e:57:f0:ea:0d:fe:04:f8:f4:ca:43:d5:89:60:d7:e7:ce:
         42:34:69:5d:ff:9c:dc:8e:56:83:9e:e3:9f:29:be:ee:89:7f:
         51:52:32:3a:9d:95:00:bc:d6:c4:7d:26:b0:13:f0:6f:7b:54:
         45:41:86:2b:47:59:e6:9d:81:bb:6f:3a:07:13:47:95:7d:f6:
         32:f1:02:fe:77:d8:11:fd:71:ce:fa:00:a6:61:a1:65:c9:16:
         79:56:53:45:57:f9:c5:5d:30:f1:25:66:18:a1:14:f9:5c:00:
         c4:3a:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:11:30 2024 by rpki-client on console-ams.rpki-client.org