Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d54fe1-7227-430f-bdc1-6a4fb6b46113.roa
File:                     36d54fe1-7227-430f-bdc1-6a4fb6b46113.roa (raw, json)
Hash identifier:          Y/9tmip45dGknzNKORiF/B7L65eF7HouEb1YCbvQ82Y=
Subject key identifier:   39:9F:08:29:D4:4D:B1:50:38:25:AE:1A:B7:B8:99:6A:50:B1:DB:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       700EDF671FF3705E28F0318B04DD82069754F40E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d54fe1-7227-430f-bdc1-6a4fb6b46113.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        40.186.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0e:df:67:1f:f3:70:5e:28:f0:31:8b:04:dd:82:06:97:54:f4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=0e5c8fb3f91f5a6db8ba85a23970fc3fbb3f6f3eef5bfad265a73caef28fff2b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:83:a4:08:54:20:0b:e8:42:bd:4e:dc:b9:
                    1b:73:a3:e5:1b:4a:43:f9:7d:bb:f4:77:97:1d:50:
                    5c:1c:80:2a:b4:f4:d9:cf:8c:76:8a:0c:4a:3f:c5:
                    ce:65:5e:fb:e8:59:d5:f8:0c:01:ee:28:ab:0e:04:
                    1d:77:87:75:73:81:e3:59:28:27:dc:bb:13:40:00:
                    1c:a9:02:8b:d6:0e:d5:74:68:c9:6e:4c:4f:da:01:
                    bc:e0:e2:86:a6:69:a3:db:da:0c:73:3f:2f:63:aa:
                    fc:cd:24:2b:e0:6a:69:29:ea:b9:a5:7f:2b:1c:01:
                    f3:fb:68:36:be:a0:28:a1:46:17:ae:7c:1b:f9:0d:
                    14:22:f9:fd:b0:ea:9e:81:b1:4f:9c:b0:07:c4:21:
                    49:c9:fe:16:c9:cb:99:dc:ce:b7:d6:70:85:52:2a:
                    39:ac:dd:69:b0:df:3d:73:c5:1d:fa:d3:53:ed:94:
                    96:49:ff:f1:38:0d:d9:b2:f7:23:2a:5d:27:cc:e6:
                    49:e9:05:70:ee:3e:60:5c:f2:a8:fb:1c:06:30:2e:
                    76:57:ed:c1:86:aa:91:5d:2f:3c:d0:27:02:fd:b9:
                    5a:5e:fe:0e:54:41:d1:f5:3b:8c:b5:27:cd:51:17:
                    a1:fe:46:c5:22:64:f6:af:fa:67:bd:56:d7:80:0f:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9F:08:29:D4:4D:B1:50:38:25:AE:1A:B7:B8:99:6A:50:B1:DB:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d54fe1-7227-430f-bdc1-6a4fb6b46113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.186.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d4:ba:3e:a4:88:1a:a2:2b:ad:8b:d6:0f:1f:fc:50:f7:08:41:
         1c:84:77:f5:ba:d0:ff:92:52:48:ef:50:ea:c3:92:83:06:6d:
         86:37:3f:f1:01:fe:6f:53:bd:ad:46:d1:98:d1:2e:ee:9c:c5:
         be:ab:81:63:9b:50:1b:34:87:0e:dd:ad:83:a9:7f:b4:db:22:
         40:d4:2d:2e:09:21:1d:26:cf:27:d0:3b:f8:b0:f4:e7:a2:41:
         d9:24:5b:22:3b:dd:72:52:8e:96:69:2a:34:a3:9d:89:9d:60:
         71:7e:ad:93:b0:c7:49:48:4f:9f:3b:16:68:ba:1f:b3:04:fd:
         0e:36:c2:6f:54:73:45:44:34:48:17:06:e7:d3:0a:fe:98:82:
         fa:ab:f1:aa:4d:e7:4f:5b:e7:f7:eb:d5:3f:d4:0e:d5:54:69:
         36:e9:cf:ce:eb:dc:d1:69:fa:e5:b6:c6:5a:d8:78:11:d0:09:
         c2:ca:80:8e:0e:c5:ee:f5:56:15:0e:73:84:77:bb:64:09:af:
         26:10:d7:b9:7e:1c:ef:a3:ce:9e:4a:6e:3a:85:3a:b4:f8:e8:
         60:72:6d:e6:65:49:1e:4d:2c:ff:c7:b8:ef:3a:c7:6d:24:d5:
         66:ed:7a:a7:bf:e1:46:2b:e6:40:ea:9f:2d:d0:bb:ff:c6:cc:
         bc:2d:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:57 2024 by rpki-client on console-fra.rpki-client.org