Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/382517df-1bae-4e0c-a41b-42bf1a7dc44e.roa
File:                     382517df-1bae-4e0c-a41b-42bf1a7dc44e.roa (raw, json)
Hash identifier:          rp8yel01Vh41QGUdc6vEeDBwlu3RUR1ExUAU8fbstt4=
Subject key identifier:   5A:CB:63:CD:0A:18:54:CA:8B:83:BC:5D:E5:87:2E:6A:75:DA:29:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F129C517F7FB9B15237E755FD34ACE1627A8577
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/382517df-1bae-4e0c-a41b-42bf1a7dc44e.roa
Signing time:             Tue 30 Apr 2024 00:00:00 +0000
ROA not before:           Tue 30 Apr 2024 00:00:00 +0000
ROA not after:            Tue 04 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        147.115.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:12:9c:51:7f:7f:b9:b1:52:37:e7:55:fd:34:ac:e1:62:7a:85:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 30 00:00:00 2024 GMT
            Not After : Jun  4 23:59:59 2024 GMT
        Subject: serialNumber=138737c1b00052a4aac0f336a84379538fecff32ec3e04ca7cc9a9b8f4742ca8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:04:9d:e5:c7:d2:1d:ef:0f:94:01:e0:4f:
                    5c:3f:bc:a7:43:cc:90:ef:7d:ff:a9:c5:b5:b7:f9:
                    5f:8b:08:66:49:bb:ff:dd:38:dd:0b:6f:f2:55:64:
                    cd:78:f9:dc:a6:61:05:3c:02:e9:44:0d:57:a0:3d:
                    81:c6:ca:19:60:6f:03:73:61:00:d4:0b:f7:7e:0b:
                    eb:3e:9c:e3:44:0c:d2:d0:d8:af:7c:96:f6:53:fd:
                    1c:ec:13:41:b1:69:d5:95:02:2e:ce:34:61:9c:b8:
                    2f:e4:48:68:e3:fa:69:ab:a8:52:f7:77:40:a0:e3:
                    ed:ae:a5:e7:f3:82:ff:f3:cf:c0:aa:15:22:b7:ba:
                    35:2e:b7:d3:d7:39:93:6d:8d:20:c1:f4:10:a1:6d:
                    99:2a:ad:ca:0d:de:c4:86:c3:3f:3e:fb:97:5f:48:
                    03:25:61:d7:27:f9:b9:67:8a:9a:f3:f2:59:45:a3:
                    52:27:ac:a8:0c:eb:32:81:cd:b9:9f:5a:e6:ca:b3:
                    4a:eb:4c:e6:53:92:6e:a1:d0:36:36:82:29:17:18:
                    dc:e5:c1:8f:ba:10:8b:40:59:1e:64:0e:28:76:9d:
                    e6:0e:3f:c8:9c:a6:4e:df:c7:29:8d:00:e7:20:ee:
                    c2:3f:23:12:f4:7b:c3:02:68:3e:05:96:9b:c1:82:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CB:63:CD:0A:18:54:CA:8B:83:BC:5D:E5:87:2E:6A:75:DA:29:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/382517df-1bae-4e0c-a41b-42bf1a7dc44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:c0:70:19:6a:7d:e8:43:e6:70:22:73:01:2f:05:e3:22:95:
         a2:e5:3c:a9:0b:08:2b:66:7e:70:b0:3c:91:35:69:7b:0b:3b:
         52:3c:1e:81:5b:98:ba:64:9c:87:57:1f:a7:b4:98:99:92:ed:
         6f:b0:b0:33:68:5f:4e:40:9d:02:a5:fc:a7:78:32:b8:23:f2:
         71:0c:68:fc:ed:42:b6:40:b7:c1:7e:34:6e:01:31:8c:4d:91:
         92:46:28:63:6a:b5:8b:28:6e:04:1a:3b:b6:c3:cc:f3:2d:e2:
         ce:19:a4:cd:29:38:e4:13:03:76:d3:1c:70:8f:b9:c8:32:2f:
         d3:06:55:1c:ba:c0:a7:29:7d:de:91:5a:8f:a2:fd:f9:f1:6d:
         b7:36:80:a7:f3:5c:a5:1b:fb:bb:3d:d3:54:50:52:e5:fb:ef:
         84:8b:35:38:2e:70:cd:ab:b3:56:7f:68:29:05:a9:99:93:0c:
         53:6d:50:4a:0c:78:02:e9:7d:0d:5c:64:d9:ee:61:cd:59:09:
         11:6b:69:fd:ea:70:92:50:cf:b4:03:b3:46:ed:fe:0b:ab:0d:
         74:f6:41:f8:8f:11:4d:37:78:37:e1:62:17:30:1d:47:a5:29:
         81:e9:f4:90:5d:ef:66:b6:3f:c3:13:37:1e:0e:62:d4:6c:b1:
         ad:ad:1f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:26 2024 by rpki-client on console-fra.rpki-client.org