Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b16f16e-bc6c-437a-98ce-b1a2f5cc7df9.roa
File:                     3b16f16e-bc6c-437a-98ce-b1a2f5cc7df9.roa (raw, json)
Hash identifier:          +U2stpj3IEZmc6ytKOuPliWeCOhqKNXnmyFUyNsyKKU=
Subject key identifier:   BC:2D:EF:AA:4B:B8:46:90:62:BD:79:75:E3:9A:EC:B0:DA:F8:4D:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       395FB0ED109560ED770EEBF865CAB5EA7D5FEF2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b16f16e-bc6c-437a-98ce-b1a2f5cc7df9.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        5.174.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5f:b0:ed:10:95:60:ed:77:0e:eb:f8:65:ca:b5:ea:7d:5f:ef:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=d01dc801a7ad98a3b7c388e60be8905c709361ad4fa58d271a7b806db841b7c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:74:3f:de:e2:bb:cf:d7:6e:ca:e5:37:40:
                    e8:4e:e6:3c:ca:7c:1a:e2:ca:93:da:39:65:df:70:
                    1b:72:17:05:cd:1f:b4:e5:05:7c:a2:ae:85:73:4f:
                    c5:07:7b:7f:48:38:7c:cc:ef:e0:75:fe:fe:44:23:
                    45:8f:5c:3b:03:d8:f7:e4:15:fd:ec:2a:33:08:d0:
                    53:2e:fb:25:65:2b:2b:f1:57:f9:61:8a:e6:ed:8a:
                    80:91:bc:3e:97:e6:84:8a:f3:e4:23:20:5f:d9:1b:
                    bb:db:02:f7:17:9a:42:6b:35:00:eb:23:c8:b0:51:
                    7e:e5:0e:88:57:5c:d1:12:88:af:31:48:71:bf:e8:
                    c0:57:0d:44:ea:6a:9e:9e:96:9d:bc:f3:d0:16:82:
                    55:eb:a9:b0:56:ea:f1:fb:2d:a5:61:20:83:49:b7:
                    44:e1:6e:72:fc:ca:35:ed:be:f9:11:3a:5a:6d:fa:
                    0e:d4:b9:9c:3f:12:1e:6c:84:85:33:67:41:92:a1:
                    01:3f:91:23:a9:1e:35:81:23:e0:c8:82:03:dc:46:
                    c7:50:4d:09:c5:1f:ba:1a:8b:3d:a0:9e:be:5d:e6:
                    3a:49:df:eb:df:ef:9b:3b:1c:fe:3c:91:c7:5b:7a:
                    c8:65:6a:e7:88:04:0c:29:a3:81:6a:08:fd:df:48:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2D:EF:AA:4B:B8:46:90:62:BD:79:75:E3:9A:EC:B0:DA:F8:4D:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b16f16e-bc6c-437a-98ce-b1a2f5cc7df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:a8:60:b8:36:97:0d:eb:63:83:92:95:16:f5:64:1b:46:14:
         fc:6a:fd:07:e2:70:d3:6a:08:45:52:8a:94:38:e4:1c:0c:aa:
         65:10:70:79:e6:56:c8:d3:a7:4e:f5:ff:f9:f6:6b:b0:be:db:
         62:35:f2:00:99:a0:6b:d8:72:6f:70:cf:7a:16:47:86:88:0f:
         88:67:b1:58:20:a5:db:d5:32:3b:56:92:f8:95:ee:bd:86:32:
         e0:6c:89:4a:38:4c:c3:ed:4b:de:1b:c8:b1:89:7d:7a:90:e5:
         b2:2e:ab:43:13:49:65:ef:67:0b:a7:5a:38:49:9a:0f:9f:40:
         69:1a:eb:80:16:d2:6f:9a:5a:34:8d:ba:5e:da:2c:9d:8c:ae:
         75:8e:cf:a4:f9:e4:99:c0:20:4a:26:ac:5e:41:e1:8e:e6:5b:
         0c:fa:6c:81:01:a6:27:cd:32:cc:b8:1e:dd:3a:91:52:d6:04:
         d4:17:e2:1a:a4:3a:fc:aa:60:5a:db:4c:98:e0:b8:47:1b:46:
         02:84:0c:86:24:2c:9b:f2:c1:d9:67:2b:ef:a6:dd:76:6e:37:
         99:a2:9f:df:56:61:a9:48:d6:0e:50:4e:0c:a9:ff:a5:2b:68:
         12:ed:a1:3a:0b:c5:d6:0b:ec:67:bb:ef:be:a9:94:3a:45:8f:
         44:7e:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:11:30 2024 by rpki-client on console-ams.rpki-client.org