Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b9c7d19-e464-4edb-8a42-a98aa3e6b596.roa
File:                     3b9c7d19-e464-4edb-8a42-a98aa3e6b596.roa (raw, json)
Hash identifier:          mK5pKxzGsiPjuD1R++YlitItyrctlzXt291T7I/5iO4=
Subject key identifier:   94:B6:C7:E7:9D:06:58:BA:08:56:C1:75:43:9D:2F:CB:1E:E4:7F:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08D5379FC6E254ACC8F76BB8C1A037C9D7790F60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b9c7d19-e464-4edb-8a42-a98aa3e6b596.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        198.14.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d5:37:9f:c6:e2:54:ac:c8:f7:6b:b8:c1:a0:37:c9:d7:79:0f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=17379dff9327bf7557e8f1a99ab4fe3a715ae81b2799bd62fc9c162a672f7f12, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:bd:f3:46:72:f2:29:86:9d:61:60:9d:bb:
                    7f:4a:6d:a2:a1:05:21:be:58:9a:1a:ad:2f:c3:d8:
                    5c:59:b8:43:14:18:0c:09:ff:cd:8f:b3:5f:5e:ff:
                    8d:b4:2a:0a:00:e7:9e:6a:1c:11:63:1d:13:f0:48:
                    46:ea:03:9a:ce:cb:b9:73:3f:7a:0b:29:6a:19:35:
                    22:16:3b:75:45:c1:c9:84:79:17:4f:f7:3b:f0:05:
                    77:94:b9:ad:c3:d1:a7:b8:fa:cc:49:5f:46:62:69:
                    88:7b:71:8b:8c:f4:26:29:d9:ee:b1:d0:8c:3e:84:
                    3f:fe:e6:85:67:17:f0:73:d3:e1:4d:53:00:cd:56:
                    25:d4:13:1c:f3:df:20:ff:fe:2a:80:3d:09:67:17:
                    77:8b:82:71:c3:d6:91:0d:10:d7:6a:e3:76:ff:bf:
                    e1:37:69:5f:97:79:64:f3:f0:8a:06:65:f0:fa:38:
                    73:e5:01:68:f0:42:ed:0d:eb:00:d8:68:4c:5d:4e:
                    8c:20:69:23:f8:2e:71:30:8b:2d:79:46:ba:70:5a:
                    ee:0c:f7:60:0a:e6:4c:e7:20:af:5b:4f:29:cf:f8:
                    00:b0:25:7b:04:a7:4e:45:42:09:cb:4d:91:a1:3a:
                    23:a2:2f:de:39:6c:6f:5e:99:c0:94:d6:2c:8b:d9:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B6:C7:E7:9D:06:58:BA:08:56:C1:75:43:9D:2F:CB:1E:E4:7F:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b9c7d19-e464-4edb-8a42-a98aa3e6b596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:ee:c7:56:74:28:2e:4b:40:6f:e3:d0:a1:09:62:ce:2a:
         eb:c2:73:e1:91:8a:ce:8c:2b:8b:6e:d6:3f:ff:88:29:32:b9:
         ac:4d:05:fb:c8:b3:2c:38:44:03:30:7a:ea:ab:49:6c:f4:05:
         6d:3c:80:c7:de:f2:1a:a0:26:fc:36:28:93:fc:a2:67:82:25:
         2a:64:a7:31:bc:eb:35:bf:42:30:40:b7:21:46:06:37:41:5e:
         98:96:d9:39:24:c8:7f:8e:ec:62:a3:45:2b:e9:5b:f9:19:b4:
         6d:2f:70:5b:a0:3f:fc:65:5a:07:1f:2e:0d:da:b9:86:c8:52:
         51:7a:9d:50:63:99:f7:ce:3d:ab:ea:fc:07:d8:ff:0b:b9:ed:
         ee:3f:74:99:1f:f0:96:3a:ff:79:ca:b6:cc:d8:a4:e3:05:4d:
         68:9c:2a:2e:ba:68:36:60:15:a5:00:63:f0:d6:89:7d:bf:e8:
         3f:c4:c4:e1:56:1d:b2:4b:75:20:9b:b8:4d:f0:dc:9f:35:b2:
         31:75:19:7b:8d:e7:85:cf:c8:d1:84:41:9c:92:90:e5:e0:3e:
         28:a5:83:a9:2b:d6:d7:5b:44:31:bd:3f:d6:53:20:29:10:60:
         05:29:b8:16:f2:38:dd:9b:68:ff:2e:e5:2e:7a:e3:31:92:55:
         f8:18:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:27:53 2024 by rpki-client on console-fra.rpki-client.org