Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa
File:                     3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa (raw, json)
Hash identifier:          EbbhAfBR/g5ncXa4FkFM2djXut5/H0htTcOBNZetTqc=
Subject key identifier:   72:88:AC:3A:E2:01:45:B1:77:DC:27:37:81:56:AA:81:87:2D:84:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0726D1CEBFBD5DFB98B3FE2126ACD425842A54C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa
Signing time:             Mon 18 Mar 2024 00:00:00 +0000
ROA not before:           Mon 18 Mar 2024 00:00:00 +0000
ROA not after:            Mon 22 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        216.39.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 12:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:26:d1:ce:bf:bd:5d:fb:98:b3:fe:21:26:ac:d4:25:84:2a:54:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 18 00:00:00 2024 GMT
            Not After : Apr 22 23:59:59 2024 GMT
        Subject: serialNumber=fcbd4c266ef0aff9c70e2745ffc5932a1fc3ea9b2a477c91cdcfdf9e0d43c69a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:3e:df:a6:25:a4:8e:82:bf:6a:ef:14:88:
                    b5:28:b4:8b:b9:88:09:33:12:b7:2a:1a:78:07:43:
                    82:43:6b:fa:52:1e:06:3a:bd:b5:af:51:99:27:9e:
                    c0:9a:84:e8:fb:8d:d8:40:05:47:1b:b8:0c:a9:2b:
                    07:83:1b:b9:5e:e2:a8:48:39:3f:9e:57:fb:a6:bd:
                    f2:b3:c6:bb:98:e3:33:b3:71:40:ab:19:a9:9f:ae:
                    bd:43:31:68:29:c8:e1:d9:77:bc:52:f8:4c:1a:f6:
                    e3:63:e5:1f:02:2b:52:3a:f4:1c:0c:a7:30:e0:fb:
                    9d:54:8b:ea:f4:02:de:d7:45:07:2c:d9:23:d5:62:
                    8f:82:90:db:74:92:b9:fc:28:8e:d9:f3:b6:7b:b5:
                    dc:bb:6b:29:f9:4c:55:d0:4c:a9:b6:95:b4:0c:d2:
                    58:f7:b6:b4:21:5c:d2:ee:c6:d9:2f:53:83:8a:aa:
                    e1:c2:e5:aa:51:a6:23:71:30:91:f4:55:66:27:69:
                    c4:c9:33:dc:0e:28:4f:2b:b5:4c:fe:1b:3a:3e:c6:
                    ab:ed:b5:a7:34:25:17:9b:49:02:93:7c:29:12:8b:
                    eb:2b:15:cf:9d:34:1b:ef:3f:10:78:72:60:9c:08:
                    12:9f:ff:eb:d1:a2:b8:23:30:99:b4:4b:83:63:a1:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:88:AC:3A:E2:01:45:B1:77:DC:27:37:81:56:AA:81:87:2D:84:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:e7:34:61:5c:d4:7c:4e:df:15:8c:ba:92:74:6e:56:bd:7b:
         f6:51:55:3c:df:db:6c:da:42:9b:ff:9c:bb:2a:28:5e:b5:41:
         75:51:31:99:be:40:fa:86:e9:ec:a3:8d:76:2a:27:6d:00:ac:
         bb:4f:01:9a:e4:57:60:7b:e5:ae:d4:b7:d1:9e:aa:17:8b:1c:
         9d:80:27:a5:dd:fb:79:69:10:74:7f:6d:3d:1f:02:63:be:58:
         a3:78:34:bd:7b:ec:b5:c1:9d:66:74:0c:4a:0f:7e:74:32:30:
         ad:94:74:21:da:35:cd:68:82:2c:b2:40:de:45:b0:60:fb:50:
         ec:de:6a:56:96:76:bd:27:7f:2e:92:fc:00:88:e0:21:32:14:
         7b:ab:36:a9:c7:6f:81:b1:09:7f:1a:11:f0:cc:97:35:10:37:
         25:43:fa:63:d6:09:66:b7:b6:ca:6a:d6:e6:4f:aa:07:94:3e:
         ad:63:df:9f:fa:e7:1c:2d:2b:92:55:5a:56:67:7e:bb:33:c6:
         17:fa:14:94:ee:6c:34:b2:af:6b:a9:f7:ed:b8:c3:90:7f:ae:
         10:76:5d:74:d0:f3:ce:18:85:0f:c8:7f:60:32:14:8a:f7:23:
         ff:50:3d:a4:3b:cc:4d:5a:00:b5:db:bc:4e:89:45:d5:33:f3:
         da:1e:1f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:17:05 2024 by rpki-client on console-ams.rpki-client.org