Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f92b005-9132-4a38-b62d-d56412993dc0.roa
File:                     3f92b005-9132-4a38-b62d-d56412993dc0.roa (raw, json)
Hash identifier:          XG9kDveFKhxN3JMfKVbFSTOhZY2D/cgCfN3qA4n/inc=
Subject key identifier:   F3:02:D2:10:71:8F:D9:38:97:B8:FE:8C:DC:69:E6:B4:D8:9B:32:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F68EEA43C901F99460EACB06692B1B359875103
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f92b005-9132-4a38-b62d-d56412993dc0.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        185.169.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:68:ee:a4:3c:90:1f:99:46:0e:ac:b0:66:92:b1:b3:59:87:51:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=c30300e688776c4a4756dbcd24089795d5842d54069f9ecf169e9a308efbda9f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:c8:f8:ba:be:6a:f1:60:c3:ff:7b:69:4d:
                    43:92:9f:8f:8b:f1:2f:4d:07:ca:e2:a8:5d:19:c2:
                    ae:e0:f6:87:ea:f8:94:17:6f:c5:85:43:0a:18:ba:
                    a2:7b:4b:d7:74:ef:e6:f2:30:2e:e9:ef:13:93:55:
                    8b:12:62:ce:a8:eb:87:db:f0:5e:5b:25:5b:2b:ed:
                    6c:2f:d3:86:30:f2:96:0d:f5:95:fe:5b:39:36:22:
                    a0:2a:5f:70:5b:b2:d0:0d:c3:f1:d6:52:1b:b2:07:
                    14:d1:b4:1f:2b:a2:ad:78:a8:64:58:53:99:26:e8:
                    9b:41:53:97:07:c1:2f:44:7e:0c:f9:05:45:77:72:
                    e9:8d:9e:f6:de:32:4a:99:38:ab:d5:83:00:d3:c9:
                    3a:08:5f:cc:da:cf:3a:ba:d8:3d:6a:c0:15:5f:da:
                    6a:d4:4f:f2:2d:b1:a6:5a:53:44:1c:9b:8c:df:f6:
                    91:26:45:c8:c8:90:55:66:59:9b:83:0b:9f:06:29:
                    6f:d7:c5:1e:76:85:00:37:88:fd:9c:03:d7:1d:a2:
                    76:ea:2c:96:fd:30:d9:b2:d5:f6:8b:80:b6:15:b9:
                    ab:1a:2b:b8:eb:a1:b3:49:9d:c6:7e:4c:61:2e:0c:
                    3a:5c:c3:6e:de:67:e6:fa:db:bb:7b:68:ab:6b:97:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:02:D2:10:71:8F:D9:38:97:B8:FE:8C:DC:69:E6:B4:D8:9B:32:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f92b005-9132-4a38-b62d-d56412993dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:55:82:61:13:e7:17:04:c7:21:72:5d:1f:45:e3:23:97:ba:
         13:45:91:98:5f:e4:64:40:0d:98:d4:e6:6a:2a:0d:18:ac:8e:
         4d:77:60:7f:56:3e:ff:e6:a2:6d:11:13:24:53:85:8f:fe:43:
         5f:bd:9d:2e:d9:19:f5:6e:8f:25:cd:ce:16:d0:d9:25:b1:1c:
         0c:bd:9e:96:ac:22:96:e6:af:6c:de:2b:18:50:51:d7:0c:3b:
         8b:80:7d:2d:83:61:35:db:f9:71:a2:57:ac:e0:77:b1:aa:55:
         f7:24:66:90:de:c6:63:10:fe:28:82:1f:22:66:17:c9:39:aa:
         1c:e8:c1:73:a8:4d:10:4e:3c:0a:38:83:01:f1:8b:84:e5:32:
         7c:63:78:c8:9d:ac:85:4c:60:47:6f:9e:6d:ef:ce:4b:57:05:
         85:ac:38:9d:3e:34:47:07:71:e8:a7:84:7c:1b:6d:ad:80:1a:
         ac:15:95:17:f8:41:18:2f:32:07:a1:19:d8:05:0f:2c:6d:86:
         0d:58:ee:22:e1:14:a7:5f:68:13:17:d7:11:0a:5a:38:b0:6d:
         b6:84:26:9a:4b:26:9c:ec:9a:e0:c7:45:69:e8:37:87:d9:28:
         9b:ee:35:1c:9a:4d:91:54:61:05:b1:fd:b2:8b:74:d4:bf:0a:
         b5:31:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:11 2024 by rpki-client on console-ams.rpki-client.org