Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a88a73-93bb-44b8-90fd-a8b74cf86175.roa
File:                     41a88a73-93bb-44b8-90fd-a8b74cf86175.roa (raw, json)
Hash identifier:          Gwkqr4z8oO24m4GU3ZOjzSvvmKl0qBrgLxMM0j4CxMw=
Subject key identifier:   4A:82:7B:FA:FB:9E:A5:89:64:9C:67:6A:63:6E:E3:23:F8:64:17:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6046B0C0CECE1D64EF980231D2D53917C07D5D22
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a88a73-93bb-44b8-90fd-a8b74cf86175.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        74.230.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:46:b0:c0:ce:ce:1d:64:ef:98:02:31:d2:d5:39:17:c0:7d:5d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=8bfd9752fdb37b890be3087c10ad5af000a83586c69d6cc44f6b358631f61e99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:e5:a8:9a:11:dd:ae:4b:9d:c1:0d:89:a7:
                    ea:0d:d6:e1:44:ee:cc:91:90:1d:87:de:1c:7b:ad:
                    a7:62:8b:6c:0a:0a:8d:40:d6:4f:44:3b:be:99:55:
                    e3:1f:c6:8b:87:5b:4d:0d:b5:3a:6d:d0:f0:cc:b8:
                    92:1c:e6:1e:a8:1a:89:9d:97:a0:76:6c:dc:8d:98:
                    ef:a1:bd:e1:95:78:0a:79:92:c3:b3:36:2e:b4:86:
                    ad:60:c0:3b:d4:8b:f6:6b:c3:67:94:20:11:32:a9:
                    6a:22:df:b5:d1:f4:13:6f:d0:30:9f:1d:da:a9:63:
                    fd:f3:2e:bd:91:87:6a:21:68:e8:81:59:dd:3b:94:
                    6c:73:56:83:c3:0f:43:13:a0:8f:be:09:df:db:26:
                    40:fb:36:42:09:1a:ee:c8:d4:ce:f3:24:f9:8c:1b:
                    af:cd:b8:fe:30:9a:9b:8c:02:fc:57:56:ab:2d:99:
                    fa:82:48:d2:f9:0a:5e:04:b6:4e:11:e4:c6:45:17:
                    4d:56:45:1e:a8:02:2f:2f:99:1b:18:98:e2:ae:93:
                    9d:d0:ec:aa:5a:0f:a5:30:cb:aa:f7:85:19:6c:e0:
                    47:68:d7:cf:de:44:c3:0f:29:fa:e7:f2:99:3c:41:
                    42:2e:fd:86:3a:b4:f5:0d:f1:0e:4d:38:6c:16:68:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:82:7B:FA:FB:9E:A5:89:64:9C:67:6A:63:6E:E3:23:F8:64:17:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a88a73-93bb-44b8-90fd-a8b74cf86175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:4c:3c:af:41:cd:68:ae:5e:f4:53:6f:3b:20:17:bd:6d:3b:
         89:38:a1:2a:d5:26:0a:c4:48:6a:b7:fe:93:22:2a:9e:ed:d8:
         f6:51:63:0c:ad:5c:c0:68:80:bc:40:69:b9:12:0b:80:32:55:
         bb:b2:21:08:cd:c6:3b:8d:8b:65:32:f6:29:dc:5f:fa:49:ba:
         6d:e8:fb:7f:97:79:2b:a5:a4:f1:c7:3b:65:95:b1:5e:c7:25:
         51:00:8e:a0:95:c1:f1:c5:a2:ea:0b:9e:44:77:6c:2f:84:f1:
         66:c0:6c:b9:44:4e:e2:34:40:a7:71:14:58:96:ac:f2:40:f0:
         ab:a2:02:1a:51:f1:56:42:7f:a1:b7:71:df:0f:ef:22:2d:5e:
         01:ed:ad:d4:9b:fe:a1:ed:a4:73:9c:bd:5c:92:2f:6c:b0:49:
         52:a1:77:86:b9:56:43:62:62:ec:ee:0b:b2:ca:7e:d3:23:c4:
         19:f4:7f:8a:00:f6:8a:21:e8:56:2b:39:70:3d:e8:b0:3c:b5:
         7a:d2:d8:fa:97:24:48:79:90:17:12:85:61:d2:05:de:74:e9:
         b4:2b:b2:66:94:06:12:f4:4f:17:f6:f1:3b:9e:15:35:03:09:
         e0:75:ac:23:44:b7:1b:0a:75:0c:2f:93:ab:5b:c9:66:2b:d0:
         d2:eb:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:31:10 2024 by rpki-client on console-fra.rpki-client.org