Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42373d96-9ede-474f-b4cc-74d907632068.roa
File:                     42373d96-9ede-474f-b4cc-74d907632068.roa (raw, json)
Hash identifier:          kASXbW83vpIzb90CZzpn/GpKd+85o1YcZk1bcNFSMUY=
Subject key identifier:   1F:0E:73:C9:28:84:54:84:A8:1A:16:65:A9:2D:1A:3E:94:5F:9E:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       019D9DFE565AE2A6F0420A496FB5A8B66EBE046A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42373d96-9ede-474f-b4cc-74d907632068.roa
Signing time:             Mon 29 Apr 2024 00:00:00 +0000
ROA not before:           Mon 29 Apr 2024 00:00:00 +0000
ROA not after:            Mon 03 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        173.83.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:fe:56:5a:e2:a6:f0:42:0a:49:6f:b5:a8:b6:6e:be:04:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 29 00:00:00 2024 GMT
            Not After : Jun  3 23:59:59 2024 GMT
        Subject: serialNumber=e50145726d1f66dc791564f3360858467cbc9e94e54063e63fce098953d1adb9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:42:b9:fc:62:34:28:93:ec:2e:7e:2f:88:2f:
                    1f:ca:8c:4e:1d:16:a9:a6:86:e1:8c:ba:d3:c6:42:
                    4d:44:c4:ce:58:02:e1:58:1a:dd:ac:10:78:92:18:
                    38:95:91:1e:78:b2:00:42:b9:1f:74:f2:42:68:82:
                    3b:46:77:88:0c:23:69:12:5a:4b:02:89:68:9e:c3:
                    64:d2:ab:b4:76:ed:1c:e4:2f:7d:20:f1:b3:97:d1:
                    0b:54:6d:81:47:6d:e1:49:bd:81:ab:11:93:ba:c0:
                    c8:c8:bf:18:27:08:50:f6:1f:89:85:1c:18:bd:a5:
                    31:30:c0:5c:79:98:92:9d:e8:88:9c:d3:97:2f:34:
                    05:ef:2c:66:dc:d1:cb:08:05:17:86:5d:62:b4:87:
                    8f:44:2f:e7:fc:32:81:78:40:07:db:8d:53:95:33:
                    3c:67:e3:e6:41:ca:34:d3:32:43:41:64:8f:1a:fc:
                    06:e5:07:f8:bf:ce:01:f2:e5:95:0f:04:9d:0e:f2:
                    bc:59:38:75:91:a3:eb:aa:49:83:95:ef:8a:93:3e:
                    30:0c:fe:2b:cd:6a:18:87:b3:c9:bb:5f:0c:9a:1d:
                    ce:bc:8e:a6:d8:a0:49:f5:39:41:ee:0d:4f:a5:f5:
                    91:9c:87:8f:3e:c4:e5:63:f7:e1:39:59:bd:f1:38:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0E:73:C9:28:84:54:84:A8:1A:16:65:A9:2D:1A:3E:94:5F:9E:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42373d96-9ede-474f-b4cc-74d907632068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:74:d3:64:3f:c1:c1:39:c4:72:1f:2d:b3:71:c7:8c:16:c4:
         fe:57:24:d8:99:40:09:38:31:77:f0:9c:58:d4:4c:92:d0:a6:
         29:24:47:22:bc:7f:62:82:31:83:da:31:eb:fd:81:34:1c:4c:
         c4:9c:99:4a:93:2f:1b:fc:ec:82:50:2c:6a:01:12:a2:f2:dc:
         8d:be:be:f3:2c:65:9d:43:03:df:91:6a:c8:81:df:bf:07:c1:
         a8:7f:18:6d:4d:5d:b0:e9:9c:69:18:ae:11:28:df:0f:39:49:
         d0:cf:d1:86:d9:0b:71:d0:d7:4c:24:6f:90:d8:65:78:ed:5e:
         ad:fb:8f:c6:7f:30:88:12:03:a0:f1:83:e9:71:86:41:21:4a:
         97:c6:51:4b:5c:0e:b0:5b:6d:fa:71:b4:50:72:d1:72:36:ba:
         41:fc:48:92:7a:64:c6:fa:1e:b7:33:6d:dc:df:31:19:e0:6a:
         e8:e9:16:37:75:b2:d0:01:1c:ea:b9:e8:7a:d5:90:4b:25:cc:
         c7:36:8d:ae:13:fb:5e:3b:61:6e:89:fc:68:68:13:95:16:f3:
         42:63:45:e4:9d:be:ef:9f:6f:95:34:66:ca:71:aa:56:91:f0:
         04:14:8f:e3:72:3f:01:4e:68:78:92:a1:e8:f2:82:86:7a:a9:
         1c:b7:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:09 2024 by rpki-client on console-ams.rpki-client.org