Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8fb86d-7839-4e6e-a522-2a3aa127735b.roa
File:                     4a8fb86d-7839-4e6e-a522-2a3aa127735b.roa (raw, json)
Hash identifier:          ALJv/HSP19pFeApRPdPAQIswBk99n2LewKvXP+n2UnU=
Subject key identifier:   3B:D5:E0:03:5C:30:BE:DF:5A:EA:98:4E:E6:38:A4:78:AD:7D:19:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       038EB333839C10EAFF2D862A9C68B297CB622412
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8fb86d-7839-4e6e-a522-2a3aa127735b.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        40.165.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 12:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8e:b3:33:83:9c:10:ea:ff:2d:86:2a:9c:68:b2:97:cb:62:24:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=04cd2c349334b28e5b033379956ad783786eba5d20816bdc6e03e1e892988ed0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:09:c1:e7:a9:2c:14:54:dc:ee:ea:0e:1d:
                    a9:d7:76:39:49:33:5f:d3:5e:da:56:1c:90:05:bf:
                    f1:5d:af:e1:05:4b:22:28:89:51:a1:be:ed:c1:ad:
                    83:ea:e2:e5:c0:e6:a2:e4:51:df:e0:3f:71:f7:33:
                    65:af:59:13:c0:72:09:34:f4:e5:a4:82:7b:e8:16:
                    97:22:b8:5e:37:4b:5a:47:dd:72:e2:60:0b:51:70:
                    f0:ed:1e:15:5d:bf:e4:a9:17:31:86:d9:93:8a:8a:
                    e0:a1:e9:a7:c0:ba:e2:2a:50:7a:f5:a8:02:0f:92:
                    9f:5d:85:ac:e4:2c:0f:67:13:43:42:74:f4:5e:59:
                    aa:aa:4b:ee:cd:82:7f:82:2b:3b:70:56:b4:02:e4:
                    ea:93:29:be:92:df:bc:9f:b9:0d:ed:0e:6a:bd:bb:
                    ad:e0:86:7a:1c:82:9c:21:76:f2:9e:1b:af:21:bf:
                    c9:47:9c:78:f3:59:61:39:ca:72:21:35:0f:c3:1a:
                    47:09:06:b0:2c:cf:0e:dd:a8:fa:6e:0a:0d:52:7f:
                    ef:17:7d:31:40:9f:e9:49:a7:6e:34:92:65:51:86:
                    45:39:60:2b:38:46:3f:78:f9:2e:42:c2:f5:1c:73:
                    7b:ae:04:15:07:31:18:4e:79:1e:0d:8a:c0:40:c0:
                    8f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D5:E0:03:5C:30:BE:DF:5A:EA:98:4E:E6:38:A4:78:AD:7D:19:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8fb86d-7839-4e6e-a522-2a3aa127735b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a9:61:ac:b1:58:bb:38:fd:c6:a2:de:5c:2d:66:a9:38:2e:cc:
         ce:9b:9c:c7:c3:8a:58:89:eb:ae:25:8a:5e:cf:7b:40:82:21:
         7d:37:0d:00:46:a0:72:c4:a9:3b:c1:5c:b8:c9:e2:b8:b4:c1:
         d8:6d:07:a2:14:21:66:ea:f1:3e:04:07:fc:fc:dd:21:84:7f:
         c3:33:d7:ad:38:36:5e:2a:87:64:06:3a:bf:38:76:66:a3:7d:
         cf:0f:e1:50:0a:0d:37:af:44:4a:f0:1d:e5:3d:38:b8:23:8d:
         36:9d:e0:ee:c8:4e:bd:be:00:fd:ff:8a:8d:5a:04:fb:0e:b9:
         99:87:15:54:df:9c:68:b9:d3:06:80:0d:a7:7c:97:19:28:77:
         0d:68:67:1a:76:6e:46:b2:e6:27:5b:8f:4d:8c:e7:e1:ca:33:
         28:15:86:82:d0:48:64:33:2b:51:32:4d:41:ff:1e:88:10:3d:
         bb:96:db:61:40:46:b5:9b:bb:8b:e7:e4:1d:00:76:ae:aa:30:
         7d:1e:bd:90:85:2a:50:fa:60:76:f1:1b:08:9f:90:75:ce:d8:
         9a:4c:68:20:9f:dd:fc:db:4e:ed:d9:f4:e3:dc:63:62:90:21:
         98:44:30:97:b7:7e:5e:12:06:eb:fb:60:22:79:f1:94:1a:56:
         f3:e0:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 01:09:15 2024 by rpki-client on console-fra.rpki-client.org