Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f3e9380-5f7e-4fd5-a4e7-0973081a800c.roa
File:                     4f3e9380-5f7e-4fd5-a4e7-0973081a800c.roa (raw, json)
Hash identifier:          S7D6gKhao45PUO37asDZVNZdr2Zl//ISQ691xxFRBnU=
Subject key identifier:   48:F0:4E:DA:34:F3:6F:24:7B:50:F5:B3:AD:07:EA:6A:D7:37:84:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42BA68423099A5B759ABEB6A3F8CC1328B15101F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f3e9380-5f7e-4fd5-a4e7-0973081a800c.roa
Signing time:             Sat 27 Apr 2024 00:00:00 +0000
ROA not before:           Sat 27 Apr 2024 00:00:00 +0000
ROA not after:            Sat 01 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        93.76.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ba:68:42:30:99:a5:b7:59:ab:eb:6a:3f:8c:c1:32:8b:15:10:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:00:00 2024 GMT
            Not After : Jun  1 23:59:59 2024 GMT
        Subject: serialNumber=8cdba1de14b1ccbb0d36bd02b85040ad68cc63b53a06edc9bdda4fdf6add4aaa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:ce:b6:56:2c:73:cf:3d:49:d0:f5:5f:e8:
                    5f:20:ba:16:3d:13:1a:53:8b:2f:e7:18:81:78:98:
                    13:db:69:eb:92:19:c8:2b:8e:71:d9:c7:38:74:80:
                    b2:98:83:de:fd:e1:39:e9:c2:b0:71:77:e3:5f:f1:
                    4d:7e:33:80:5c:2c:ba:38:53:b3:98:4e:e6:23:6c:
                    b9:9f:b6:f5:d7:50:d8:85:2d:ff:3a:95:75:90:06:
                    2a:ef:c5:2d:4b:ff:4e:0d:49:34:21:c5:6a:af:3f:
                    5d:87:53:1c:ba:91:c4:66:09:76:b7:af:26:17:9d:
                    6f:7d:39:00:6a:4b:4e:dd:c5:f9:fa:d0:06:eb:f9:
                    40:b8:1a:4a:a3:26:5b:43:0f:17:ec:77:de:77:fa:
                    f4:e8:76:47:46:27:c2:de:01:f6:46:c1:63:e0:ad:
                    1c:ad:2a:60:9c:d4:af:37:df:3e:4a:39:a8:cf:99:
                    5d:e7:c0:c9:7b:18:e5:ad:f3:3a:43:f9:50:6b:db:
                    fc:39:68:e5:a7:65:f4:21:e6:80:fb:c0:e2:0a:c6:
                    00:a5:75:86:e9:ab:39:07:e5:44:6c:db:ab:da:51:
                    6b:68:0d:14:61:e8:63:9f:ba:a2:0e:47:e1:b0:1b:
                    d4:99:47:00:b6:90:08:1e:71:98:a1:44:0d:0e:5c:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F0:4E:DA:34:F3:6F:24:7B:50:F5:B3:AD:07:EA:6A:D7:37:84:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f3e9380-5f7e-4fd5-a4e7-0973081a800c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.76.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         18:f7:df:06:2e:1e:9b:c7:f4:c4:42:65:1c:b0:9a:72:21:6f:
         96:79:8d:98:08:28:5c:cc:06:5c:39:a2:d7:8a:39:15:27:8b:
         7f:ad:53:c2:02:e2:e1:63:e5:f3:b4:8d:7c:b2:d0:3b:eb:f8:
         b5:8f:b2:03:ba:00:c8:df:45:1c:6b:aa:d9:da:64:3c:10:68:
         90:00:c7:e8:af:15:be:ff:3b:04:82:7c:18:20:ef:9b:84:33:
         5f:ee:4c:0c:d3:fe:19:ab:24:7f:bc:cb:22:57:9c:42:90:ea:
         a9:0e:77:bb:2b:5b:63:7a:9f:60:55:72:16:7f:1c:ba:1c:4f:
         b6:8f:24:c3:65:22:fe:b1:29:91:0e:38:8f:dc:39:14:25:14:
         66:8e:d7:0a:9d:1c:1d:46:0b:49:6c:8a:fc:71:2f:13:ff:b5:
         64:cd:c2:7c:aa:c2:68:33:9f:61:44:a2:ab:b0:08:35:27:6f:
         7a:41:a9:80:24:76:6e:24:ee:0e:94:5f:83:c3:ff:6f:18:87:
         6a:17:03:a7:75:73:54:7a:10:74:88:29:87:7b:f7:27:cd:fb:
         59:e1:a7:df:9c:3d:e1:99:11:72:1e:9e:c9:89:30:f8:0c:bb:
         d3:66:80:b5:53:22:0d:2e:19:d8:88:f2:ea:ae:cf:fa:85:66:
         fc:8e:b2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:33:15 2024 by rpki-client on console-fra.rpki-client.org