Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a2c121-7afd-4f02-a6c6-7fa5cf35f7b4.roa
File:                     52a2c121-7afd-4f02-a6c6-7fa5cf35f7b4.roa (raw, json)
Hash identifier:          Y4zT/5c+1ms0OlHrMvQGEqg2FqninQgK1WyXzLNQeD8=
Subject key identifier:   DD:A2:4E:52:6E:A6:C3:2A:00:37:8A:C7:D4:06:30:8D:0B:98:AC:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65AA0DB0FB34213EEDD479C406D05088419D2C11
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a2c121-7afd-4f02-a6c6-7fa5cf35f7b4.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        199.183.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:aa:0d:b0:fb:34:21:3e:ed:d4:79:c4:06:d0:50:88:41:9d:2c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=9611d03b2d238eb1951624a1fefaf25d5b6507f401adf2d804d4281e19eb1d86, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:5f:e7:a0:a8:63:29:6a:8c:a1:1c:ca:f9:
                    06:86:71:d9:7a:11:bf:e6:9f:9e:31:19:ba:35:c3:
                    c5:58:f2:89:55:9e:6f:5a:ec:71:b4:49:9e:84:f5:
                    62:f9:87:29:6d:73:90:0c:0c:7c:6b:0e:2d:17:9c:
                    6d:5a:3e:df:0a:62:98:50:08:a6:77:f5:ef:e6:7d:
                    5d:6c:68:43:99:46:73:df:97:56:13:8c:87:8b:6c:
                    8f:3c:ce:50:ac:1e:4e:83:8c:01:ba:31:ff:1d:14:
                    dd:95:f1:d5:20:13:90:5d:49:d0:dd:f4:df:68:db:
                    3e:d1:ba:29:91:5f:6c:db:f6:e3:e9:62:85:c7:d4:
                    56:3f:4b:a7:dd:77:d2:e3:c9:2e:f3:45:f1:0c:19:
                    8f:2e:45:f5:fa:6c:e3:9f:46:6d:c1:ec:63:a1:b0:
                    a7:da:1b:cf:2c:0e:c0:85:95:8a:8b:58:a3:25:f4:
                    88:3f:9b:de:40:c5:9d:a7:71:a0:00:2a:d2:aa:b1:
                    62:11:31:86:0a:bf:ee:d3:bc:f1:49:a5:23:72:ea:
                    19:45:eb:dc:5a:a0:f1:96:01:34:d8:3e:c7:d6:ba:
                    c5:c6:9c:d5:0c:8e:ae:fa:dc:47:af:eb:9a:83:fb:
                    21:80:57:eb:b6:75:48:72:62:d7:e1:e9:12:b7:91:
                    ed:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:4E:52:6E:A6:C3:2A:00:37:8A:C7:D4:06:30:8D:0B:98:AC:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a2c121-7afd-4f02-a6c6-7fa5cf35f7b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.183.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:45:ec:1d:5f:f5:07:64:2f:89:54:e6:a1:a4:ca:92:bf:
         75:88:51:cc:4e:bc:af:3d:56:04:b4:ed:9b:4b:b2:17:48:d3:
         b5:5c:bd:da:6f:ba:91:86:06:50:67:5c:e4:e4:d7:ed:40:d0:
         d4:9e:c7:89:8e:68:23:87:37:8e:8d:4a:02:5f:c4:a7:9c:65:
         87:a2:c5:a3:3c:07:c1:06:e1:07:f2:fb:43:c9:3b:64:a1:6e:
         b0:92:60:91:f0:f5:9e:55:a0:6b:7a:30:82:75:e9:52:20:0b:
         4d:dd:6c:c2:17:c8:43:f9:d2:a5:d5:af:7f:55:46:f4:52:29:
         de:b0:de:2e:9d:d9:cc:d1:42:8e:a8:ce:d5:3b:7e:ff:0f:96:
         c8:14:53:d9:87:70:d1:89:39:72:53:fd:27:db:a2:fe:85:eb:
         1c:9f:08:89:84:0f:d2:f8:73:80:ba:2d:29:98:c4:b1:3f:c0:
         b1:25:97:4b:e0:fb:35:fd:f8:12:bb:73:be:5b:35:ec:32:4f:
         81:a9:94:a3:7b:1a:d9:34:5d:d5:15:80:81:38:21:fc:80:60:
         b7:c7:2a:7d:d4:2c:b5:26:df:c6:06:92:3a:a8:6c:f3:02:71:
         30:2d:7d:78:fe:a1:07:a6:86:e9:38:c3:58:16:8d:9e:68:bd:
         19:96:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:13 2024 by rpki-client on console-ams.rpki-client.org