Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/532a54d4-e0b1-487e-9b5d-e01127858779.roa
File:                     532a54d4-e0b1-487e-9b5d-e01127858779.roa (raw, json)
Hash identifier:          F0tsXoE7w7Aen2RtfWi8JYFtEe1kYDYftoJVGm/37mM=
Subject key identifier:   F9:74:9F:00:22:A8:B2:1F:42:E4:0C:C1:F1:3B:4C:5B:EC:B5:65:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       413D216F87E763981D262D1C2B47E58395A4E923
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/532a54d4-e0b1-487e-9b5d-e01127858779.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        216.231.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3d:21:6f:87:e7:63:98:1d:26:2d:1c:2b:47:e5:83:95:a4:e9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=e53d7e37e20708519cba7a70991e660245cbfc00bb8d795c1d0b5a0956269d80, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7e:95:d1:71:5c:12:a7:91:8c:f7:98:fc:21:
                    a2:a1:57:4b:a7:64:e2:39:f1:20:67:b1:6e:b1:e7:
                    7a:4c:df:40:a0:0d:03:d1:a8:a4:80:78:58:6a:12:
                    0e:7b:5f:62:50:90:6e:df:58:0b:8d:c7:e2:6c:18:
                    03:54:c7:cf:bc:08:3b:a9:90:08:6e:c9:7d:19:74:
                    3b:7d:bf:ef:04:70:40:08:38:02:52:92:fb:68:95:
                    07:df:9f:51:b0:63:67:75:54:43:d3:78:de:e6:82:
                    62:51:8a:71:58:71:d3:19:28:7d:53:1f:9a:f1:7e:
                    84:ce:d7:c8:fc:cf:03:6b:c7:85:5e:9a:ae:46:b6:
                    fa:9b:b4:13:8c:7c:94:7d:e1:19:98:8c:02:35:61:
                    95:4a:20:86:ac:e1:9d:24:a6:2b:0d:30:44:87:47:
                    93:68:1f:25:80:82:8e:7f:65:a7:e3:45:5c:56:71:
                    ea:d0:27:13:aa:c6:d8:35:87:18:52:06:a2:ca:1e:
                    2a:ae:07:9c:cf:ee:21:e6:a0:29:0b:b0:31:30:bc:
                    e4:0a:7a:43:5a:b4:89:0e:99:df:5c:5d:a5:c9:22:
                    21:4b:4e:2d:ae:fc:4c:6a:8c:0c:5a:c0:6f:00:49:
                    ff:86:85:30:a2:84:6f:be:ba:a6:05:4e:8e:64:b3:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:74:9F:00:22:A8:B2:1F:42:E4:0C:C1:F1:3B:4C:5B:EC:B5:65:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/532a54d4-e0b1-487e-9b5d-e01127858779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.231.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:e8:24:f0:f5:72:fc:8c:74:b6:e3:14:ae:0d:e7:45:f1:62:
         b9:83:24:b9:1d:a3:51:ae:c7:02:c3:f9:80:67:c6:f7:36:6e:
         6b:42:38:3e:d8:9a:a1:46:a9:8f:29:98:de:e2:0c:30:0b:63:
         a8:7b:fd:0b:f8:10:ca:ad:1c:88:41:7f:11:65:50:9f:5e:b5:
         83:87:a2:f1:27:5a:9a:cc:f8:c3:47:5c:48:d2:9a:85:86:50:
         71:3b:38:3a:a8:bd:f5:98:27:01:6f:8c:c8:64:8c:c7:4d:c2:
         3d:e3:49:7f:fe:a1:2e:0e:28:3f:6d:9a:52:43:48:5d:f4:32:
         82:08:a3:73:61:4b:bf:2d:48:27:4d:b3:a4:27:24:2a:95:60:
         b3:01:cb:0b:e8:6d:9c:53:10:7c:b9:32:ba:fa:01:b1:7d:85:
         8a:66:14:4c:0d:d9:09:f5:2e:2d:6c:8e:e5:78:49:09:8b:87:
         86:ec:5f:06:6a:c5:fe:5b:e1:5d:fa:63:14:d8:76:b5:f7:33:
         19:05:be:90:a4:2b:f7:cf:b9:73:35:8c:7b:9c:3b:65:60:1f:
         4d:c6:46:e7:70:33:56:62:9f:60:c7:23:52:4e:16:d2:7c:aa:
         4b:5d:84:8f:9c:54:93:db:2b:b7:93:55:75:c1:e1:41:16:9c:
         0d:b6:5e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:13 2024 by rpki-client on console-ams.rpki-client.org