Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5342dd98-1ab1-46dd-8b66-87fbb2a4626a.roa
File:                     5342dd98-1ab1-46dd-8b66-87fbb2a4626a.roa (raw, json)
Hash identifier:          Cgr014f78+G165CCCxJB8gJmB7TJTS6rGMpJ329NptE=
Subject key identifier:   FC:F5:4A:F5:97:3A:F4:E6:B2:4D:21:11:47:C3:99:4A:90:0C:D1:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DB4FF5777DE6F61BED274D9C7FDD8C4188EF2DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5342dd98-1ab1-46dd-8b66-87fbb2a4626a.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        40.48.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b4:ff:57:77:de:6f:61:be:d2:74:d9:c7:fd:d8:c4:18:8e:f2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=c024a73af919c44c06c14339f6d49f34bd3e538bd55bd075e57cc2c473b3a7bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a3:da:10:b9:9b:ba:5a:19:16:a9:5a:cd:5b:
                    5b:ad:7a:67:d6:03:76:7b:59:a6:dc:ed:ad:62:84:
                    c1:36:51:ad:5d:f9:94:d4:59:69:2f:87:71:8f:e2:
                    03:33:c7:2b:23:85:5c:7c:0f:69:93:71:90:be:97:
                    da:38:dc:e4:e1:cb:61:a0:ef:70:ab:18:f6:b3:c6:
                    38:21:c1:95:7e:11:08:67:7e:26:f2:1b:cb:af:fc:
                    6c:ae:92:0c:2e:5c:c9:71:0a:1a:3d:bf:2d:18:57:
                    28:92:53:f4:ec:58:c7:02:de:e1:c8:b2:bf:94:43:
                    1a:d8:eb:6b:8b:e3:59:28:4b:9b:91:2d:76:bd:d9:
                    06:47:ae:87:3d:21:3a:f6:54:70:fd:96:26:02:f1:
                    32:72:49:47:0d:ad:80:af:b9:c4:82:7c:3c:28:0c:
                    89:3f:34:a5:82:b4:b1:3a:38:dd:da:91:1f:a3:37:
                    1d:a0:4a:94:da:6a:8b:e4:7b:e6:c0:b8:a1:ca:a7:
                    da:85:4f:da:d4:9d:df:06:21:b1:0a:55:dd:0d:60:
                    f8:6f:bc:05:28:33:48:4c:05:09:78:0e:ae:32:60:
                    09:1c:c4:76:c7:cf:17:69:0f:dd:23:cc:37:c2:35:
                    ed:60:93:15:d1:9a:ce:af:2b:e8:cf:27:67:f4:f7:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F5:4A:F5:97:3A:F4:E6:B2:4D:21:11:47:C3:99:4A:90:0C:D1:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5342dd98-1ab1-46dd-8b66-87fbb2a4626a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:71:0f:0c:95:f9:eb:5d:69:55:dc:0d:36:08:31:97:10:d3:
         58:07:ef:1b:5b:ca:52:c2:39:03:30:5c:a8:57:5c:c0:6e:27:
         4e:a3:f5:6f:2c:d5:7a:e2:d3:a4:49:98:f8:32:d3:20:8f:f4:
         3f:0d:42:6d:69:b4:4f:c7:06:82:15:fa:01:5a:7f:ff:8b:6f:
         84:3e:7d:7d:4f:59:57:fd:15:05:2d:a5:66:bc:b2:5b:d8:3c:
         3e:3c:f5:c2:af:c6:3a:3e:37:3d:54:80:af:0b:25:a0:91:b1:
         68:b2:83:40:f9:2d:b7:f4:7a:95:5d:bc:e0:fa:34:40:35:a4:
         5e:ed:e8:ba:1e:a3:64:f8:f2:e1:03:c8:3c:4e:ea:5a:71:a1:
         39:e3:08:80:bd:1c:9a:b1:95:c8:4e:93:38:c7:f4:60:b1:22:
         b9:ec:fc:32:1b:11:2a:d0:73:d7:0d:3e:b7:d4:27:7a:1e:fb:
         05:65:da:05:53:d1:83:50:d7:56:12:86:a2:df:e2:db:ab:56:
         f6:77:ba:d9:2a:93:94:2e:51:88:da:0a:2c:ea:22:1f:ba:b6:
         3f:bc:24:28:3b:dd:f4:75:d8:e5:41:b0:aa:ce:e4:48:35:aa:
         8e:2d:b7:6c:23:9c:43:cf:cd:3e:b2:23:26:25:4f:87:cd:e1:
         35:1b:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:30 2024 by rpki-client on console-fra.rpki-client.org