Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53962056-e7a3-41c0-a210-c72f154e7fc9.roa
File:                     53962056-e7a3-41c0-a210-c72f154e7fc9.roa (raw, json)
Hash identifier:          xWu+chYTvNNuR4lQ10Ke2I1JCQbvY8fYo4cD/1JT/+w=
Subject key identifier:   30:E9:B0:7C:23:79:EB:B0:B1:9B:5D:F9:2E:D8:8C:4A:41:10:B8:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76BC7887EEBD05267E4C1778DF5AF57D58B5830C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53962056-e7a3-41c0-a210-c72f154e7fc9.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        185.212.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bc:78:87:ee:bd:05:26:7e:4c:17:78:df:5a:f5:7d:58:b5:83:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=10607987cac81538fe99d176b079b91c0c021be72217a0bf4121685469db6803, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:e9:cd:d5:7b:a9:44:70:0d:f7:7f:1c:a9:
                    f3:c1:d4:e8:ee:9d:4f:93:01:3a:26:5b:95:19:af:
                    e0:2a:5a:d6:5b:4b:00:96:51:87:3b:a7:fd:a3:ff:
                    a7:fd:70:8a:b6:53:56:97:b7:9e:00:e3:90:c0:0d:
                    af:38:aa:1f:86:e0:93:d5:39:19:a8:b6:85:76:5e:
                    04:42:64:15:77:35:1b:86:c9:58:63:8a:92:c8:ba:
                    86:08:a1:52:0c:50:91:e6:39:cd:af:74:04:54:16:
                    94:83:f2:a5:be:4b:31:fd:25:9e:19:f9:ec:eb:bd:
                    64:54:fc:5b:0d:af:ad:bb:63:1d:66:01:41:19:87:
                    c7:23:07:38:43:18:65:bf:19:35:d6:4a:eb:58:2b:
                    e4:87:f1:05:19:80:af:06:f6:7f:c1:a9:ed:ad:17:
                    2d:df:f1:ed:4d:76:ca:e0:f5:6a:8a:f3:be:f6:c1:
                    54:36:bd:0a:c7:03:10:cf:96:02:4b:cc:8e:9f:25:
                    c8:9b:17:fd:88:75:1a:8a:ef:6b:1b:77:e6:73:34:
                    fe:51:bd:c9:b7:9a:7f:cf:be:2a:45:c0:ce:96:c7:
                    38:ba:75:df:8e:75:81:73:b1:77:de:c7:4f:8e:33:
                    6d:67:3e:dd:65:60:03:df:ec:46:cb:7d:98:bf:d1:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E9:B0:7C:23:79:EB:B0:B1:9B:5D:F9:2E:D8:8C:4A:41:10:B8:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53962056-e7a3-41c0-a210-c72f154e7fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:f2:c4:f3:a2:2d:c4:6b:d4:62:2f:60:7a:fd:be:19:09:ef:
         d7:a8:2a:49:3a:06:d7:92:60:8d:e7:4f:41:9c:4c:71:6d:59:
         ea:af:91:a0:1f:85:f3:d0:a8:d7:ff:6d:6c:ab:eb:5a:fb:8a:
         61:01:b8:79:2f:5d:50:b9:b9:24:09:27:e7:5e:be:44:87:29:
         39:65:2a:b5:9d:c2:21:f0:ad:cb:a3:c9:ad:61:96:0e:74:d0:
         d4:41:93:0a:b1:34:e5:46:77:3e:54:62:4e:84:51:be:a1:7a:
         ae:80:c6:f5:9a:00:09:ef:3b:b2:78:25:73:f1:81:50:a9:48:
         e6:45:1e:ed:c2:12:6e:02:2c:ea:ce:18:10:78:ff:ae:ab:81:
         c3:8e:f9:9f:9f:9b:c4:9e:b7:86:ec:b6:f2:e9:e0:e3:fc:89:
         d9:fb:be:e3:e1:33:1f:03:dd:f8:27:4f:c7:fc:c8:8b:a8:ba:
         a9:8b:07:8b:6d:3f:31:e8:48:d8:c4:fb:d6:09:8d:48:17:63:
         67:88:c1:f4:52:e4:af:53:04:8f:68:6d:82:b4:15:6a:94:54:
         6d:a5:63:ce:1d:8c:04:58:73:6f:61:fe:8b:3a:a3:c1:fb:17:
         e8:25:03:c3:b8:ca:08:44:7a:b2:d0:f1:1f:d9:85:41:56:2e:
         20:31:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:33:15 2024 by rpki-client on console-fra.rpki-client.org