Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/547928a1-7996-4689-ac22-50da4d231b93.roa
File:                     547928a1-7996-4689-ac22-50da4d231b93.roa (raw, json)
Hash identifier:          rU8Ro3eRphWKnPg7IOC1iEj6V/nmNTWEBli2yHNZ3w0=
Subject key identifier:   EA:46:52:B8:80:8A:4E:B8:FD:92:44:8A:E1:F9:65:75:21:5F:FF:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5007144EFDA366F6B1F04BF430A083E8BF40EE69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/547928a1-7996-4689-ac22-50da4d231b93.roa
Signing time:             Mon 06 May 2024 00:00:00 +0000
ROA not before:           Mon 06 May 2024 00:00:00 +0000
ROA not after:            Mon 10 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        99.144.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:07:14:4e:fd:a3:66:f6:b1:f0:4b:f4:30:a0:83:e8:bf:40:ee:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:00:00 2024 GMT
            Not After : Jun 10 23:59:59 2024 GMT
        Subject: serialNumber=243f57eb7a780cbdeffd98f5b0518b15fb8e56baa3f856aea528bf0ba09d7200, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:65:b7:6e:8f:8e:23:f9:15:fa:f0:84:10:
                    ea:76:83:ed:01:4a:22:9b:aa:7a:c8:51:0f:2f:c3:
                    cd:44:5c:db:c2:8d:b9:4d:3e:57:8c:68:fa:53:31:
                    a7:2b:7a:a3:f9:34:03:49:df:14:df:fc:f5:9f:9b:
                    39:99:b4:2d:28:20:8a:4d:25:e3:84:e9:b8:47:ed:
                    c0:8c:f7:01:87:ff:5d:e4:2c:10:80:b0:89:e0:09:
                    82:1b:52:0e:28:4c:94:ed:c2:bb:3d:78:33:c0:a0:
                    8c:64:8c:af:2a:ee:a9:14:03:ff:da:bc:7e:e4:04:
                    d7:5c:3b:48:75:a3:32:65:bc:33:ae:fb:ee:f6:63:
                    b3:0a:c9:0a:88:f2:a4:e2:25:2c:9c:8f:d1:6e:72:
                    60:f6:a0:10:2f:d3:69:9a:d8:35:1d:ef:de:4c:e8:
                    21:95:71:df:96:5e:42:f0:34:4a:18:ed:a4:c1:f2:
                    b0:42:ce:53:ac:60:b0:f8:26:20:ad:bb:23:02:4d:
                    34:21:a3:40:96:d8:6e:a4:ae:41:de:6c:75:dd:b8:
                    df:ef:65:d4:4c:26:7c:50:74:51:c9:2a:43:e3:d2:
                    55:82:5d:d3:88:30:4b:50:df:91:20:67:45:0d:9b:
                    9e:30:57:94:af:71:4b:f9:f5:ff:05:52:12:26:19:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:46:52:B8:80:8A:4E:B8:FD:92:44:8A:E1:F9:65:75:21:5F:FF:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/547928a1-7996-4689-ac22-50da4d231b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.144.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:af:93:f4:71:65:01:22:94:12:0c:f4:db:ee:e0:b6:f5:
         ee:5a:b5:63:d7:d0:5d:44:07:f8:55:18:18:30:eb:35:82:e9:
         17:c1:fe:75:77:db:4d:c1:3a:ac:c7:20:cc:9d:79:39:73:f5:
         38:f6:ce:95:77:e4:46:45:a4:4e:d9:61:0a:b2:0b:b5:f6:75:
         98:7f:8f:e8:5e:7a:ff:9b:8a:21:d2:78:58:21:07:ca:19:08:
         41:2f:92:68:b7:38:80:a4:82:fd:08:3d:a8:c7:14:5f:64:b6:
         04:0a:6f:7c:91:48:c7:eb:4e:64:64:41:92:ca:bd:65:94:7c:
         22:f0:93:14:b5:7b:fb:ad:ff:08:cd:53:a9:72:71:1f:2d:1f:
         de:26:ee:d3:c3:c6:d0:c8:67:82:d2:a5:c9:88:5f:55:9b:7d:
         5d:cb:d6:dd:69:74:77:71:30:05:4e:ba:b5:60:9f:ad:36:4a:
         e1:b3:83:c5:ca:b0:c3:84:0a:68:22:ba:b5:cb:7b:36:28:d3:
         40:9a:d6:2b:af:57:a8:83:8b:17:f2:a5:f2:21:eb:ab:d6:f2:
         9f:67:74:4d:13:44:ff:f5:92:1b:7f:b1:e2:f8:af:dd:8f:cf:
         c3:64:a0:4e:21:9d:2b:70:a8:25:1e:c3:cd:45:f6:60:95:35:
         62:56:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:46:46 2024 by rpki-client on console-ams.rpki-client.org