Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59273a5d-fc4f-4165-953b-523b8218e2fc.roa
File:                     59273a5d-fc4f-4165-953b-523b8218e2fc.roa (raw, json)
Hash identifier:          07VPrkjnHtVqVoxwW42e2GJDJsuhuJzD6TkzkaAcy+k=
Subject key identifier:   F5:AB:17:46:7B:95:38:89:73:38:3E:19:C1:3E:6F:62:C4:BD:1F:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       206D7510E4A13F11EDBCDFAF716CCC65D2D22750
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59273a5d-fc4f-4165-953b-523b8218e2fc.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        65.176.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6d:75:10:e4:a1:3f:11:ed:bc:df:af:71:6c:cc:65:d2:d2:27:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=ff3234659bc3534f863c565e2aa1c03ce02a10a4ce9d16c9eef9d1d7610e9061, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:9c:82:47:a1:f6:ff:a8:9e:8f:e1:9d:29:14:
                    a1:ac:87:4a:c2:d9:6a:6a:b2:ea:85:64:49:c8:e4:
                    5a:af:36:52:68:1c:7d:da:e8:69:65:51:37:cb:52:
                    19:96:53:5c:ae:9d:4d:29:bc:ca:29:29:08:f8:d2:
                    0b:79:77:ae:69:42:79:a2:a0:1b:d6:96:e7:4e:f3:
                    ed:b5:89:6d:82:8c:1a:22:2a:da:b4:81:6c:10:49:
                    d0:59:2d:9e:36:69:a3:c7:c5:5c:02:29:33:20:2a:
                    9c:e2:97:e1:53:26:8b:0c:e3:6f:50:4a:7b:40:2d:
                    f2:85:96:04:f1:45:ef:17:54:81:fa:9b:e3:30:a3:
                    e2:dd:d9:7a:2f:61:06:b4:1c:af:2d:0e:98:62:33:
                    95:ee:de:6d:c1:6a:f5:17:0a:bf:5b:3f:18:3e:e8:
                    76:05:f1:9d:e9:18:f8:d7:eb:80:c5:f5:21:c1:a2:
                    f3:15:df:a7:fa:99:fe:95:42:c2:89:2d:15:c2:48:
                    2e:4b:97:af:5a:3f:95:b8:07:e9:90:fa:6f:7f:8f:
                    eb:d1:78:d4:70:79:c0:d9:70:95:da:e0:f6:c6:4f:
                    b0:9b:27:84:d6:1f:d8:7d:aa:ec:9c:e8:9f:38:34:
                    91:43:c2:cb:02:4b:2d:89:3e:f6:2a:9e:e6:7b:05:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:17:46:7B:95:38:89:73:38:3E:19:C1:3E:6F:62:C4:BD:1F:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59273a5d-fc4f-4165-953b-523b8218e2fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.176.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         7b:ac:15:42:28:78:18:73:b9:35:ab:c9:83:be:5e:fd:5e:b2:
         5c:42:45:37:89:0a:33:f1:29:4d:c5:02:89:2b:df:c4:50:e1:
         26:5f:60:54:32:7b:c9:1f:62:09:4f:80:cf:88:60:88:e8:26:
         4b:7e:96:be:86:3c:84:e2:10:07:d2:4e:db:8f:75:05:84:ab:
         b9:ab:7e:0e:c8:6c:42:d1:21:d4:5f:69:79:12:28:16:d5:15:
         73:be:32:1c:e8:e2:30:52:27:50:6b:c7:bc:f8:21:cc:53:c8:
         29:7d:a8:db:3b:62:82:d2:79:4f:4b:3c:c6:fc:14:71:a2:bd:
         f1:f1:43:94:c6:cd:98:61:6d:f8:8e:ca:67:42:6b:10:c6:e7:
         e2:0d:e0:e8:57:c8:3f:c5:29:5d:8e:24:6a:a0:5a:47:d7:92:
         5b:79:90:86:32:ae:64:ec:fc:7d:30:fb:83:00:80:d1:ca:a4:
         8c:f3:44:17:82:6d:d6:05:05:56:1a:c9:93:54:08:ea:f5:c8:
         08:e7:9c:14:1c:0e:20:1b:59:5e:44:91:10:78:9f:73:92:ae:
         b6:87:77:73:96:01:b1:31:a3:53:c1:79:f4:0c:1c:7f:d9:f8:
         3d:bc:70:89:86:f9:e1:47:3b:8d:a0:f6:d8:dd:bd:c4:4b:16:
         1c:3a:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:46:46 2024 by rpki-client on console-ams.rpki-client.org