Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d85f1a7-bc00-456f-9416-b9d234381145.roa
File:                     5d85f1a7-bc00-456f-9416-b9d234381145.roa (raw, json)
Hash identifier:          cHSplgXXAUI1UqBGuo5uKsMYud5hXqcUltpAfrP3O1k=
Subject key identifier:   5F:61:7F:F9:5A:23:AE:C8:B8:FC:99:DF:4E:84:D3:4C:CD:CA:5B:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       291E77D7C3DAC6C66EAE0B443B6B627B18E3FD44
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d85f1a7-bc00-456f-9416-b9d234381145.roa
Signing time:             Sat 27 Apr 2024 00:00:00 +0000
ROA not before:           Sat 27 Apr 2024 00:00:00 +0000
ROA not after:            Sat 01 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        93.79.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1e:77:d7:c3:da:c6:c6:6e:ae:0b:44:3b:6b:62:7b:18:e3:fd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:00:00 2024 GMT
            Not After : Jun  1 23:59:59 2024 GMT
        Subject: serialNumber=f937c89f18a3d1e1b5709cf5f58f6e3dca7ea284aef7c0fdc9be85255699c05a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:92:d8:52:be:de:e6:64:2e:0d:6c:7f:d0:
                    10:a1:8d:6a:ee:a6:14:6f:3b:65:a8:ff:c8:7e:72:
                    51:38:fc:ab:25:d7:ec:c6:2d:55:ea:8a:2a:21:a4:
                    0a:22:27:c4:21:87:59:da:cb:e1:76:0b:12:dd:c4:
                    77:14:c9:00:d3:0b:17:02:1f:99:28:02:86:65:fa:
                    90:f2:1f:80:86:a1:fc:ff:5b:bd:51:6b:ab:b7:66:
                    34:a8:49:0c:08:cd:9f:d4:33:d5:e0:a3:48:68:1a:
                    d4:3e:b8:b2:ce:39:59:a7:4c:42:f9:23:f4:08:e8:
                    82:fc:71:a9:11:1f:cc:3d:29:92:c3:88:69:fa:52:
                    5d:f8:92:a2:a3:11:54:a3:f0:be:d9:b5:aa:59:57:
                    27:f9:43:26:1b:84:9c:df:5d:b7:5e:f0:f7:4b:ca:
                    a2:bc:dd:c7:14:70:11:0b:1a:62:a6:c5:c5:7c:ee:
                    3b:91:31:ec:b0:e9:8d:51:05:f3:3b:ee:63:44:07:
                    5b:fb:b0:cf:c4:a1:97:6c:92:42:a0:62:65:66:38:
                    79:87:91:59:95:92:41:41:d6:40:50:03:58:8d:22:
                    e2:ca:6c:c5:5e:bf:0d:5f:e0:da:23:06:f9:85:94:
                    99:41:1e:64:4b:e4:50:7d:b4:c7:30:b4:95:9e:15:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:61:7F:F9:5A:23:AE:C8:B8:FC:99:DF:4E:84:D3:4C:CD:CA:5B:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d85f1a7-bc00-456f-9416-b9d234381145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.79.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9e:14:58:49:67:85:ad:bb:26:3e:e4:73:ad:4d:21:1d:19:67:
         25:11:61:e7:e8:6c:95:4c:20:9f:41:ad:7a:1c:2f:62:6a:ae:
         89:5f:08:9b:43:e4:33:07:02:4a:ed:35:8f:47:85:46:b3:0e:
         10:9a:53:21:a2:84:dd:04:e4:57:c2:3a:74:98:08:3e:37:c9:
         40:14:39:cd:9d:d1:a4:89:4a:40:b0:c0:3a:3d:62:83:84:96:
         25:71:3f:66:2b:c4:d5:bd:b7:31:94:b4:3e:56:cc:c2:64:53:
         94:4b:7b:e6:be:e3:45:9a:2c:7d:0d:38:b4:2c:0f:a7:34:34:
         c3:4b:24:a3:71:90:2a:cb:88:8d:f6:00:00:e9:0a:57:f8:a3:
         ec:06:9a:bd:0f:f4:eb:8d:ad:f9:ce:76:e5:b3:8f:79:1f:48:
         cc:5b:4f:67:fb:1e:42:87:60:7c:27:ab:70:a2:49:f6:39:40:
         27:53:82:25:3f:2b:a8:67:f9:9e:65:2d:90:46:a8:bd:3b:dc:
         1c:7a:e1:58:da:94:6f:7e:6f:95:b9:0a:52:99:fa:70:2d:d4:
         ef:48:dd:f9:b4:0c:e6:8b:8f:b5:f3:a5:6f:d1:90:39:dc:cc:
         03:15:3b:a5:dc:ca:05:21:53:50:70:6a:b5:ed:09:e8:ab:7d:
         52:cf:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:10 2024 by rpki-client on console-ams.rpki-client.org