Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618f902c-fc69-42ce-8940-445cf07120ee.roa
File:                     618f902c-fc69-42ce-8940-445cf07120ee.roa (raw, json)
Hash identifier:          wMIDN8P/zk2JeJc5ZssNpLNoGiTVt0v4qAIVKSjQp9w=
Subject key identifier:   7D:49:BA:67:9C:36:E5:8A:B5:FF:89:F8:3B:DA:0C:0B:53:D3:AA:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59AAC8C4B80DEBFE2CF3FAC4E8DCB769399F06DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618f902c-fc69-42ce-8940-445cf07120ee.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        208.115.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:aa:c8:c4:b8:0d:eb:fe:2c:f3:fa:c4:e8:dc:b7:69:39:9f:06:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=2288a77a06cb03788d9f1b336fd19c087ba71e97d5198b966bca03632f7df759, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:78:dc:2a:68:d6:14:46:d7:26:88:86:a6:
                    51:da:b8:d5:33:04:bd:36:5e:14:37:4f:32:b7:da:
                    e1:43:fc:a7:bf:91:85:47:6c:9c:2e:9a:4f:0b:d8:
                    ca:7d:8a:af:7b:39:28:78:e1:ff:8a:cc:8b:71:8c:
                    90:b7:17:05:0f:6d:12:72:96:bb:47:c1:9d:a3:76:
                    42:03:a9:4f:a4:4d:b6:d1:93:02:2f:ca:54:71:e6:
                    b3:ba:d8:80:57:d4:58:93:0a:86:10:98:e9:48:65:
                    01:ae:29:b9:e1:7f:ee:54:e2:29:d7:0f:54:dc:29:
                    e4:19:87:f4:0c:09:6f:d3:16:1f:3f:b0:54:75:c6:
                    bc:f8:6a:0f:f1:e5:89:18:9b:db:e5:35:60:69:b8:
                    38:28:fe:e5:36:dd:6b:cd:dc:d7:0f:1f:e4:60:a0:
                    08:67:46:23:34:57:6b:44:1f:ce:31:b5:a6:7f:74:
                    69:18:28:17:dd:bc:0e:14:50:ab:7b:e5:25:36:00:
                    c6:ab:70:03:1d:c1:9d:a4:51:bf:9f:8a:ba:02:77:
                    a7:8f:32:0d:00:66:06:4e:ed:63:9b:9f:9e:c9:ae:
                    c1:00:82:1f:5b:5c:a9:a3:29:bd:29:ff:10:82:a6:
                    92:ee:f5:f0:40:76:e7:bb:59:09:94:f4:0c:6d:ca:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:49:BA:67:9C:36:E5:8A:B5:FF:89:F8:3B:DA:0C:0B:53:D3:AA:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/618f902c-fc69-42ce-8940-445cf07120ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.115.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:38:9e:0f:29:15:37:5b:13:be:fe:21:6d:3c:11:08:36:cd:
         fa:9f:bb:c2:96:75:d3:ff:fd:24:b5:3c:d4:ff:1c:84:c4:f1:
         bb:0e:5a:9e:8c:b6:49:41:06:c1:d7:c0:73:7a:da:fa:eb:34:
         50:ba:ca:f7:41:4c:5c:cc:09:08:97:ba:d8:a8:c3:2f:ce:2e:
         ea:e7:3a:75:1c:bb:6d:86:45:a1:e0:e0:4e:0a:18:32:3d:b1:
         6e:16:94:9d:90:7a:ee:9b:3b:d1:61:10:0d:c5:f1:c1:81:f9:
         d0:e7:06:6e:c7:60:48:40:a5:a2:d7:e6:b7:c1:40:92:31:dc:
         b1:12:87:60:3f:60:6a:cf:91:d4:cb:01:00:1a:90:71:c2:b1:
         d7:5d:b1:f2:70:d0:63:9d:27:c7:12:4a:f3:05:2d:44:06:cd:
         75:33:e5:6c:92:f0:d1:82:5d:c5:81:3b:75:a5:fc:a0:6e:9a:
         4a:1b:6a:e0:99:eb:63:6a:b9:8d:6b:1e:7c:39:e1:8d:c0:ba:
         86:ed:18:f2:35:32:bd:64:7a:55:d3:5c:e1:8e:2a:8c:c2:67:
         e7:c4:a1:8b:32:64:a6:a5:52:29:ff:f5:97:09:84:c0:bf:58:
         68:42:80:c3:aa:41:b5:05:08:88:97:c3:42:89:ab:e5:99:17:
         ab:88:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:19:35 2024 by rpki-client on console-fra.rpki-client.org