Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6200a50c-8ed7-448a-9c4c-922bf39eccb0.roa
File:                     6200a50c-8ed7-448a-9c4c-922bf39eccb0.roa (raw, json)
Hash identifier:          28BWK9GWtDJhM37bDnShepCPbOBNo2KCQnPXVsMadCQ=
Subject key identifier:   F1:42:21:C6:CC:34:4F:31:85:7A:54:2B:2A:D8:8D:86:CC:D4:91:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51E93A8562B87BEA4493C03491A8E3611FF11F66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6200a50c-8ed7-448a-9c4c-922bf39eccb0.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        35.18.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e9:3a:85:62:b8:7b:ea:44:93:c0:34:91:a8:e3:61:1f:f1:1f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=4158f071cc5dc948942e37b355cefbeb4545471c75735c80db46546c5dd630c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:38:e3:5d:c2:be:99:14:11:d7:0f:3c:ef:8c:
                    e0:07:19:90:94:fe:8d:17:74:ca:82:d8:04:35:3c:
                    82:4e:7c:61:49:4c:40:c1:d1:12:3f:e9:58:b7:cb:
                    5f:38:3c:ca:6e:bd:eb:49:2f:5b:a4:e8:d1:15:03:
                    5e:f0:e9:e1:15:7c:d4:f8:59:26:3e:6d:d0:36:58:
                    d5:4c:8b:8d:02:4a:99:cc:57:4d:38:fe:64:86:1d:
                    56:90:bc:a1:21:43:e0:1b:5f:25:9a:54:fc:42:6a:
                    5d:68:c0:cf:14:4e:29:76:e6:d8:76:7c:ce:17:34:
                    2b:09:22:90:ae:1c:c3:f5:72:a2:94:5a:ba:de:f3:
                    f1:ef:ad:25:45:55:01:f0:2d:23:20:f2:9b:43:d9:
                    33:36:59:dd:96:4f:d6:7a:bb:25:da:73:9f:e9:a8:
                    20:36:9e:1d:1e:00:87:10:e6:1d:14:d8:36:4e:d9:
                    74:96:69:67:ac:f1:50:d3:95:2f:46:4e:5a:ef:2f:
                    05:e3:e7:b8:d5:11:b4:ec:d6:87:71:f4:1f:87:68:
                    06:ab:47:88:23:a7:e2:0d:f6:59:d8:8a:15:a4:9f:
                    26:0e:7d:c9:60:08:ea:e8:ff:9e:56:9a:e2:99:fd:
                    49:ab:ce:32:01:eb:a0:20:cb:5c:30:1c:9f:cd:25:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:42:21:C6:CC:34:4F:31:85:7A:54:2B:2A:D8:8D:86:CC:D4:91:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6200a50c-8ed7-448a-9c4c-922bf39eccb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.18.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         d8:a8:45:22:10:a0:14:d6:cc:0d:e9:27:2a:a2:e3:28:ee:3d:
         d7:1a:a8:99:fb:e2:92:5e:98:9b:a7:05:13:57:22:9e:43:c7:
         cc:18:dd:43:62:f4:e9:03:93:56:e5:6c:76:04:e9:00:83:66:
         27:35:11:fc:a4:1d:63:5a:21:fc:26:49:a7:69:40:39:63:a8:
         31:a6:f4:31:fb:58:78:c3:72:87:2e:76:d1:b1:e2:a9:5b:dc:
         f1:19:92:82:38:34:8b:1b:53:24:78:20:4e:2e:fb:39:5f:0d:
         2f:83:da:0a:8d:e5:06:0c:b0:b9:40:ca:a0:f9:a5:44:28:91:
         e3:8a:a1:94:ff:98:03:78:08:2d:fa:6c:b5:80:e6:0f:69:69:
         44:ac:d7:e3:32:d2:ae:7f:35:db:aa:b3:9e:ea:26:07:33:92:
         c5:c0:1b:14:f1:c4:46:ac:d5:d2:8f:b7:bc:90:d4:9f:03:09:
         fa:ce:36:5e:7f:a3:6e:b9:af:50:13:4d:b5:61:76:c2:6d:5f:
         b8:a2:26:95:43:59:d8:16:4e:a2:40:b3:d4:5c:eb:13:d6:2f:
         5f:8c:60:1e:94:58:2b:99:54:0c:02:26:d1:68:92:56:d6:93:
         bb:78:3e:7d:5a:fd:e3:ec:8a:82:c4:08:1e:47:19:f2:e5:7a:
         bf:eb:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:52:06 2024 by rpki-client on console-ams.rpki-client.org