Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62da92cf-eb11-4363-ab3b-363e74c78731.roa
File:                     62da92cf-eb11-4363-ab3b-363e74c78731.roa (raw, json)
Hash identifier:          TQITdhV8pDcKhqZ+NdlcZ5kwc6E5cGARIxmIHOMPKss=
Subject key identifier:   D3:77:15:4C:CC:5F:20:22:0E:B8:C1:35:F4:74:09:86:05:BE:71:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31089462F3C902D3F6934F13769DA9DFED47E823
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62da92cf-eb11-4363-ab3b-363e74c78731.roa
Signing time:             Mon 29 Apr 2024 00:00:00 +0000
ROA not before:           Mon 29 Apr 2024 00:00:00 +0000
ROA not after:            Mon 03 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        173.83.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:08:94:62:f3:c9:02:d3:f6:93:4f:13:76:9d:a9:df:ed:47:e8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 29 00:00:00 2024 GMT
            Not After : Jun  3 23:59:59 2024 GMT
        Subject: serialNumber=925d7460c7a4b4868e3181a1a7e06f9bd45f4af40675e3463c8911492261b03a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6c:3e:ff:0a:f6:58:b9:e1:a9:76:62:83:b5:
                    15:3c:f3:a4:6d:ee:eb:f3:56:37:48:79:40:9b:d7:
                    31:07:a4:8a:ac:52:2d:f4:c5:86:2f:3a:1b:a7:95:
                    e0:7e:7d:34:d0:19:a4:cf:d1:68:f3:b4:26:84:ff:
                    3b:00:08:b7:ce:db:16:a8:d4:c9:dc:17:34:03:85:
                    84:0c:ca:84:27:e1:17:e9:e9:b1:aa:02:ed:14:78:
                    b4:23:40:11:7d:b0:a0:76:1f:1d:46:c7:d0:ba:3a:
                    5c:bd:1d:fc:d5:81:3e:70:58:80:b5:d0:cc:62:20:
                    39:9f:77:c4:aa:54:a9:dc:f7:89:82:71:24:11:e1:
                    4a:9f:f7:9e:20:a5:a1:f6:47:01:70:4c:a0:01:5f:
                    fd:19:88:59:c8:0d:1f:bb:47:b0:ff:de:90:1c:19:
                    14:7a:64:34:ff:99:3c:bc:42:dc:28:bd:7e:45:24:
                    9e:47:57:87:10:4d:60:5e:21:eb:ee:02:25:5a:9e:
                    8a:f0:b4:e6:f6:c6:cc:5c:84:64:02:ed:0c:89:05:
                    57:da:bc:ba:ce:67:bf:76:03:dc:8f:c7:a8:61:80:
                    fc:48:b7:6c:d8:cd:09:7b:7f:1f:92:7c:ed:3c:c7:
                    a1:68:34:f6:dd:3a:e9:41:28:c8:ac:18:cd:84:62:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:77:15:4C:CC:5F:20:22:0E:B8:C1:35:F4:74:09:86:05:BE:71:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62da92cf-eb11-4363-ab3b-363e74c78731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:43:8b:ba:f6:fd:43:f9:01:77:6d:cf:31:0c:72:c4:3b:11:
         db:b5:08:12:c2:03:3e:9c:47:49:ba:de:97:88:de:82:bb:76:
         49:8c:33:ba:b6:02:f1:23:aa:f7:8b:14:80:29:0e:0d:99:15:
         af:43:81:bc:fe:d4:39:f3:27:6c:d1:4b:d7:f5:43:66:23:0b:
         43:df:d3:ce:67:bb:62:ce:c8:15:32:ae:61:32:ec:0a:a9:1d:
         5e:a9:8d:b3:8e:58:5c:92:6e:7a:48:fb:05:ac:fa:78:d2:90:
         f6:f0:5e:3b:3f:75:24:79:16:4b:25:fe:b8:38:d7:1d:19:64:
         ab:f9:ad:50:d8:fc:86:e7:48:ec:6f:1b:5a:72:c0:4e:8d:35:
         e6:5c:5a:ca:e4:a2:66:ad:d3:eb:c0:5d:06:fe:1e:1d:0b:e0:
         77:1d:2e:e6:72:22:76:a1:2d:a6:03:dc:52:24:e6:5d:84:59:
         31:7b:bc:0c:c7:eb:4c:18:a5:54:fd:1c:aa:bd:08:b0:1c:8d:
         c3:e4:9f:5b:00:22:9f:91:e6:96:22:5c:8a:59:b6:0b:e7:94:
         f8:4c:55:5e:1a:7f:ab:81:2e:e8:64:9b:a6:0d:2d:af:88:d5:
         9e:f0:e4:5d:72:80:80:b1:e5:06:f7:7f:9b:b4:9e:f9:ef:f6:
         1c:f5:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:11 2024 by rpki-client on console-ams.rpki-client.org