Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64079091-1b84-4964-9da3-f0728a01d5e6.roa
File:                     64079091-1b84-4964-9da3-f0728a01d5e6.roa (raw, json)
Hash identifier:          cWSQGPgyR5fY/98rwA/zz/r2DUEk73kS8/0TyqcN58Q=
Subject key identifier:   0B:72:5F:72:CF:79:12:C5:FA:09:94:9B:91:17:90:46:7E:1E:4D:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46FEB110AF5407DDBC483908AEA38CE970646D54
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64079091-1b84-4964-9da3-f0728a01d5e6.roa
Signing time:             Mon 06 May 2024 00:00:00 +0000
ROA not before:           Mon 06 May 2024 00:00:00 +0000
ROA not after:            Mon 10 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        140.244.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fe:b1:10:af:54:07:dd:bc:48:39:08:ae:a3:8c:e9:70:64:6d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:00:00 2024 GMT
            Not After : Jun 10 23:59:59 2024 GMT
        Subject: serialNumber=6b767cdc0a3e934a204eae25c6aaf3b68057e534addc7668cd3a891882ed178d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:4f:5f:5d:3b:5a:43:65:8d:4e:e2:8a:d1:
                    6a:ab:cb:40:19:d0:0c:f9:a6:bd:97:8b:ab:8f:ca:
                    1e:8b:ba:80:96:9a:ab:f1:d1:a9:03:88:bd:09:7f:
                    6c:fb:b7:31:4b:01:cb:4e:ae:8a:17:f4:c4:b2:f0:
                    1c:94:5a:b1:d5:fe:7e:bf:71:19:ec:64:40:41:c7:
                    e7:37:0b:ad:24:58:eb:ab:21:0f:2d:ed:43:d6:e2:
                    5a:d9:5b:4f:80:97:8a:99:4d:75:9a:a3:bc:b1:1e:
                    97:b9:d5:38:42:91:6f:e1:65:92:64:4f:a9:f6:b6:
                    64:47:98:64:bd:fc:bc:4a:08:5e:0a:9d:e1:69:a2:
                    3b:57:53:d0:7b:59:af:09:56:cf:b2:9f:25:23:9b:
                    d7:77:53:2a:ef:b6:20:2d:bd:2e:20:0c:c8:80:d0:
                    8c:9d:9e:22:2d:6c:ec:8b:4d:3d:86:3d:9c:b7:58:
                    f8:e3:41:c7:64:71:8a:0d:a9:df:1e:57:86:52:e0:
                    cf:f8:df:3b:1f:ab:ca:5c:e0:58:d9:6f:41:fc:27:
                    a3:6f:7f:eb:47:72:ce:cc:da:05:f4:ad:6f:e8:3b:
                    e5:bf:b6:71:fe:b6:6e:86:8c:1d:19:89:91:3b:64:
                    35:34:8c:44:80:3c:fa:e5:f6:88:f5:b7:78:c3:3f:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:72:5F:72:CF:79:12:C5:FA:09:94:9B:91:17:90:46:7E:1E:4D:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64079091-1b84-4964-9da3-f0728a01d5e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d9:51:58:02:e7:59:76:44:a5:7d:61:7b:25:36:c8:58:17:af:
         1d:6d:c0:fe:f7:80:d9:fd:15:fa:32:fa:ab:f2:6c:04:dc:0e:
         4b:96:3d:df:53:8d:00:42:bc:c6:83:76:f2:e7:ac:ad:2c:84:
         0e:0d:55:5e:cd:a3:bb:97:11:34:54:29:e5:66:25:a8:89:f0:
         f9:d3:d6:5c:dd:e2:50:1b:5d:b3:fc:72:a5:b7:b2:45:b9:e7:
         18:f1:8d:cc:0c:8d:f2:a5:c4:44:67:1c:c3:fc:d8:40:e2:b9:
         21:cb:9a:c4:a4:8f:6b:e0:3b:cd:74:bf:e8:8b:e2:05:e9:fe:
         1c:3c:57:e2:c1:49:77:c4:c9:62:72:90:69:ad:b2:0c:6a:aa:
         be:c1:d1:86:80:55:4a:3a:fa:82:dd:1e:9c:28:84:64:98:b9:
         84:5c:cf:67:9b:b5:82:b6:0b:65:7a:b9:91:9e:20:1a:2a:7f:
         2f:f1:7b:db:12:dd:7c:e7:e8:cb:b1:1e:b6:78:98:b3:f4:f5:
         7c:ac:15:c7:5e:c0:83:79:4e:60:ae:4e:96:1a:46:12:27:bb:
         b8:3c:a6:62:d8:37:dc:7c:59:52:b2:ef:d9:2b:7a:f2:bb:08:
         8e:e5:a1:e5:17:d6:20:82:6f:e5:af:d6:ad:e0:7d:ea:ae:1f:
         a8:80:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:15 2024 by rpki-client on console-ams.rpki-client.org