Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68fb6455-21a4-4044-923b-37ddc9951312.roa
File:                     68fb6455-21a4-4044-923b-37ddc9951312.roa (raw, json)
Hash identifier:          W5MosDqpN7OesJa1OPIw+31FJgDltNExHK+wVU3pgvY=
Subject key identifier:   00:84:06:0B:0B:7E:AA:5C:0F:EC:CC:E1:A2:E4:9E:32:BB:94:6E:15
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11529EAB85CB32D422D423A19E13DD1463A26943
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68fb6455-21a4-4044-923b-37ddc9951312.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        79.73.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:52:9e:ab:85:cb:32:d4:22:d4:23:a1:9e:13:dd:14:63:a2:69:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=39d025cd27ca3a150dc4894d2b4510c635601123836fcb3c3a6c39d53a9e4542, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:00:58:a7:72:bd:30:51:1d:6f:d8:f8:dc:
                    9b:5b:da:2c:c3:7d:68:4a:4a:5f:cc:23:39:42:bb:
                    90:63:b0:ed:34:db:1c:3b:4d:70:ec:c2:e2:ee:d7:
                    09:2a:d0:57:9f:86:5a:0d:d4:f8:2c:3e:31:1d:c4:
                    4d:87:8c:c8:87:c8:c4:86:19:c5:b3:90:32:ee:07:
                    9f:70:6e:af:32:ec:52:47:46:4f:34:65:ee:e8:85:
                    1d:58:e3:c4:9b:27:1b:ce:01:ce:51:f7:bf:17:6c:
                    fb:ca:1e:09:0f:38:b7:79:b7:ba:42:a9:da:40:99:
                    bc:95:1d:a6:a8:fe:56:4a:de:7a:fa:2d:7f:7d:3f:
                    9d:f5:4a:9b:56:7f:98:27:c3:1d:6c:fe:0a:ea:61:
                    27:eb:d3:32:00:ef:91:f6:71:32:54:83:3a:22:92:
                    1f:ee:5e:72:5f:6e:e3:c7:2c:c2:cf:a8:7d:5c:eb:
                    e3:ff:94:78:8a:78:f8:8d:4f:a5:f6:d7:1f:9a:ed:
                    41:db:62:14:9c:d2:a9:82:a2:52:67:03:f3:20:2b:
                    74:6d:98:8d:71:60:a0:94:12:2e:6e:86:dc:57:81:
                    f9:ab:54:83:47:05:71:61:93:bb:14:e1:80:19:c2:
                    c3:19:d7:c3:d4:40:2e:ae:40:a0:54:34:1b:e8:10:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:84:06:0B:0B:7E:AA:5C:0F:EC:CC:E1:A2:E4:9E:32:BB:94:6E:15
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68fb6455-21a4-4044-923b-37ddc9951312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.73.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b5:4c:0f:9e:1a:a7:92:1a:a2:f7:a2:3f:12:46:37:a1:6e:fb:
         11:56:c7:86:cb:91:c8:8e:23:10:fa:df:36:5b:df:89:2f:dd:
         26:ad:f1:ea:27:c2:d2:83:cd:67:8f:2b:54:c2:45:fc:93:ef:
         ea:5a:4d:aa:95:7c:9a:bd:d3:b6:c3:37:a7:c4:43:d8:e5:62:
         2c:f7:55:a2:71:fc:7f:f5:c9:fc:f4:52:5d:06:e3:a4:5e:d0:
         b0:9d:97:bc:02:4c:33:cb:b5:fd:67:e2:bd:e9:fe:23:c1:f6:
         9a:ce:b0:87:e1:b3:ee:6c:c4:a5:9a:af:c5:65:3c:76:dc:79:
         af:e0:fa:21:bf:3c:d8:d5:02:c2:be:d3:b5:9f:bc:c1:98:af:
         9c:77:d7:d5:b4:8c:a3:83:b0:1e:07:41:46:f1:af:0b:cf:1b:
         21:ce:15:d2:75:5a:1d:6b:06:9f:df:a9:33:71:9c:4e:4b:92:
         15:57:94:1d:9f:13:24:9d:fb:74:db:0d:2a:b2:f5:9b:02:7e:
         82:3e:0b:2b:dc:e9:60:7a:0c:c8:31:fc:f8:df:19:f5:0e:35:
         cd:5f:80:d7:3a:ff:18:0f:cd:7d:af:a5:8e:72:af:d6:0b:8b:
         49:57:6e:93:0a:04:c0:88:c5:4d:ca:ae:4b:27:96:96:95:8e:
         8a:ef:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:33 2024 by rpki-client on console-fra.rpki-client.org