Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69198fcd-db41-4ef6-a325-893083eec56b.roa
File:                     69198fcd-db41-4ef6-a325-893083eec56b.roa (raw, json)
Hash identifier:          ARk3B9xXnH45IiJinaj+VZa59RYwJkfyUrUab6HK3ho=
Subject key identifier:   D4:1C:DB:03:AA:22:A5:32:15:0E:E4:06:1F:44:07:E9:5F:79:1B:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60E47A66E09767B2707DEA125CD03BA5634C10F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69198fcd-db41-4ef6-a325-893083eec56b.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        40.229.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e4:7a:66:e0:97:67:b2:70:7d:ea:12:5c:d0:3b:a5:63:4c:10:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=be3f59b7f0710e13ca0c768368fb4244153b16cce6eb34f03c996bccc0b1f040, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:ba:6b:c5:df:d5:73:a3:a1:56:58:45:02:
                    23:c9:51:2b:95:b6:a9:dd:0e:53:21:5c:63:5b:c4:
                    e5:b9:c3:d1:bf:a3:8e:44:c9:f3:f7:0c:68:ad:a2:
                    8b:9c:d0:86:72:a6:0e:70:6d:ed:e5:fb:6d:3d:43:
                    d7:92:4b:d6:bb:b1:1a:19:f0:22:d9:06:52:59:de:
                    c4:21:de:0a:3b:4c:01:61:a4:71:db:3d:b5:f0:4c:
                    7d:8f:bf:b8:d9:5c:08:6e:2f:45:55:47:16:2c:9c:
                    cb:ca:88:4b:b3:a4:47:2d:42:c3:b1:44:6d:0e:77:
                    12:f7:c9:8e:38:7d:37:96:36:53:59:93:30:83:d1:
                    f7:65:95:2a:90:ec:f7:12:6d:31:91:98:58:9b:8b:
                    f3:f5:95:43:13:6b:b4:91:22:50:01:52:0b:98:b1:
                    4a:93:cf:32:61:bd:35:32:25:a3:d9:bf:91:24:40:
                    20:64:e9:a2:ee:44:7d:13:55:cb:68:83:96:10:35:
                    04:b6:0e:b3:13:cb:02:7b:7d:96:2b:7a:c4:bc:e2:
                    78:77:5a:8a:ce:27:75:ea:4e:f8:fc:ba:97:ee:6f:
                    2d:3a:8a:26:ba:37:bd:57:2b:7f:4c:3e:df:b7:e7:
                    3d:c2:df:4c:7d:88:f2:7f:6e:c1:96:18:2d:ca:89:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1C:DB:03:AA:22:A5:32:15:0E:E4:06:1F:44:07:E9:5F:79:1B:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69198fcd-db41-4ef6-a325-893083eec56b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.229.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:cd:32:75:51:d6:7a:6d:66:67:cf:c8:2d:10:d9:39:20:00:
         75:6b:6f:ed:c3:53:22:9c:cc:fd:33:f9:be:d6:a3:8f:12:4e:
         ef:0c:f0:fe:a8:48:51:1a:b2:5c:7f:a7:98:b6:c9:31:83:17:
         eb:19:39:cd:6b:2b:84:f4:8d:61:dc:de:96:79:63:80:0d:3b:
         fc:58:d4:c2:fb:4d:41:f7:e6:9d:43:da:b7:c8:4d:bc:ec:80:
         44:fb:ee:dc:7e:10:9d:d0:f1:81:82:84:da:fc:a6:b3:d9:d3:
         eb:83:ff:68:e2:83:54:b7:6c:58:30:55:d2:cd:be:0c:8d:25:
         47:5f:ed:64:14:dd:71:6f:45:96:31:47:07:9c:4e:bf:69:d7:
         fe:f4:41:87:51:45:d5:e8:c3:89:b8:26:c8:3e:b8:97:6a:f2:
         9b:e2:f6:fc:8d:19:c7:d5:6f:0c:d8:9e:aa:06:7e:86:eb:34:
         bb:a1:6d:c6:cd:be:4b:76:82:d3:94:30:67:d9:3b:00:43:48:
         e5:e2:09:7e:45:c0:46:32:e9:e5:6c:e4:29:2c:09:8a:da:de:
         a1:b7:e7:32:24:ca:64:27:47:8b:52:05:96:1e:8b:18:0e:af:
         24:92:51:c9:40:e1:2c:5e:1d:28:ea:f3:61:9a:fb:2d:3f:84:
         70:f0:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:51:02 2024 by rpki-client on console-fra.rpki-client.org