Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa
File:                     69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa (raw, json)
Hash identifier:          zQH167Reg1V+0ICCx9DbT2xLIb+D8VuMbs6Oe7GUSfA=
Subject key identifier:   3E:A7:77:07:77:9D:4D:63:68:2E:A8:8E:55:2F:51:4B:34:74:9F:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       09C468587DB73002DB45029CE0DB6A6A0D5C26FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        45.33.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c4:68:58:7d:b7:30:02:db:45:02:9c:e0:db:6a:6a:0d:5c:26:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=274c7e097b23695435b89e828aa7401d0ef923b07cdb2994b5897a31d1f996ac, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f6:aa:1f:28:42:33:c6:42:c3:7a:48:aa:e9:
                    26:f3:ac:93:a6:3f:2d:12:9f:86:95:02:41:1e:73:
                    61:a5:26:67:77:fe:7c:48:25:30:84:5c:11:d0:34:
                    5e:b4:8f:f3:c1:d8:bb:1f:d0:81:b7:88:ab:e9:13:
                    69:38:83:49:23:65:58:fe:eb:55:14:79:95:92:82:
                    40:93:20:e9:d5:aa:72:e4:18:b7:8b:fe:4b:0a:5b:
                    7a:be:f5:04:fd:45:06:db:cb:82:36:39:f5:07:a0:
                    77:db:74:5e:4e:cd:18:e7:28:97:92:42:0f:88:81:
                    b4:eb:0a:75:e3:b0:bd:5f:56:1c:2f:52:df:aa:56:
                    99:a6:a7:82:dd:0d:8a:79:31:69:d1:7c:cc:2d:0d:
                    03:c8:fa:ad:c6:e1:92:ee:9d:c4:6f:41:fb:1b:d1:
                    d6:6c:a7:1b:0d:fa:5d:0c:14:9c:08:59:a1:0b:35:
                    d5:ad:75:3c:47:28:f3:b8:88:fe:c0:af:2c:8f:e4:
                    a7:a6:84:14:40:6a:a1:4b:73:eb:e8:cc:61:31:15:
                    42:9c:73:bb:9b:33:e4:dd:c6:15:88:a0:27:f1:a5:
                    9b:02:c3:52:21:1c:8f:a6:04:28:2a:d0:b2:0e:2b:
                    a4:77:19:29:b2:3c:9e:fa:e1:fb:76:0c:5d:d6:6a:
                    a0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A7:77:07:77:9D:4D:63:68:2E:A8:8E:55:2F:51:4B:34:74:9F:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:3e:e1:b1:99:28:50:76:52:f0:46:d4:28:60:74:62:ed:97:
         34:06:ec:ef:69:7b:3a:a2:e8:74:58:cf:a8:b8:4a:00:9c:90:
         17:5e:ea:a5:b5:b5:02:f7:cc:46:e5:66:20:1f:8a:03:26:78:
         af:90:da:5c:70:88:a3:02:5b:ad:15:f7:10:9e:99:2c:26:dd:
         6f:5e:20:1b:54:43:0a:ed:c0:6b:4d:e8:98:11:7f:cf:d2:66:
         18:4e:ad:88:c6:75:2f:f0:58:4b:14:83:63:fe:99:34:73:28:
         c2:23:c3:76:fb:0f:af:63:05:8e:ce:5b:0c:2e:1d:02:e0:bb:
         d6:24:a2:4b:6b:54:9f:13:6c:0c:6a:62:c2:ab:61:a1:cc:7e:
         c8:71:45:80:fd:fc:98:eb:04:3d:4c:65:e0:4c:46:12:bf:71:
         c9:83:05:84:98:52:c0:1a:44:de:61:75:2e:5e:6b:b7:ec:32:
         a1:e0:b9:bc:88:01:e7:de:4e:8d:12:1a:10:a3:3e:4b:73:f1:
         30:3b:eb:f1:23:13:f4:c8:47:00:66:fa:36:eb:ca:57:f7:35:
         ef:ba:a6:b6:18:dc:95:53:e6:f5:66:50:7d:8f:fa:74:51:27:
         3d:b7:26:58:02:85:11:34:39:00:27:de:13:9e:31:42:87:cb:
         39:33:f7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:54:43 2024 by rpki-client on console-ams.rpki-client.org