Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a9da140-973c-4fd4-b572-92486de0d261.roa
File:                     6a9da140-973c-4fd4-b572-92486de0d261.roa (raw, json)
Hash identifier:          0azf6QZnSZWJHj/M/xuDTrqpeQ7k9apiVUYhqQRWr/Q=
Subject key identifier:   F3:47:C9:08:C7:0A:10:25:F1:54:78:08:90:61:31:FA:C6:4F:03:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63ECA4FBB3DC2EEC1AE0008CD259EFF4F3981B7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a9da140-973c-4fd4-b572-92486de0d261.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        76.211.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ec:a4:fb:b3:dc:2e:ec:1a:e0:00:8c:d2:59:ef:f4:f3:98:1b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=28a8d6946a5854fb8930d5d9080ed6c086506cf0e0b5ba787780c748b79677b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:ec:53:0c:6b:84:d8:b0:ba:df:c1:97:39:
                    f8:43:0e:d6:c7:2b:36:21:5d:6b:8c:48:04:a6:bf:
                    7b:95:18:bb:0e:b3:24:d0:3e:d9:27:16:f5:c9:06:
                    95:fa:88:51:c8:5f:c9:e4:be:df:29:b6:b0:5c:f9:
                    6a:f5:18:46:94:20:88:7e:14:df:ef:e6:95:7c:b0:
                    15:4a:a2:0c:3d:5c:ea:81:41:5b:d4:73:d4:a0:0e:
                    f3:77:93:94:42:cd:e8:9e:22:4a:47:40:35:24:36:
                    c7:c5:0f:64:80:a6:9b:57:46:9e:1d:7b:3b:e9:18:
                    e6:91:0e:26:55:82:ab:5c:b1:19:63:d3:e0:62:e0:
                    d2:f7:45:1a:e5:c2:21:1a:d7:a7:00:b0:e5:2c:fe:
                    5f:c9:9c:c1:03:0e:49:2b:01:b9:3b:2c:73:bf:b9:
                    5e:87:b5:54:ad:05:73:1f:e3:6c:d8:89:d2:2b:78:
                    c8:38:0f:e9:e8:57:3d:a1:17:e5:17:1e:d2:23:1f:
                    9f:16:b2:20:eb:2f:70:7b:09:7f:69:11:b2:84:86:
                    7b:80:45:65:a5:47:f2:3f:04:22:c6:85:ed:a8:4d:
                    e1:f3:44:0b:02:0f:43:f6:33:2f:1b:95:0b:a6:b6:
                    0c:b2:75:55:4b:2c:7b:1b:b8:4e:7c:1a:03:b5:aa:
                    8b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:47:C9:08:C7:0A:10:25:F1:54:78:08:90:61:31:FA:C6:4F:03:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a9da140-973c-4fd4-b572-92486de0d261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.211.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         07:a4:da:48:8f:39:b6:18:6c:47:9f:e5:0b:12:76:37:cd:6d:
         ab:0b:63:04:e1:45:6a:6f:68:a9:be:20:e9:84:89:75:3b:8f:
         a8:54:5d:91:45:64:cf:15:56:d1:84:8e:61:67:c9:1f:d6:6a:
         06:dd:33:05:ea:9c:74:d4:da:f3:91:2d:7f:a5:64:1f:d6:b1:
         32:eb:df:ea:ae:5b:d1:80:93:dd:e7:e2:86:b6:56:34:7e:b9:
         fc:1d:f7:02:a0:b9:e8:7b:3c:5e:a3:7f:f9:52:f9:8d:b7:43:
         6f:5c:11:7d:91:0a:fb:a2:09:22:6f:63:fa:1c:d0:f6:79:8d:
         73:b8:12:33:ad:47:5f:8a:e7:f8:b7:77:c2:25:ed:54:57:64:
         8c:67:ea:ab:cc:be:51:1d:1b:c0:84:2a:e1:8a:eb:3d:fd:8c:
         6a:b4:50:c9:38:93:e8:a6:aa:1f:e5:8b:7a:fd:de:c5:8c:35:
         da:8c:a0:38:95:4c:f0:c6:36:77:ea:b8:48:06:b9:23:87:be:
         ac:9a:80:12:f6:a2:c7:ee:e3:3a:d2:91:6f:69:7a:4a:f3:0d:
         93:b9:c1:cd:2a:f7:41:9a:37:e1:b8:a8:f9:d5:8b:73:2c:14:
         84:c7:46:54:01:6d:09:f7:57:ab:ef:14:3c:bb:bc:d6:28:5d:
         ca:d0:8f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:33 2024 by rpki-client on console-fra.rpki-client.org