Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa
File:                     6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa (raw, json)
Hash identifier:          /371oLU9AB76tuzQLsqrp7J4U6FJuBBSjvEhLyy7ajA=
Subject key identifier:   01:BE:1D:8D:58:10:55:01:FC:C1:8F:55:8B:2A:CA:22:7A:96:AF:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       309ECA68501F31D1FD99CEFE55CAAA6652C25931
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        107.176.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9e:ca:68:50:1f:31:d1:fd:99:ce:fe:55:ca:aa:66:52:c2:59:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=909e1a6a060199be5e8b0e8ab14923d32eba716fc8a0c725dd1e2d9f427d567e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ed:64:8d:bd:0a:36:a0:01:57:95:39:bb:40:
                    bf:85:35:4a:ce:8a:e7:33:59:42:3d:14:aa:88:b0:
                    95:cb:c6:d4:e0:ce:d0:23:d9:aa:44:08:6a:00:b3:
                    33:a3:26:f0:a9:5a:74:bf:47:70:2d:75:b7:ad:ea:
                    fe:2c:e4:a0:a4:2e:93:6f:ad:4b:46:34:3b:d9:41:
                    13:24:e1:ba:8a:ed:9d:db:77:46:19:e9:f0:a6:c0:
                    88:f6:5b:16:79:44:7b:b7:90:76:93:54:cc:3a:44:
                    38:56:9d:a8:4a:6d:2d:c5:d3:0f:f1:96:c0:5b:13:
                    fb:d4:ff:56:18:10:f2:22:85:79:6a:07:72:1a:db:
                    3a:b4:65:b6:8e:e5:42:33:b1:13:72:d8:79:4e:e7:
                    10:85:bb:24:a1:a1:d8:f2:4e:23:8c:6f:25:61:29:
                    29:a5:be:19:4a:2c:41:10:22:ed:18:02:85:07:c3:
                    d7:51:1e:ca:1a:5a:6a:6e:49:28:b2:e5:83:47:20:
                    f0:bf:1e:e7:09:2b:b8:86:14:93:73:72:23:7a:37:
                    b9:f4:93:8c:14:79:ac:c8:4a:d4:d7:19:b4:87:94:
                    f6:8e:62:ce:41:94:41:ec:b6:34:0d:2b:ce:86:a0:
                    19:f8:a7:cc:77:b7:9f:64:3c:df:67:0a:ca:87:6a:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:1D:8D:58:10:55:01:FC:C1:8F:55:8B:2A:CA:22:7A:96:AF:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.176.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         61:ca:97:e3:27:b2:e4:19:d7:1e:f0:8d:58:81:59:19:60:f1:
         9c:c7:f6:4d:04:3a:fb:8b:43:3b:2f:4a:d5:9b:92:b0:d4:67:
         9e:3e:f6:5a:45:74:dc:37:3e:e6:44:d8:f7:e1:bc:53:8c:51:
         1e:b5:04:87:b8:05:67:c9:da:9d:64:8e:5b:61:da:8c:84:9c:
         54:bc:14:e6:2c:10:69:87:1e:d0:76:dc:5e:94:c7:98:8a:d7:
         5d:3a:0a:c2:fa:5d:98:d9:4a:04:cc:9e:2f:47:82:5b:49:3f:
         9c:11:f9:cd:41:fc:c1:ac:69:e9:0d:68:ba:7e:ce:50:5a:2f:
         04:c1:97:98:c1:e5:60:f5:55:78:23:7d:4a:81:7e:1a:cb:3b:
         ff:40:7a:79:45:87:6d:00:e1:72:c2:4a:ed:4f:5c:a3:31:9e:
         5f:52:e8:d7:98:21:c1:53:ed:10:88:f5:94:cd:35:cf:f6:c5:
         e8:e6:7e:bb:1b:a4:1d:86:13:f8:6b:63:c7:0a:b6:7d:c0:2c:
         9b:a4:36:72:78:6e:59:8f:67:62:38:46:17:d3:82:2c:14:27:
         bd:78:65:d3:0e:fd:de:96:12:30:c4:a3:fc:fd:bf:fd:6c:b2:
         4b:33:59:7a:40:20:80:80:84:40:26:77:34:7a:15:64:48:52:
         cb:b0:76:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:27 2024 by rpki-client on console-ams.rpki-client.org