Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73c4295f-673a-4c0b-8757-c73b2a18288d.roa
File:                     73c4295f-673a-4c0b-8757-c73b2a18288d.roa (raw, json)
Hash identifier:          hNKuvmT1LCsDYJ3uwnnOgRI70TE2zqa51ZxB+etbZnE=
Subject key identifier:   A0:BF:22:DC:72:B1:1C:C6:72:2F:5F:40:45:C3:8F:26:45:A7:61:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60A2EEC030F698BA70CC83EBD023421C6D75E9B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73c4295f-673a-4c0b-8757-c73b2a18288d.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        167.241.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a2:ee:c0:30:f6:98:ba:70:cc:83:eb:d0:23:42:1c:6d:75:e9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=e061c31f06c93be490ce370678276bd9c26ea407cb7b3f5ce7e484d10a1f4d38, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:1a:6a:95:0b:18:8f:fb:9c:c4:c5:e8:a6:
                    0a:2c:a5:1a:8f:01:b2:c5:91:81:02:93:43:21:08:
                    d5:57:be:16:2a:db:30:51:88:4a:18:6f:82:53:6f:
                    a5:b1:aa:6f:08:60:90:a6:19:10:64:c8:bc:54:13:
                    12:7b:8b:da:e5:ec:de:f2:b9:0a:0b:bd:28:70:a1:
                    4f:53:86:a7:ef:53:90:79:16:d5:29:00:82:f1:a6:
                    f8:12:8f:9e:35:ca:6f:c0:00:54:fd:3d:8f:7d:4c:
                    90:9d:8f:21:e3:cf:5b:0d:fd:ca:96:93:3e:73:df:
                    54:01:db:cc:e5:42:53:f7:f6:55:8a:41:6c:b9:c4:
                    72:e8:a8:32:44:b7:6b:af:89:fd:5a:6c:36:02:bd:
                    73:2d:44:da:f7:ac:e6:73:16:40:76:98:64:4e:2f:
                    ec:37:b8:75:da:6c:9c:79:61:21:7b:5f:b7:e5:8b:
                    fd:43:02:95:e1:dd:39:63:12:55:92:f2:1d:14:d7:
                    b0:76:ad:08:79:36:74:7a:06:e3:fa:c5:d0:ec:9a:
                    a9:e9:56:bc:60:e6:44:e3:a7:1f:c1:1d:ea:30:5f:
                    dc:fd:15:28:c4:64:f0:eb:3d:34:0d:e1:0a:35:9a:
                    86:13:67:cd:ee:fc:61:95:a7:68:d0:4d:96:f7:39:
                    12:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BF:22:DC:72:B1:1C:C6:72:2F:5F:40:45:C3:8F:26:45:A7:61:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73c4295f-673a-4c0b-8757-c73b2a18288d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:16:f6:fc:1b:90:11:fe:5e:9f:ca:ab:89:5c:a3:0e:3a:d0:
         55:4d:73:1e:1f:4d:fe:1f:e3:01:79:d3:06:bb:5b:69:2e:cd:
         a7:bf:c0:e6:dc:b5:c2:fe:d9:db:73:1b:8c:82:36:c2:2f:f9:
         02:db:97:70:e0:61:e9:71:62:ff:0d:58:09:6b:b7:83:d6:2a:
         98:64:41:e6:51:46:ba:35:f7:87:3c:a0:b6:7a:40:6c:67:05:
         15:95:5d:8c:3a:6d:a8:5b:1d:63:79:23:e4:dd:9b:e1:b0:42:
         ea:47:db:8f:d5:21:0b:e1:42:a4:ba:3d:83:f4:85:c7:53:6e:
         48:6e:ab:a8:c4:ac:ab:0f:73:53:68:14:68:0c:c2:39:7d:8a:
         88:60:83:b2:bc:f9:9e:69:1f:f2:05:59:c8:a8:7b:d4:ab:c0:
         df:6a:cf:f1:d3:53:0a:1b:ed:39:3d:f2:4a:6a:73:6a:84:a7:
         98:7e:4b:d1:a6:de:01:59:c3:fa:da:5f:35:3d:1a:4a:4d:20:
         6b:29:f3:6b:c1:ea:17:27:78:b5:64:b8:69:e2:6d:b1:30:88:
         62:24:47:20:79:bc:3e:37:ca:e7:2d:01:d2:73:c5:52:61:3f:
         48:e8:99:71:0f:e6:4c:ad:dd:6a:ed:05:b7:b1:50:5c:34:aa:
         00:8e:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:16 2024 by rpki-client on console-ams.rpki-client.org