Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/740695a4-ae7e-44db-9a4c-1ddd5bc66e97.roa
File:                     740695a4-ae7e-44db-9a4c-1ddd5bc66e97.roa (raw, json)
Hash identifier:          qykDFEqlaIIO9fEvi6+jq15utniKUygRF4wkqau9prU=
Subject key identifier:   1F:70:65:A1:49:F5:F6:D2:9C:D0:5F:26:99:19:FC:21:6B:77:E2:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       34644AE70E1D806D52B2C96C9735ACBAED3FCD3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/740695a4-ae7e-44db-9a4c-1ddd5bc66e97.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:64:4a:e7:0e:1d:80:6d:52:b2:c9:6c:97:35:ac:ba:ed:3f:cd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=3c865a844c2918b46f056ed70613519547c17d5b70a8364ceb64185f88a09068, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:46:3f:7e:9d:d7:2e:d2:3b:fb:d5:e1:b7:cd:
                    7b:76:9e:87:e6:7c:48:d4:25:7d:05:fd:f7:7f:78:
                    88:e2:73:90:72:9b:27:30:ec:4e:09:1b:2d:d2:24:
                    9f:6f:2d:13:21:35:2d:00:ec:d2:62:c4:73:d3:52:
                    08:1d:83:08:f5:bb:77:af:09:5c:e9:d6:6a:0a:70:
                    ba:17:3a:b5:5e:88:a5:c2:6b:55:fe:31:e0:dd:c6:
                    96:d7:e6:8e:08:13:d1:b1:ec:98:74:c6:61:cf:9b:
                    1d:ba:84:cf:e3:cc:4a:b3:75:46:17:c3:e5:92:60:
                    3b:15:99:72:e7:d4:7c:a7:32:76:d9:65:42:9e:d2:
                    87:01:09:62:9f:41:d5:9d:c9:de:ae:fe:ee:5b:f4:
                    6b:12:9e:b8:5a:8e:38:f0:a9:f2:b2:d9:9d:38:16:
                    e1:a2:5c:22:a4:9d:26:fb:7e:dc:80:15:cc:4d:70:
                    cc:00:b5:63:2a:22:ef:ea:3a:14:6f:68:bf:c9:ed:
                    34:4c:38:44:02:08:c6:33:87:44:15:4c:11:55:9c:
                    ca:01:09:cc:f3:87:ad:57:ee:cb:45:9a:a4:5f:bd:
                    88:d1:a3:ef:30:89:4c:ca:23:f5:d4:bb:21:3b:b1:
                    7b:3f:4e:f2:4d:0a:c7:11:88:57:cd:7f:40:11:3c:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:70:65:A1:49:F5:F6:D2:9C:D0:5F:26:99:19:FC:21:6B:77:E2:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/740695a4-ae7e-44db-9a4c-1ddd5bc66e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:68:8c:58:1a:d4:8d:0a:7e:be:8b:50:4c:ea:92:a8:a6:5e:
         1a:f8:37:c0:71:a4:87:e3:72:bd:1e:94:47:d4:ec:45:22:28:
         e7:77:81:9f:8a:64:c4:df:23:97:81:61:d5:29:5c:bd:e3:36:
         e5:0f:06:0e:dd:8d:25:ba:3d:be:dd:2c:6f:9b:b5:51:39:46:
         f8:e6:21:ba:a7:a8:8b:c6:2b:5c:33:0b:b0:d3:8a:c1:5f:a8:
         29:c9:d0:3c:f0:75:14:5d:9d:09:51:b4:e2:15:e6:ab:13:5e:
         30:af:03:7e:3d:90:42:98:44:be:33:1f:26:5a:01:cb:93:aa:
         69:f1:4b:6d:94:a9:13:72:7c:c1:20:8a:6a:07:3d:cc:d1:de:
         69:d4:6a:5a:aa:39:70:ad:8e:7c:33:e4:23:16:7e:8d:d9:fc:
         db:ae:96:bf:15:ce:99:d4:67:e2:cc:ce:9f:80:2a:85:f0:bc:
         0f:fb:c2:31:46:92:d1:f6:d4:92:3f:c0:d9:fe:24:45:40:e8:
         e6:41:52:77:19:68:08:51:1f:48:03:9a:7b:fd:88:9e:11:8f:
         15:45:22:8c:6c:2f:24:26:c0:7d:65:8d:ff:bc:f3:93:7d:6e:
         38:5b:f0:dc:48:4c:88:28:cd:e1:06:06:6e:63:25:bb:cf:b6:
         5b:f6:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:56:25 2024 by rpki-client on console-fra.rpki-client.org