Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/749bc4ce-83a3-49ff-8fdd-60a12fd7eee6.roa
File:                     749bc4ce-83a3-49ff-8fdd-60a12fd7eee6.roa (raw, json)
Hash identifier:          sMYcaiPn2o3dB3TqcW5rkQEne2mdOpiHBN9xd8lk9gg=
Subject key identifier:   E7:20:1C:08:81:C9:A6:31:9D:D3:00:85:D7:D9:A6:D0:5B:14:A1:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C4337DD5FEA74BA62DEA3CA7C46ED5B3DD5F3E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/749bc4ce-83a3-49ff-8fdd-60a12fd7eee6.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        88.108.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:43:37:dd:5f:ea:74:ba:62:de:a3:ca:7c:46:ed:5b:3d:d5:f3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=c04e19f3c4bc95cc24b1012115e8a26fd83e26ad80a4a53044634466e0c3dc9a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:b5:fc:a5:db:42:35:24:3c:a8:28:d6:49:
                    b4:73:ff:e5:1c:41:fe:0a:93:e5:1b:54:92:63:68:
                    76:e3:c2:31:e7:f8:2a:a4:4b:f4:21:a4:5d:16:bf:
                    82:f8:d5:61:4b:48:95:c5:9f:c0:97:10:4f:6e:15:
                    83:72:99:50:7a:d3:d2:7d:9f:d9:e6:55:a3:76:b7:
                    d1:50:c7:17:22:5f:20:2b:61:95:f1:cc:b7:d7:15:
                    0d:13:37:75:f0:24:00:b6:ca:e4:4a:37:eb:93:00:
                    de:f3:8a:5c:ee:5d:34:55:dc:1d:41:21:5b:85:f0:
                    a5:9f:24:2d:7e:69:45:7d:2e:aa:b4:1c:45:93:e9:
                    bc:f8:24:17:bb:ef:a7:db:1e:01:b2:7c:e1:da:7b:
                    5e:8b:33:be:17:ee:22:14:a0:59:0d:82:8c:98:3b:
                    32:d9:ff:7f:ef:6f:20:9d:29:ac:14:00:9a:23:90:
                    fc:23:35:30:fc:e3:40:b4:67:bf:fb:b1:fc:31:d9:
                    a3:37:6c:3c:bf:4a:14:10:b6:d6:de:ac:05:13:21:
                    34:a5:c0:b3:18:20:10:8a:f2:44:4d:c1:92:74:5d:
                    34:a4:01:eb:c0:0a:61:a5:cf:58:4a:35:14:61:8d:
                    7f:6e:95:18:a8:9e:6a:3d:e5:7f:54:1f:1e:4e:a4:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:20:1C:08:81:C9:A6:31:9D:D3:00:85:D7:D9:A6:D0:5B:14:A1:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/749bc4ce-83a3-49ff-8fdd-60a12fd7eee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.108.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         22:a4:2d:2c:ed:3d:05:a4:e6:4b:4a:91:04:95:0e:5b:84:52:
         c7:ed:9b:a8:79:36:3b:cb:da:df:06:f4:2d:f5:23:e4:51:f1:
         46:41:01:b7:41:8b:9b:21:a7:1f:ac:e7:86:a4:2b:fc:36:57:
         20:e0:56:ee:aa:f5:84:83:0c:bd:98:1a:99:67:42:72:b9:f5:
         f4:4a:46:46:9d:84:d3:a8:7a:e5:34:f8:54:73:ba:5c:32:e2:
         c8:33:d2:3d:a6:ea:aa:85:2d:43:67:83:ce:a0:81:4f:8f:91:
         fc:ff:d5:fb:c1:4d:ef:8e:67:93:64:13:44:a3:12:d6:a2:a8:
         67:17:81:a7:38:ba:7a:e0:04:12:7d:6e:36:77:39:85:38:c3:
         0c:cb:90:04:23:a6:e3:27:93:3f:e0:97:04:05:ed:7a:e1:fe:
         20:4a:53:e1:02:65:44:fe:6a:32:63:be:e3:f4:cf:0c:37:cb:
         58:fc:9b:43:b7:2a:43:ea:80:39:53:97:c9:49:1d:4f:d5:67:
         70:8d:fc:fc:e0:b9:68:70:11:82:2e:a9:45:14:40:95:c4:7a:
         09:3f:da:77:99:44:ec:0f:19:95:6b:a6:e1:1a:80:67:c6:59:
         f9:09:b8:6d:c5:2e:0e:4a:e0:d0:37:91:ef:ef:00:0e:c2:e5:
         ca:2a:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:34 2024 by rpki-client on console-fra.rpki-client.org