Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ea6c31-0dc6-42b2-989e-2ae62658190d.roa
File:                     78ea6c31-0dc6-42b2-989e-2ae62658190d.roa (raw, json)
Hash identifier:          /Uh4ISK4EtjnRXbslgv0zT9+T/RDuOJQe4XgHxGR4V8=
Subject key identifier:   86:BB:A3:F4:B8:FC:51:1C:B7:C1:C7:5E:97:83:44:24:A6:6A:4F:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A489C538752EA9B98C525D13CDD1CD370F9466D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ea6c31-0dc6-42b2-989e-2ae62658190d.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        208.124.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:48:9c:53:87:52:ea:9b:98:c5:25:d1:3c:dd:1c:d3:70:f9:46:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=b7fd47a4bedbaa7810c64a3075395624953eb3989ebfdf5786e888a5359d2d45, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:51:2e:80:a3:c6:bd:54:36:b2:ac:bc:49:
                    18:11:67:a3:63:c8:8b:77:a0:bc:37:5e:8f:ae:57:
                    94:07:27:f8:a6:cb:85:32:f6:c8:4b:26:03:ea:70:
                    65:7b:8f:3b:a9:12:01:5d:a0:78:9c:f2:0a:3c:77:
                    87:59:43:5c:8e:72:cd:f0:75:98:3c:10:a2:8e:69:
                    d2:03:f9:db:36:3e:dd:3e:cd:d1:6e:e9:83:df:90:
                    36:0f:3b:8b:c1:07:8a:3a:28:87:01:8f:d1:cc:f1:
                    2b:98:6a:96:79:f2:93:19:f8:f2:7e:98:d2:16:e7:
                    ad:ab:9d:02:af:29:d1:1e:86:42:ea:dd:40:7d:90:
                    54:c4:57:92:39:44:d4:e1:79:55:20:a0:8d:02:1e:
                    5f:bf:59:59:eb:2f:12:ba:a6:b6:ea:33:17:0a:1e:
                    9d:5f:87:6e:d4:2c:55:64:81:01:d8:18:15:fa:3a:
                    fe:32:cd:7f:a4:f8:b4:e0:d9:5d:21:02:be:5b:b6:
                    93:81:a6:06:52:f0:e3:eb:43:39:03:2e:87:08:f1:
                    1f:94:a1:76:e2:d7:40:42:d9:06:6b:15:8d:4d:cc:
                    fb:e4:28:23:37:2d:72:7a:5e:6f:7d:bf:41:19:3f:
                    69:78:57:7c:e3:1c:7f:44:ac:66:34:55:0f:6b:96:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BB:A3:F4:B8:FC:51:1C:B7:C1:C7:5E:97:83:44:24:A6:6A:4F:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ea6c31-0dc6-42b2-989e-2ae62658190d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.124.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bf:1e:ac:2c:de:97:4c:77:6f:62:21:e0:cc:54:09:1a:2a:0d:
         f9:d6:15:99:d8:af:a4:46:76:6d:40:5f:02:f2:46:a8:ea:cb:
         9b:dd:85:04:62:a6:b1:bd:aa:5e:a9:71:c0:cd:da:22:8a:78:
         81:4e:00:d5:fb:ae:a3:77:f3:2f:7b:35:1f:32:f4:c6:9d:d9:
         17:03:79:14:8c:ad:14:5a:c2:34:94:35:58:e1:3b:66:75:a5:
         8b:ad:5f:75:4e:e1:73:6a:d6:9d:ce:4c:ca:2e:50:59:5e:55:
         b3:f8:1a:ef:5f:ce:de:82:81:c1:e5:c3:c8:7e:25:58:ee:c1:
         5e:49:13:9b:2b:20:94:39:91:8c:ad:9a:9b:05:0b:7b:f3:57:
         91:91:8b:10:69:0a:b0:6e:f6:be:72:2a:44:bb:6a:23:5a:31:
         61:1e:e4:11:23:14:e1:48:ce:89:fb:6d:e2:12:ba:99:89:b1:
         f8:6b:f3:d2:57:26:65:0c:36:96:88:9e:38:34:ef:47:7c:2e:
         55:61:03:28:43:c9:f5:45:3c:5f:63:fa:37:28:82:bc:b2:28:
         49:b1:ed:ac:96:20:13:16:46:1f:9d:be:85:37:f6:26:38:99:
         6e:62:05:93:1c:c5:0f:13:d6:3c:1e:fe:f2:fe:17:32:bf:4d:
         2c:19:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:27:59 2024 by rpki-client on console-fra.rpki-client.org