Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e3a1e7f-1e68-43f1-94d4-b2a4d514057f.roa
File:                     7e3a1e7f-1e68-43f1-94d4-b2a4d514057f.roa (raw, json)
Hash identifier:          IlNe1Id5qNfJlBboqonUjOYudt22ywBUj1onpcrpFmQ=
Subject key identifier:   FD:77:33:B6:F9:45:48:09:DC:44:D6:98:47:AE:28:88:AA:36:5C:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26EB37611E5001943003239AEA23FB09ACC91ACA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e3a1e7f-1e68-43f1-94d4-b2a4d514057f.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        149.177.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:eb:37:61:1e:50:01:94:30:03:23:9a:ea:23:fb:09:ac:c9:1a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=657774b6f96486ca16a2fb0c8c1eeed228ec9812f797cd4ac78e96ce72d69706, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:4c:a0:fd:d5:5c:01:26:a5:22:03:33:76:
                    c0:46:75:c8:49:98:9f:06:3a:df:a1:aa:8a:b5:f4:
                    19:30:8e:b1:2f:88:8f:f0:8f:6a:fd:d0:36:14:4b:
                    19:1b:4c:4a:d8:ab:9b:7b:09:71:06:79:29:0c:ac:
                    fe:97:36:f8:ef:f1:0c:00:1a:77:10:75:73:07:63:
                    6b:bd:ff:00:42:bf:1e:29:3b:04:33:a4:ab:b4:71:
                    8c:68:0c:22:79:d2:eb:85:d0:b6:67:f4:0f:50:53:
                    35:84:ab:38:b9:a9:a5:35:3b:36:c8:1a:21:f1:cd:
                    0c:b6:f4:a1:69:71:43:9b:c1:fc:a2:1a:48:b6:3b:
                    08:8c:0b:98:ff:22:61:40:f9:35:91:f2:16:ac:df:
                    b8:2b:7a:08:77:c0:78:8f:69:03:f6:19:2b:82:64:
                    fc:f7:2e:63:7b:cb:b0:96:aa:ec:78:2b:5d:70:22:
                    08:83:05:ed:f2:46:11:b7:6b:c3:3b:43:19:c6:11:
                    ad:9f:25:6f:1c:04:fd:75:c9:b9:94:f2:c6:c7:16:
                    3a:49:73:30:3e:ff:4a:3b:50:13:58:24:6f:fa:43:
                    4c:21:a9:80:73:f3:03:c7:5c:2a:f4:f9:7e:9a:8a:
                    56:79:63:c8:de:58:52:8b:05:68:6c:3c:b8:01:b7:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:77:33:B6:F9:45:48:09:DC:44:D6:98:47:AE:28:88:AA:36:5C:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e3a1e7f-1e68-43f1-94d4-b2a4d514057f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.177.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ca:c7:ca:ad:95:c1:8e:2a:4d:69:8e:c8:88:da:01:c2:2e:ae:
         bf:39:b5:ec:6c:50:f5:03:a3:08:20:53:88:a4:c6:a8:5b:9d:
         a9:96:ff:38:7e:f4:62:0b:8f:38:00:f0:9e:dd:57:c1:23:89:
         21:01:fc:64:aa:ac:c8:ae:1d:17:18:91:2c:5e:e3:a6:f3:0e:
         f1:82:e2:ed:e8:75:bc:e9:d9:55:38:3f:86:da:5a:35:c9:9c:
         46:27:63:e5:74:84:db:cc:a8:65:ae:70:1d:8b:77:29:6a:7e:
         e7:42:0e:43:39:2e:d0:23:b4:11:cf:7b:5e:a2:62:28:49:47:
         0c:c4:87:9a:47:4d:4b:a7:34:f0:93:cd:26:c4:28:6d:4a:60:
         14:a2:9d:e6:96:3c:87:2d:6c:36:43:da:0a:d2:93:9f:0d:39:
         14:7d:a5:83:b9:bb:f9:f6:b0:e2:67:d7:f5:d7:2e:77:c6:df:
         55:f3:dd:e0:73:93:51:5e:66:13:b0:08:21:56:a2:a4:2f:42:
         c9:eb:09:d7:f8:46:07:8c:0f:2c:38:48:06:18:48:72:e5:fd:
         50:58:42:f7:42:a0:ad:f3:df:aa:26:76:14:d1:95:37:c9:91:
         b7:7b:69:df:7a:b3:97:c2:17:73:5f:41:30:94:ba:76:21:12:
         e4:4d:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:48:00 2024 by rpki-client on console-ams.rpki-client.org