Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa
File:                     7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa (raw, json)
Hash identifier:          yqgEzEqO5Q8Laq1DB7Mq/ZM7ICC2p1lhjJZvSFYPI50=
Subject key identifier:   40:A6:47:75:CB:65:05:06:A8:3D:E3:BC:9D:5C:B5:08:88:CA:6F:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       528813897F9D4C5E1CFDF795CE30E561074C0CD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:88:13:89:7f:9d:4c:5e:1c:fd:f7:95:ce:30:e5:61:07:4c:0c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=4da5528aee4801080bb61b493a2dd96abc43dd839635d19c60b3726bc8bacc64, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:5c:ee:4b:2b:81:3c:16:2a:68:57:82:1d:10:
                    8e:db:ab:62:e2:41:05:8a:9d:bf:db:94:1f:33:cc:
                    8c:f4:f9:32:95:62:bd:67:08:fc:34:ac:69:8e:a9:
                    5e:89:c4:9d:4c:7b:f3:35:ce:09:d8:2a:c8:c5:56:
                    8f:dd:81:e2:cf:42:4f:2c:35:32:07:e4:25:3a:52:
                    c7:2a:11:d9:63:75:76:41:f3:04:67:89:a6:3d:bc:
                    0c:0e:a9:c7:24:af:15:12:14:ef:19:82:15:ca:4b:
                    86:03:3f:c6:ee:62:34:bf:57:7e:b8:1d:32:7a:48:
                    74:11:f7:dc:6f:a4:73:68:f9:58:1f:ca:11:c4:d2:
                    16:e1:29:e4:99:73:65:cf:23:e1:3a:3b:66:28:24:
                    fe:33:42:6a:52:f5:85:a1:a6:88:0a:d3:a3:63:3c:
                    93:5d:3f:15:a5:88:75:f1:19:b2:bc:16:44:ab:c8:
                    35:4c:a1:76:c6:99:93:7a:91:30:8d:c0:6f:47:3b:
                    f7:48:f0:1d:6e:81:1c:8d:71:14:b7:93:14:bd:b1:
                    4a:09:6e:cc:fa:32:6a:fd:2a:8a:7f:2d:1e:5b:8e:
                    24:98:6d:18:1d:90:3c:ae:01:d9:e3:79:f2:79:7c:
                    0d:d8:ae:86:d4:e4:09:4c:13:c7:60:83:7d:6f:68:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A6:47:75:CB:65:05:06:A8:3D:E3:BC:9D:5C:B5:08:88:CA:6F:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f0b3865-60cd-4f45-bb1c-e7e47fac38d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:d8:45:c1:63:e6:ef:7c:fe:75:cd:c5:97:fd:57:96:f1:ad:
         98:6f:fc:00:ca:3a:bd:dc:a6:2d:1e:7d:8c:2f:71:37:47:ed:
         27:aa:e2:f7:fe:67:38:6c:e8:bf:c0:6d:a2:7c:e1:bb:4c:e7:
         f6:63:49:43:b0:9f:e7:fc:35:d1:6f:1d:49:46:e9:68:d8:84:
         82:56:9c:47:17:8c:81:2f:e6:5d:5a:bb:bf:39:cb:a3:ca:f4:
         c2:1c:bb:92:cd:94:1c:52:00:10:3a:33:5e:6a:5e:c5:cf:64:
         22:9a:6c:37:e6:ec:15:70:85:d7:b9:84:7e:20:c3:45:4c:93:
         9b:da:89:7e:05:04:c6:c0:9c:5d:28:42:8c:fc:1d:93:d8:30:
         df:2c:15:a2:4d:97:a6:18:11:cd:cc:d8:46:7f:b7:3d:e5:b0:
         de:bb:f4:15:e6:54:b2:63:60:94:fa:11:5a:f8:aa:95:e6:8c:
         3e:91:04:73:fb:73:ef:8b:1c:3d:34:b1:ec:4d:d4:06:a7:89:
         2a:41:aa:36:12:ab:7b:a4:85:08:1c:ff:04:37:48:b4:3c:89:
         6a:34:05:4b:d7:8f:3f:35:0f:c5:d9:af:e1:35:be:d6:92:ce:
         4e:08:0b:82:1a:14:d4:35:3f:de:84:df:47:a9:0e:de:8b:52:
         d3:28:61:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:13 2024 by rpki-client on console-ams.rpki-client.org