Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81f20b3f-a3c5-41dd-8d1c-0a6bb7cea300.roa
File:                     81f20b3f-a3c5-41dd-8d1c-0a6bb7cea300.roa (raw, json)
Hash identifier:          PpMtQI4jxacSDHkWYebALxLMe/uNdhOM2KyRlI3PDk0=
Subject key identifier:   31:2E:74:4C:48:77:30:ED:0D:9E:C2:43:1F:04:ED:43:18:77:0F:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0284CDD26D553A02AB58A2D1F73159E59CB7FB73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81f20b3f-a3c5-41dd-8d1c-0a6bb7cea300.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        66.63.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:84:cd:d2:6d:55:3a:02:ab:58:a2:d1:f7:31:59:e5:9c:b7:fb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=25e025c880314f1fe1006b66f39ac9ca8f14369cbd2955aba8783dd0ec899516, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:f4:cd:c8:f1:f1:bc:00:44:51:24:21:d0:
                    09:68:10:15:d3:e2:d6:ec:5f:06:27:77:1b:42:85:
                    69:3b:c6:7a:f3:c6:01:49:f1:16:23:cf:0e:43:15:
                    2e:73:4a:bd:4b:01:68:0c:18:e6:f4:7c:70:3d:cb:
                    88:5f:b1:80:21:f6:bc:9e:50:cc:67:4f:56:31:f1:
                    7f:1c:21:c1:58:f7:6e:2e:9d:fc:8b:c0:96:e5:0e:
                    0b:ee:55:4b:f5:12:53:50:89:79:95:4b:72:35:09:
                    2f:20:6b:3b:27:50:3e:58:7d:e7:28:7e:09:48:9c:
                    cd:d6:a3:28:2e:5f:5a:91:89:e1:37:7a:41:b2:21:
                    5c:80:1f:99:cf:90:7b:c5:10:03:e3:91:0f:58:a7:
                    50:98:9e:e4:c8:5c:cc:2e:6b:77:58:be:ee:d9:c0:
                    57:0b:8f:e3:d5:c4:b5:2d:2a:6e:1a:3d:f6:64:74:
                    54:19:46:0f:95:43:ed:a0:4e:cd:62:ce:ee:ae:e8:
                    3c:c6:b0:9a:b2:8d:1e:9a:67:d0:25:bc:c6:e4:e2:
                    bb:fb:90:80:54:41:b9:20:52:42:42:03:1d:27:df:
                    01:66:76:3a:0c:14:ce:5b:82:a9:ea:a0:6a:2e:a9:
                    db:54:b5:33:0b:6b:c7:35:e3:a2:5d:18:98:fe:11:
                    c7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2E:74:4C:48:77:30:ED:0D:9E:C2:43:1F:04:ED:43:18:77:0F:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81f20b3f-a3c5-41dd-8d1c-0a6bb7cea300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:b7:bf:09:8c:c4:f2:0d:d5:13:6a:fc:09:9d:8e:bd:7e:
         28:1f:ac:01:5a:a8:60:98:cb:af:d7:47:59:f7:25:da:d3:22:
         6a:e5:3c:02:c7:52:e8:c9:f0:33:0a:bc:c8:a8:48:4e:61:9a:
         dd:6f:0e:3d:7f:04:1b:1e:0b:24:98:88:9e:96:51:61:88:40:
         15:e6:48:d1:54:c3:9d:5b:b5:e4:cc:1a:26:86:7d:2a:9c:1f:
         93:af:ba:f9:d8:75:27:82:f1:2a:25:52:5b:0a:55:5a:b4:1b:
         51:18:93:d7:25:c2:a4:2c:7a:f9:f7:0e:b6:8c:f4:82:49:80:
         d9:61:ef:ef:fd:36:15:86:1a:b4:7b:34:7c:bc:e1:a5:7b:a7:
         ac:01:f3:cc:02:2b:76:d2:88:52:02:2b:80:cc:3c:ac:8f:46:
         d6:f5:b1:6b:fd:87:e8:5a:59:c0:f9:ac:3d:3a:e3:08:0c:ba:
         81:38:73:0a:ab:c7:24:8b:8d:86:87:44:82:5a:5e:d6:c4:b1:
         70:6f:d5:50:84:f9:1c:61:16:31:2b:fa:72:4c:12:e6:15:ad:
         fb:4b:0e:0d:36:2f:36:e3:40:9c:9b:c8:f4:34:c3:26:5a:61:
         69:9e:f4:6a:bf:fc:6f:f9:b0:54:51:57:09:7b:dd:ff:fe:b7:
         98:bd:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:12:11 2024 by rpki-client on console-fra.rpki-client.org