Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83112f49-230e-4af8-abdc-ddcc9f9f0c19.roa
File:                     83112f49-230e-4af8-abdc-ddcc9f9f0c19.roa (raw, json)
Hash identifier:          10oywm8PykmSQo+XhkRhbqiUDBJljBM2uTflTeLK7ag=
Subject key identifier:   4D:94:BF:92:8F:68:E3:F3:9E:07:37:C2:38:7D:63:94:62:B7:66:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       245EC414F3438E59E15297A4E5D17AE05AF0F623
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83112f49-230e-4af8-abdc-ddcc9f9f0c19.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        104.144.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5e:c4:14:f3:43:8e:59:e1:52:97:a4:e5:d1:7a:e0:5a:f0:f6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=134bf4631dc87a8743c8db041b9e698a52ae5da018eb91ac92a6ba4076f9ea19, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:57:30:75:d6:4c:13:86:99:88:ce:8a:c4:
                    7a:27:d9:17:49:f3:11:25:9e:26:89:a6:c1:8e:b7:
                    e2:5e:a1:57:c6:ea:ca:c7:44:ed:12:15:81:3e:df:
                    35:ec:50:2d:0a:7a:3f:bd:08:08:b6:40:23:ef:f5:
                    61:84:15:d1:dc:93:a3:5c:1e:96:aa:1a:bc:10:bc:
                    db:65:1b:9a:60:a7:1e:ba:33:06:c9:7f:af:d7:98:
                    fc:53:33:73:76:1d:76:fa:6f:1b:89:f7:02:08:fb:
                    a1:14:4f:12:08:d6:de:f9:c9:cc:3e:b0:ee:b4:08:
                    c4:91:25:ba:80:d0:c2:b6:55:ce:d2:2e:70:59:35:
                    64:47:6c:fb:ea:69:cb:f8:71:2e:99:4b:c6:17:65:
                    12:01:af:32:7a:c0:c3:a7:99:1a:2a:58:1e:b8:48:
                    fd:5f:45:6d:8d:51:1d:15:a9:2e:a1:e4:d6:d3:a1:
                    d2:ae:d5:63:00:85:9a:cb:84:ec:b1:3f:0d:7b:47:
                    96:08:31:2e:4b:dc:a8:ac:77:c4:69:0f:18:67:8f:
                    0f:98:c5:07:2f:a9:42:2f:67:c4:0f:e7:98:b6:60:
                    7d:9d:51:4d:7f:4c:c4:c1:e6:a9:cb:80:70:e9:40:
                    4e:81:18:7a:2c:fe:07:9d:1d:d8:dd:08:17:27:b1:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:94:BF:92:8F:68:E3:F3:9E:07:37:C2:38:7D:63:94:62:B7:66:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83112f49-230e-4af8-abdc-ddcc9f9f0c19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cc:03:d4:99:19:e3:e5:c8:0b:02:07:d0:b8:43:22:cd:59:46:
         21:f8:f3:80:bb:01:15:66:0b:52:b4:c0:b1:ce:62:db:10:10:
         94:6f:f0:19:c4:8f:e9:36:b8:66:14:70:09:55:09:99:5f:2e:
         ae:54:7a:8c:ea:8f:76:69:f0:c3:31:01:60:65:2e:ea:64:12:
         f3:9e:05:45:d0:8d:3e:08:65:9a:30:ae:d0:44:b2:68:bb:2b:
         86:8b:7c:a9:8d:e9:7f:aa:bc:bc:6e:82:91:a5:f0:70:26:fc:
         16:40:c7:d3:ae:60:c9:f7:ee:5f:5e:a4:ae:84:96:e2:de:cd:
         09:f1:09:da:40:dc:f2:07:72:9d:af:16:3a:7c:e6:5a:70:19:
         7d:dd:31:f4:25:5f:5d:9e:9f:11:00:3a:f3:a7:0a:c2:27:cd:
         10:8b:ab:03:2f:97:d4:6b:f9:13:5a:55:8c:ce:51:06:bf:bf:
         d1:48:e0:cf:8e:9c:dd:cc:37:cc:93:47:e2:a0:7f:a4:f3:8b:
         0f:68:eb:18:68:9e:8d:51:cc:bb:32:55:93:36:da:02:b4:17:
         3c:aa:ce:76:65:84:c0:51:c9:20:7c:99:d5:bc:1a:ae:7b:c7:
         10:e8:b7:63:dd:f3:2f:f3:65:bf:c6:0f:af:13:af:c8:c8:b7:
         c2:b7:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:36 2024 by rpki-client on console-fra.rpki-client.org