Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa
File:                     83436f15-9744-44ae-bab9-2563f6c055aa.roa (raw, json)
Hash identifier:          rOUhctag7ZodJFKdX7riK1ZXJcwzhkbDuTIRquj058Y=
Subject key identifier:   4C:F7:9B:0A:B5:B6:38:9A:B0:E1:B1:9A:A5:98:89:37:E5:30:C3:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A621624CFDC2A5B544FE9F9AF13F183792F11F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        204.123.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:62:16:24:cf:dc:2a:5b:54:4f:e9:f9:af:13:f1:83:79:2f:11:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=6403718d17664a3f95464523b7f3383f1b9b29bb9871ba9f3e6665f8344e829f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:4c:a6:98:66:8b:68:72:5b:9e:c9:c3:42:
                    4c:f4:15:d5:60:77:a6:98:3c:a3:74:71:06:b4:f8:
                    71:5d:5b:da:18:ee:63:74:09:77:a1:f8:32:7c:38:
                    45:90:72:4f:be:f0:f3:5a:35:d4:f0:9c:8c:f7:a4:
                    b8:fb:eb:60:19:58:e3:0f:09:b3:aa:53:90:4d:05:
                    78:46:73:cb:b7:24:3d:84:a2:db:5d:55:cd:d8:0c:
                    b9:c5:4c:c7:43:da:74:18:64:5f:64:c0:9d:77:71:
                    dd:7c:9a:37:af:22:6f:7f:e2:7e:6b:4d:08:8f:40:
                    c1:01:fc:8c:e2:b2:13:e3:af:ec:93:d1:7c:03:0d:
                    62:1b:0d:26:93:08:06:e1:62:88:5d:00:33:cd:67:
                    2a:41:e8:f4:f0:ad:85:12:f1:f7:e3:69:55:5a:18:
                    75:f1:b1:2e:9d:8e:99:10:cf:a8:b3:de:09:42:77:
                    f7:e9:f3:4d:af:8f:a6:fc:44:b5:27:4c:a4:71:85:
                    26:10:f5:4a:34:69:eb:d0:c9:c1:54:8e:89:12:52:
                    47:2a:19:61:93:76:2a:d5:03:90:3c:21:29:1d:af:
                    e5:ed:3e:fa:f8:82:54:1e:08:13:61:bb:0c:dd:bf:
                    c2:2c:ee:02:e0:37:7d:fc:21:bf:5f:ca:11:3d:30:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F7:9B:0A:B5:B6:38:9A:B0:E1:B1:9A:A5:98:89:37:E5:30:C3:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.123.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7f:be:a7:b9:86:13:be:1c:7d:88:92:06:c1:f0:65:74:dc:8f:
         65:0d:84:59:32:5d:38:1c:49:e9:d0:cb:18:71:18:9e:dc:9a:
         d6:6c:d7:b7:04:9f:f5:ac:b8:98:cf:d9:6e:46:83:4c:4d:47:
         ec:ef:45:c7:37:c5:3a:41:3a:6b:2d:b4:8e:8f:54:83:e2:c6:
         4c:fc:73:c5:84:5a:b2:d4:49:c6:f6:ef:be:e9:78:74:59:ce:
         c9:b5:eb:2d:10:2a:d6:5b:16:b3:4f:26:1c:95:bd:83:be:7e:
         59:30:ad:3d:fd:c2:ee:18:cb:73:b9:71:81:5a:87:d1:e3:3e:
         26:71:80:7c:6d:3d:be:f9:17:7d:e3:80:1f:26:cf:f4:07:38:
         64:61:da:46:e5:cf:a0:78:85:57:bd:83:5a:ac:94:c9:a6:fe:
         e9:e8:64:7b:ab:71:50:a0:79:42:57:0b:b3:88:3e:5b:2b:38:
         c8:4e:6c:0d:84:8f:f2:ac:aa:18:9c:22:00:97:79:46:52:ae:
         4f:bb:44:7a:be:25:ed:49:99:53:03:6f:67:c2:8c:48:83:a1:
         f4:05:b4:b6:34:4e:16:28:8f:2f:6e:2d:a0:6c:55:1a:29:84:
         04:b4:a3:66:b3:dc:f3:b6:06:ba:ce:aa:f3:59:bb:a7:f1:2b:
         19:53:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:34:52 2024 by rpki-client on console-fra.rpki-client.org