Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83e17373-cd6a-4f46-a2f4-b432f18efd7c.roa
File:                     83e17373-cd6a-4f46-a2f4-b432f18efd7c.roa (raw, json)
Hash identifier:          rRnLV60l+pD/YgE5HqthLfQxLOa0dMsRkAbYEUsXcp8=
Subject key identifier:   84:DE:0F:FE:FA:76:D7:08:B8:0E:96:E0:DD:4C:F8:1B:4D:E0:A3:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       351BC16B0FA7965DB9C9EADA8903489C23ED4FE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83e17373-cd6a-4f46-a2f4-b432f18efd7c.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.94.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1b:c1:6b:0f:a7:96:5d:b9:c9:ea:da:89:03:48:9c:23:ed:4f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=56dca3b21892b1c615a083398698d0f8ea9088a8771cb7919f4dc50cfb54a7d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:41:96:43:ad:d2:bc:7c:2c:20:7f:44:cb:
                    3c:f6:f6:54:da:b5:b0:42:b1:cc:01:9d:fb:c2:16:
                    30:ad:ca:ef:73:e0:51:15:00:10:1f:29:6a:57:5d:
                    d0:87:8c:a2:a0:3c:4d:bd:66:84:55:94:e3:54:ab:
                    b6:5a:f0:e1:2a:97:6b:9f:5a:23:f5:9d:fe:bd:bb:
                    9f:c0:ab:f2:57:c8:f5:ec:31:9c:89:12:33:de:66:
                    9a:b9:67:b0:13:4f:ef:73:e4:90:ae:dc:d1:97:93:
                    58:9d:f8:b4:0a:08:2a:aa:8e:5a:3f:a7:8d:1e:44:
                    ac:42:4e:db:dd:7f:e2:a0:37:23:97:ba:b0:9d:67:
                    ac:39:8d:93:73:66:6e:60:ba:93:83:a6:ba:f5:0f:
                    ed:bd:93:bc:be:72:cb:e1:20:4b:87:dd:36:f6:a9:
                    b9:4c:3e:ab:61:11:3a:3e:2b:c6:88:0a:3a:7a:81:
                    12:bc:94:56:b9:5a:19:0f:33:40:b6:44:b1:66:44:
                    78:2b:c6:26:ff:7f:76:9a:41:80:38:1d:82:ba:bd:
                    12:54:0c:2d:7b:6d:8e:19:cc:d1:52:df:1d:49:57:
                    28:54:f9:8a:06:75:b0:a4:fa:c8:17:4c:74:28:60:
                    ba:02:24:d9:d7:e1:2b:ed:49:d3:1d:2e:ae:be:02:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DE:0F:FE:FA:76:D7:08:B8:0E:96:E0:DD:4C:F8:1B:4D:E0:A3:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83e17373-cd6a-4f46-a2f4-b432f18efd7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:9d:f7:36:5f:bf:f0:1a:16:b1:c9:81:6a:0b:18:49:74:b1:
         58:9f:94:af:fd:2f:c8:f1:f3:b7:32:66:b5:a7:98:67:9b:3f:
         8c:de:77:7a:56:47:5e:57:f5:29:16:cb:b1:66:45:5a:af:a3:
         59:6f:7f:62:a1:85:d6:18:0c:15:cc:6d:33:df:7a:ea:be:56:
         a1:d2:ed:59:50:6a:a5:8c:4e:8c:bb:86:80:20:81:ed:c5:4a:
         c9:6a:06:a0:50:cf:f7:19:36:95:e6:ac:4c:46:5a:93:a0:7f:
         ca:9f:c3:9e:70:0d:0e:c5:e1:fc:50:a2:12:f4:bd:d2:e1:76:
         7c:23:c7:23:df:1b:c9:bb:25:50:1e:4c:c2:70:b6:f4:40:8e:
         36:30:7d:9c:7b:8e:f0:54:7d:99:5f:b6:3a:00:12:53:e0:3c:
         8c:fb:9d:52:e0:6b:0c:84:3d:5d:8f:06:7e:7d:58:e5:b2:c9:
         c7:2e:18:40:4b:03:ae:59:b5:37:e6:87:d7:6f:fd:04:9c:82:
         f2:f6:33:5d:d0:5b:72:f8:d7:90:30:16:89:26:69:53:08:6f:
         06:cf:94:58:9f:71:25:95:d8:34:e6:92:6e:58:3e:a1:6a:b1:
         02:34:fb:ad:97:df:68:51:34:a7:b0:82:30:2f:56:4a:37:a0:
         60:9d:6f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 00:46:03 2024 by rpki-client on console-fra.rpki-client.org