Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e1678a-5d09-40b0-82b9-b3d33bf8b8e4.roa
File:                     88e1678a-5d09-40b0-82b9-b3d33bf8b8e4.roa (raw, json)
Hash identifier:          5RbJFctV2fVYTPYQMKoBpIZGQmxRm+cQ5eMcaAGEroQ=
Subject key identifier:   06:4E:FC:41:76:FD:3B:7B:A6:B3:51:95:A6:08:2D:96:7A:A0:B2:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68ED89BF77D4C537AC80F1F94C80FBA48E3559B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e1678a-5d09-40b0-82b9-b3d33bf8b8e4.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        207.95.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ed:89:bf:77:d4:c5:37:ac:80:f1:f9:4c:80:fb:a4:8e:35:59:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=64b48a8a1fd27ed64c08e1c86d88b60b7458410dc2b110ce575461b5466edf92, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b8:7b:6b:46:4a:4d:ee:f0:7e:99:7f:6b:ea:
                    9f:b9:ee:fa:f1:6e:aa:d1:0b:75:d2:df:d5:e0:5c:
                    7c:dd:9a:68:a6:14:20:20:27:7a:b9:32:6d:a6:4d:
                    74:60:67:5e:a7:02:ac:d5:b6:ab:82:6f:e9:4d:72:
                    d3:12:04:73:07:6c:a4:3a:ef:e0:f0:5c:6d:cf:3c:
                    da:1d:b7:2f:4c:c1:d9:ff:33:02:d2:f5:bb:7c:0b:
                    32:46:50:c5:f6:38:40:de:d1:01:99:8a:af:65:4a:
                    ae:67:b4:73:9d:00:0b:8d:a5:7f:15:7e:78:b5:08:
                    86:fe:07:c8:3b:9f:40:3d:3b:d4:d0:1d:26:ef:94:
                    bc:c6:1f:c1:c0:57:61:0a:5b:af:66:a9:f8:ec:75:
                    b4:a4:3d:05:47:7a:43:e7:1a:4e:b1:07:32:61:18:
                    29:3b:75:da:e6:f7:5e:92:c5:c9:6d:24:0d:8f:f2:
                    8d:a2:f0:d4:f5:72:3b:f2:40:fc:65:bf:37:0f:99:
                    6b:12:b3:0d:82:04:d7:19:00:c7:1e:b8:91:1e:16:
                    02:6b:76:53:99:74:42:a7:71:cf:0b:50:46:04:a3:
                    30:28:91:53:56:62:1f:d2:5c:4a:ca:f6:b6:9c:8b:
                    6c:2c:13:23:52:83:be:49:38:65:4e:78:17:75:9f:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4E:FC:41:76:FD:3B:7B:A6:B3:51:95:A6:08:2D:96:7A:A0:B2:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e1678a-5d09-40b0-82b9-b3d33bf8b8e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.95.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:c2:05:2a:37:d4:27:33:09:84:9c:3c:f3:09:50:c5:c8:9a:
         6c:6b:86:ea:04:5d:ea:be:8f:a6:c2:e0:b8:61:01:27:7b:1d:
         7b:cd:29:83:17:dc:e2:93:cb:70:1c:56:f9:f0:55:3a:1c:f4:
         c3:d9:34:88:1e:2d:91:04:a5:f0:74:fe:62:33:e2:c8:b4:1c:
         e2:2f:57:0e:b3:6d:9d:93:e1:f2:48:bc:1d:b8:7b:87:77:30:
         7f:72:9a:c3:76:ef:83:6f:9c:3e:f6:6d:fd:68:ad:61:b3:fc:
         09:9a:f1:05:b5:82:dc:06:75:0c:4b:b6:a1:ba:68:a4:5b:12:
         0b:da:f3:41:b2:53:e4:d0:43:c2:9c:78:54:48:a7:8d:58:82:
         fd:60:c6:7e:bf:33:8f:b4:d8:ac:61:45:25:ef:29:de:f1:38:
         7f:77:6e:5a:08:3d:e3:be:fb:29:b3:f7:59:f8:20:0a:e9:bb:
         8f:53:92:f6:24:04:1e:de:f3:77:c4:14:63:e3:42:c8:34:f6:
         5d:04:62:6b:f2:0c:03:39:c8:b7:69:d7:ab:e7:64:0f:32:36:
         31:74:e0:45:4d:b7:1c:2a:a2:af:22:ae:c8:b9:61:bb:dc:2d:
         18:6d:f2:f1:f2:d0:93:e7:ab:12:ec:8b:b2:28:d3:d6:33:09:
         44:0f:4f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:18 2024 by rpki-client on console-ams.rpki-client.org