Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/906db6ea-666a-42be-b451-0ef67b2176cb.roa
File:                     906db6ea-666a-42be-b451-0ef67b2176cb.roa (raw, json)
Hash identifier:          3pRtOhb4vtOElKi/i6TjKdFsHFl33Kgg1/JRUco/lvQ=
Subject key identifier:   5B:EF:1C:02:AD:8F:3C:03:41:AF:C3:D0:9E:F6:2F:C6:3E:55:87:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47F2E540E2F7588A40A18AE94386E5280281759C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/906db6ea-666a-42be-b451-0ef67b2176cb.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.232.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f2:e5:40:e2:f7:58:8a:40:a1:8a:e9:43:86:e5:28:02:81:75:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=aa9928ee386dc88b23682d246f678f477a255222c4764d3aeeb3141848cef7f5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:15:c3:96:ad:db:db:c8:ce:ef:5a:52:cd:
                    af:dd:71:f8:1f:81:5b:d2:85:f8:62:be:3b:49:17:
                    e0:d2:c9:a9:e8:49:bc:d0:e5:59:4a:df:e2:e9:2f:
                    0d:08:f8:08:f8:24:87:7f:de:5a:ed:5d:01:04:3c:
                    dd:08:52:05:1e:dc:21:93:fe:ad:3d:96:77:c1:34:
                    c5:2f:0a:78:81:05:71:60:2f:2e:18:cb:ae:f3:9d:
                    3a:47:83:8e:e4:73:42:e2:38:30:7b:bf:7d:a2:36:
                    62:2b:de:ba:07:9a:5f:f2:55:3b:17:0a:66:2d:e7:
                    05:9c:c7:d6:12:51:81:2f:fb:a5:88:9a:00:d4:bf:
                    5a:fe:9d:1e:34:4a:57:a6:95:63:2c:4d:23:bb:0c:
                    9c:98:22:2b:ae:38:95:01:00:51:7d:79:06:ce:2e:
                    9a:78:45:43:dc:ac:33:c9:9d:01:80:91:09:98:d8:
                    37:26:8e:28:0b:b1:45:9f:9f:e4:3d:e4:ca:2c:a0:
                    fd:67:e1:e3:b8:74:67:3a:0e:72:ad:dc:9f:6f:f6:
                    26:5c:1c:15:33:b2:30:68:2d:7e:c6:ac:d7:ad:c8:
                    97:cc:c8:0e:d7:5c:6b:a2:8d:d4:62:d7:a8:9a:a8:
                    62:ad:17:81:98:d9:9d:e6:44:31:c4:2e:fa:d3:4a:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EF:1C:02:AD:8F:3C:03:41:AF:C3:D0:9E:F6:2F:C6:3E:55:87:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/906db6ea-666a-42be-b451-0ef67b2176cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.232.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:5f:84:c0:04:4b:e1:e0:dc:c5:ea:dd:da:a9:1d:67:f3:2e:
         01:a4:4c:bf:dc:da:a7:a6:c8:be:30:34:30:f7:b8:61:ee:d7:
         01:4b:ed:78:9c:0d:82:2a:05:d8:48:55:2c:a6:6b:70:8e:1d:
         b9:68:de:47:8c:5a:98:76:1d:f5:de:3f:b3:7e:a5:b8:ec:cf:
         b9:e2:a3:bb:34:df:1b:bb:52:f7:8f:8f:cd:db:e7:86:23:43:
         b1:25:90:8e:be:69:cc:27:2c:1c:2f:02:13:c8:29:a0:75:50:
         3d:50:38:29:1b:5a:e0:7f:fa:d6:71:f3:49:e7:e9:f2:b5:8b:
         55:76:39:8b:27:ac:6e:96:65:3c:61:38:5f:03:1b:38:fe:39:
         b2:72:ec:07:33:91:c6:dc:e0:e1:aa:e4:41:97:69:18:c6:40:
         72:4e:af:3d:3f:32:59:45:f0:2e:b2:82:de:81:12:81:83:6a:
         01:c9:cb:36:c9:34:8f:4a:08:04:81:5e:17:ea:22:72:87:40:
         5c:f3:81:b2:c9:87:8e:a1:37:44:a6:ea:08:8c:35:c8:4c:9d:
         06:04:07:93:aa:70:e0:c2:ff:72:c0:79:ed:e1:65:27:ca:a0:
         2d:7a:d3:b8:ed:4c:6a:02:f6:60:9a:31:23:a7:55:f4:df:04:
         fa:d1:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:12:44 2024 by rpki-client on console-fra.rpki-client.org