Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/967a27ba-1aa0-4102-b736-357bdb52d9b8.roa
File:                     967a27ba-1aa0-4102-b736-357bdb52d9b8.roa (raw, json)
Hash identifier:          KjuCkZXowDke/Cs2piEKhC32yvTPQn/HctUO+2MGfyg=
Subject key identifier:   B4:BA:A8:02:84:B1:A7:D4:57:94:7B:EB:10:3C:B2:7C:46:F5:4D:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       036366540E46A22DAD442D3F74EB1012E0A90998
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/967a27ba-1aa0-4102-b736-357bdb52d9b8.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        185.251.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:63:66:54:0e:46:a2:2d:ad:44:2d:3f:74:eb:10:12:e0:a9:09:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=67e69c63a281f1df35fc4e075a09cd460beb1feef037641d9ce36ffd218e6cb3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:2c:79:9b:a0:28:cc:7a:b4:7a:db:71:0d:
                    11:ce:93:6f:e4:39:1e:84:12:1a:d1:23:35:3d:a3:
                    97:eb:3c:12:d4:60:db:77:8e:c4:ae:87:f5:1f:6e:
                    a1:74:36:59:60:97:30:52:0f:d9:09:3e:0d:a1:de:
                    17:3d:4b:18:9a:67:c3:1f:99:32:c3:5d:af:35:a8:
                    17:59:ad:9d:df:b0:67:f1:6f:18:c4:bb:2a:67:7b:
                    8a:57:5b:d5:7b:29:cf:d5:f0:5a:51:a3:b6:14:a1:
                    ea:b1:80:27:01:bc:c5:e6:81:07:39:76:cb:2d:74:
                    4f:d7:fb:09:20:d7:9f:29:15:18:2d:ad:81:f3:87:
                    6d:10:f9:7c:8f:3b:e8:7a:e9:a3:06:22:1e:3d:39:
                    1a:a2:fd:55:b9:e5:52:5e:54:f3:c0:18:a4:f7:70:
                    5b:7b:9c:f2:74:56:b2:3f:f1:6c:74:0f:f1:63:c0:
                    5e:f0:08:b3:30:39:76:2f:da:35:d3:d6:fb:24:c3:
                    fd:db:7f:e8:4b:82:c1:d9:f7:d2:67:fb:04:c7:76:
                    3a:c4:7d:65:55:42:fe:34:82:da:ff:80:35:e3:c1:
                    e4:62:0a:04:75:05:6c:a8:77:a7:3c:0f:dd:f3:af:
                    a2:28:50:d9:e0:01:21:9d:be:9d:39:8f:3f:61:8e:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BA:A8:02:84:B1:A7:D4:57:94:7B:EB:10:3C:B2:7C:46:F5:4D:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/967a27ba-1aa0-4102-b736-357bdb52d9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:d9:f7:05:cb:2f:8b:48:46:3f:cf:1f:d5:5a:95:40:1f:53:
         4c:bb:d0:73:1f:69:6d:d8:fc:d3:c4:a6:c6:22:5a:2a:38:cf:
         75:b2:50:82:a2:85:4a:e3:7a:33:8b:35:2e:ca:3a:f9:63:f6:
         cf:3c:4b:2a:b6:66:5c:cf:75:c7:a9:82:a3:d4:54:e9:4c:7b:
         0d:40:75:60:78:7c:22:ea:38:4c:9a:bc:6f:25:c1:1c:35:81:
         ce:f5:fb:f5:ae:2d:96:d2:a8:4c:a9:2e:5b:69:8b:b2:be:83:
         ff:71:80:ef:5f:31:c9:d6:95:68:a2:e7:22:31:99:43:d4:53:
         cd:9a:64:26:5a:8b:7a:0e:a1:9b:4d:40:5e:af:0a:18:8b:80:
         76:fd:a5:ab:08:2e:65:4d:37:45:ce:70:f2:b6:57:9e:cb:90:
         c8:ea:1e:22:fa:d3:ce:80:41:c9:c2:7d:a7:9c:79:79:71:41:
         03:d2:c5:0d:3a:13:ad:36:34:c5:db:c0:47:db:98:75:1b:76:
         b6:f1:f6:9c:53:5c:21:27:82:cf:0f:ca:fb:98:77:95:03:a1:
         1d:7a:4a:08:83:5a:57:5e:c0:c1:b6:e5:85:9b:f2:b0:41:3b:
         9e:ed:6e:45:74:43:55:7b:51:27:a4:3b:a3:9e:69:72:be:25:
         63:86:83:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:11:35 2024 by rpki-client on console-ams.rpki-client.org