Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/976fc22a-5e00-42e2-8b6a-42d61fb7d04d.roa
File:                     976fc22a-5e00-42e2-8b6a-42d61fb7d04d.roa (raw, json)
Hash identifier:          J2+QALiz2fL4KXEm+1LZ/CkQTAo+plC/VjYdlZCS+qc=
Subject key identifier:   5F:7C:E7:2C:7E:DD:37:99:13:62:C5:F6:48:F1:A8:F8:05:8C:C6:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66260445E54500B396BA745A4704A9790BC051BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/976fc22a-5e00-42e2-8b6a-42d61fb7d04d.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        104.153.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:26:04:45:e5:45:00:b3:96:ba:74:5a:47:04:a9:79:0b:c0:51:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=55e9bc144c8b72c7797f0584242660da30126b1fbe84b818afc195208dc6b85b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:a7:c3:75:e8:45:ae:3c:be:60:eb:78:cb:
                    a8:fb:67:3e:29:85:00:35:ba:9f:54:b5:ba:b9:95:
                    60:28:ae:5b:6c:33:86:d8:6a:7c:5b:be:ea:8c:e8:
                    46:ad:43:73:9e:fb:dd:6e:10:15:19:53:98:1a:cb:
                    84:6d:1e:a1:99:1c:8c:aa:ce:39:05:0b:94:21:3d:
                    bb:49:91:1d:c5:84:9c:e2:00:00:06:01:e0:59:e9:
                    42:33:8b:66:31:22:1d:2e:b0:09:18:9a:0d:af:19:
                    69:61:05:65:10:44:85:5f:9d:16:ad:11:48:54:23:
                    f2:8e:9b:5f:65:1d:ce:1e:70:b7:0c:1d:88:7d:90:
                    5e:da:e5:47:14:67:4c:67:37:ef:bb:bf:0a:87:67:
                    34:54:40:41:17:d7:b9:21:83:61:c6:ab:bf:42:97:
                    4f:1b:44:eb:1c:5f:46:51:17:92:4d:16:6a:d0:83:
                    f6:63:8c:43:8f:3c:68:9f:8f:73:36:7b:9e:5f:3f:
                    89:be:0b:c1:17:7e:6b:97:39:bd:24:f0:81:a8:97:
                    6f:cf:0d:c3:03:86:e5:82:54:f7:43:48:03:21:f4:
                    90:02:f7:04:13:92:53:90:d2:10:52:b2:18:3d:b5:
                    37:3b:ba:ac:c6:73:7e:bb:2c:15:3d:62:dd:42:ad:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7C:E7:2C:7E:DD:37:99:13:62:C5:F6:48:F1:A8:F8:05:8C:C6:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/976fc22a-5e00-42e2-8b6a-42d61fb7d04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:4a:50:c1:f8:d8:ec:34:fa:f4:1b:84:b1:03:32:7b:9f:5e:
         3f:aa:e1:4d:f5:a3:1c:09:dd:5d:66:d7:47:34:1b:22:d8:3d:
         b9:ae:74:29:d0:6c:a4:8b:ed:f6:df:72:d0:fb:78:37:56:25:
         a3:40:0a:f6:62:56:7c:42:bf:2a:41:60:6b:51:ea:fc:81:39:
         00:7e:20:c3:92:93:49:fd:58:d8:02:97:1a:24:ba:8a:f8:c7:
         e6:f8:96:05:65:6e:da:ef:16:90:fe:ac:75:df:93:35:78:f7:
         91:6e:9e:94:5e:56:02:aa:84:bb:f4:74:cb:6d:cd:00:e7:12:
         72:82:7b:48:9e:84:74:0a:87:de:10:66:97:ef:49:c9:cc:5b:
         f4:b0:df:6c:27:e4:08:e9:dc:ac:a7:0e:5a:c2:a0:5e:2c:09:
         68:c3:1b:c9:2e:57:73:65:ac:5d:46:56:e6:52:af:cf:25:a7:
         53:83:59:ea:db:4a:f8:32:1f:ff:ee:b4:d4:4e:25:42:8e:81:
         0d:92:b3:1b:41:f8:3a:37:f8:62:12:48:6c:2f:55:7e:1a:5f:
         39:5b:b1:99:3f:a3:65:a8:fd:e9:03:d3:43:37:d4:42:30:4b:
         51:13:9d:c3:55:54:7e:ce:07:ab:6a:01:24:bf:c9:6c:d5:cb:
         b4:d2:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:19 2024 by rpki-client on console-ams.rpki-client.org