Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98212129-42be-40b7-80fd-34b2ada5c620.roa
File:                     98212129-42be-40b7-80fd-34b2ada5c620.roa (raw, json)
Hash identifier:          9uB3cYLUtoFne5zAetOuII8+sNsIbHW3j4AHmUMyTFI=
Subject key identifier:   2D:E3:43:1E:2B:76:CA:57:E1:88:43:3C:0E:6B:9B:70:29:32:13:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4012DA52C288C45815BC780262F71C41A6B8DF95
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98212129-42be-40b7-80fd-34b2ada5c620.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        75.3.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:12:da:52:c2:88:c4:58:15:bc:78:02:62:f7:1c:41:a6:b8:df:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=530e3510a13f473f8244b6021a07258b6013b0e49b382f02629989712f6d120e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:0d:8f:95:2f:db:40:d8:4c:05:bc:d2:fc:
                    88:88:f5:6e:bc:28:49:88:5c:e1:c6:e5:14:e8:5f:
                    ba:31:2b:ac:4b:1f:f1:68:aa:60:2a:50:de:a3:07:
                    9a:e5:2f:49:bc:01:4f:71:62:d9:f4:28:94:c4:ec:
                    cb:03:b9:87:bd:2d:f5:3b:13:22:0b:fd:c6:82:7a:
                    e2:42:b5:5c:8f:42:08:4b:03:e8:c0:75:eb:3e:74:
                    7f:ae:bd:4e:c3:6d:47:4a:10:e3:ed:39:fc:89:28:
                    1d:b5:b9:11:6d:ed:ff:6f:85:fd:6f:f7:0e:da:ce:
                    44:c9:14:f6:8a:1d:4a:c9:ab:eb:d0:2c:be:0d:8c:
                    5e:b3:12:d6:6b:d1:95:22:24:8a:fc:d3:6b:ad:c2:
                    e1:87:fa:55:4f:e5:11:ca:b1:88:d7:4c:df:76:3c:
                    76:dd:22:4d:b8:6b:4a:21:32:81:61:c6:38:73:32:
                    2d:3c:e8:70:b5:74:01:27:be:6a:dc:86:ee:5d:7a:
                    b6:af:42:1d:9e:d3:43:78:2e:5e:51:74:27:71:80:
                    65:ce:29:4a:91:ea:43:75:a2:6a:ed:20:c2:01:43:
                    b3:10:e2:4a:ed:fb:ea:13:63:b8:0a:b5:b8:73:64:
                    58:ff:ed:81:39:7f:1d:e7:a2:41:de:87:2c:cd:75:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E3:43:1E:2B:76:CA:57:E1:88:43:3C:0E:6B:9B:70:29:32:13:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98212129-42be-40b7-80fd-34b2ada5c620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b8:57:71:5b:96:37:0b:aa:53:69:05:64:38:f3:ba:4c:e1:bc:
         37:29:97:d1:28:c4:cb:86:79:e6:68:41:c9:65:46:1e:41:4c:
         2f:db:4d:24:e5:9f:67:89:55:99:87:70:21:a1:98:46:0b:8b:
         d9:8e:6e:2f:6d:21:4a:8c:99:c7:1a:7e:46:cd:84:06:33:3b:
         f6:23:61:cd:48:a1:5b:2f:d8:01:ce:03:64:af:17:5e:d7:38:
         2f:62:85:d8:e4:92:07:39:c5:41:c4:f8:9f:1a:77:9a:c6:40:
         5c:ca:2b:88:77:6b:4c:83:92:8b:26:1c:46:10:44:27:ed:5f:
         3f:86:53:16:3b:65:92:35:c8:0b:24:da:51:0d:4f:19:64:21:
         3f:68:18:18:a9:45:85:2d:f5:f1:49:a5:82:fd:c3:0d:b7:99:
         21:f7:6d:75:36:11:f8:11:74:39:84:c4:57:83:fd:e6:8a:f0:
         c5:bd:9f:00:37:5b:b5:e8:32:6a:c8:8b:a8:4a:c1:ea:30:7d:
         c6:f4:cd:c4:cb:4e:29:5f:a3:64:21:eb:5e:31:0d:6e:b5:a6:
         a5:cf:0d:8d:0c:3e:a2:a1:9c:61:3e:af:04:9f:36:2d:a1:0d:
         a7:9c:1e:81:8a:ba:93:0f:24:3c:8c:45:85:ac:91:ef:e2:ee:
         cc:dd:66:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:05:38 2024 by rpki-client on console-fra.rpki-client.org