Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98fe3088-892e-477a-9113-7d0af06fa535.roa
File:                     98fe3088-892e-477a-9113-7d0af06fa535.roa (raw, json)
Hash identifier:          hvo9oGui9hV+7bRbfBInnJQ3xkVOXw/0Ffzb83VlEJ4=
Subject key identifier:   B6:F4:C2:B2:6F:9F:42:81:22:29:AB:9B:44:51:5D:46:B9:42:00:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E0CE3FEEADE9C5DCC45A23BAC3C026B9E7DC531
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98fe3088-892e-477a-9113-7d0af06fa535.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        35.48.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0c:e3:fe:ea:de:9c:5d:cc:45:a2:3b:ac:3c:02:6b:9e:7d:c5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=1bcaec9ba4fbbbd58e89c124a58f130a8ba841402795b5ba8f6c50c6cb14a9b4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:bd:62:39:92:a2:2c:fd:b1:20:c3:49:52:
                    27:05:0c:19:b5:d7:72:65:55:92:8e:80:96:03:76:
                    86:4d:80:01:8f:ec:40:04:f0:a3:60:32:17:f6:b1:
                    32:41:bc:e9:d3:fe:9b:a7:88:ca:c0:a0:c9:bd:6a:
                    7d:36:d1:f8:ee:a8:39:e0:2e:57:71:c7:b6:6c:0f:
                    ae:77:dd:1b:aa:fe:97:fb:22:b6:aa:83:48:c2:ff:
                    e7:08:9e:50:0e:92:ac:2f:b6:f2:15:26:02:ae:24:
                    b7:f4:87:57:03:8c:bf:93:73:9b:23:81:0f:4c:aa:
                    1b:03:fb:da:7f:c9:59:9e:4e:8c:fb:20:dc:af:22:
                    ab:6d:32:e0:c0:e0:51:c6:b7:e5:64:8a:3b:ea:95:
                    60:45:4f:b4:39:d8:f9:ce:97:b3:0b:e7:c5:c6:e7:
                    e0:c6:24:d2:df:5a:52:fe:06:c1:4c:97:b0:b6:4f:
                    c9:29:d6:13:86:ba:c5:f4:34:64:35:6d:95:5c:d7:
                    43:44:ee:ed:13:1b:01:97:21:3c:dc:7f:36:c0:d4:
                    20:3c:39:39:a4:46:96:b6:8c:9a:f9:a8:17:36:e9:
                    a5:04:22:d6:ba:b7:b4:f9:f3:da:d4:7e:36:3e:6b:
                    9d:f1:b1:92:0b:02:ce:b4:4b:6d:e1:97:b2:ef:b0:
                    92:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:C2:B2:6F:9F:42:81:22:29:AB:9B:44:51:5D:46:B9:42:00:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98fe3088-892e-477a-9113-7d0af06fa535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.48.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         55:19:d8:22:79:cc:9c:8a:a4:d6:96:4a:d7:25:a9:cd:7d:b8:
         81:a0:37:93:71:31:38:73:c3:90:b4:57:e7:a4:5f:65:15:b9:
         2f:bd:1c:72:20:3d:29:7a:84:f0:ab:40:e6:cd:ec:62:c3:b7:
         94:0d:81:7c:e6:7d:6d:6a:c2:87:d6:21:9e:75:d9:b7:9c:36:
         c9:e9:e7:3a:2a:73:ec:fc:7c:89:63:27:fc:2e:f9:c2:b2:d7:
         5c:df:32:b1:0b:61:d5:78:ec:64:ce:c6:da:2e:ad:a2:85:a6:
         f1:f8:6b:71:97:15:6e:d5:64:c3:99:91:bb:dc:1c:af:0a:54:
         b3:d7:0a:d3:ad:f6:5d:54:a0:d0:e7:2e:92:0e:aa:b9:f8:c3:
         9c:eb:fc:35:80:57:17:e5:c6:85:a8:23:5a:2b:1a:54:a4:95:
         4f:fb:a5:3c:cf:06:d4:75:54:ad:0a:9e:88:01:57:19:48:ad:
         48:db:c6:3c:90:c4:86:9a:55:ce:51:5e:ae:1c:eb:12:53:e3:
         d6:6d:db:93:5d:32:c6:73:b7:88:b0:a6:20:a0:dd:f3:ad:db:
         bf:f7:9d:7c:16:c2:4a:c4:d9:5f:b9:73:10:f6:ed:42:6c:e0:
         91:31:66:27:73:e3:41:73:15:39:df:9b:df:e4:90:f5:57:e2:
         cc:41:26:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:48:04 2024 by rpki-client on console-ams.rpki-client.org