Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a74be31-f0ee-498b-9348-eb800cee944d.roa
File:                     9a74be31-f0ee-498b-9348-eb800cee944d.roa (raw, json)
Hash identifier:          Fci1r9YhBRH3REnmRRyW0SjaKZ+i4TKCSHobbdDU/fc=
Subject key identifier:   40:AD:06:23:CF:F9:2E:61:28:81:C0:2A:AE:6F:AC:B8:81:DF:EE:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A7A3BAD307F17D9CB3D55F1689FC9917D2C0B84
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a74be31-f0ee-498b-9348-eb800cee944d.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        35.48.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7a:3b:ad:30:7f:17:d9:cb:3d:55:f1:68:9f:c9:91:7d:2c:0b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=8c43a7e20581fb30e007694a9d4546f5b4fc5727dd272cdd815ce0029f1d1fd9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:54:c2:be:4a:3c:3e:43:3b:bb:cf:36:1e:
                    36:f1:e0:44:fe:b1:d4:6d:40:78:37:fb:4d:03:b3:
                    80:dc:d5:56:f1:89:a0:b3:02:04:67:c9:51:62:93:
                    45:f4:9b:62:e0:dd:fd:55:0b:1e:ce:c7:0a:29:cd:
                    62:d1:c6:44:80:f3:0f:98:e5:c0:e0:ed:83:97:60:
                    0c:da:04:27:d3:9b:f8:6a:58:4b:d2:b2:36:b3:d6:
                    18:2d:03:04:c7:1c:a5:fe:ec:2d:bc:8d:c4:12:a1:
                    fd:e1:a9:79:44:7a:3f:b2:a5:78:7f:81:49:cf:4c:
                    dc:f1:ad:00:27:83:52:62:c2:89:bc:8d:7b:20:cf:
                    ed:3f:73:70:d0:f0:7b:73:27:84:76:63:53:18:41:
                    a2:d4:0e:84:01:1a:0e:a9:7f:7d:58:7c:90:10:3a:
                    92:db:80:aa:15:57:70:76:c9:cd:5e:aa:ba:c7:96:
                    54:6b:3e:05:33:0c:48:bf:68:83:30:d7:23:2b:31:
                    15:cd:e2:cf:d5:3c:27:27:25:8d:f0:45:6b:02:56:
                    42:db:a2:f3:55:ee:6c:b8:e9:18:20:ce:53:96:bc:
                    1f:99:34:95:39:9e:ae:5f:bb:99:fe:d4:5c:6e:cf:
                    f4:4a:31:04:79:8e:8d:28:b7:e0:d9:65:7f:b4:09:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AD:06:23:CF:F9:2E:61:28:81:C0:2A:AE:6F:AC:B8:81:DF:EE:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a74be31-f0ee-498b-9348-eb800cee944d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.48.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         61:43:67:d3:db:0c:77:ad:71:01:3a:bb:43:a0:25:5d:7e:72:
         a1:94:51:17:f3:42:89:78:5f:f1:a9:3d:41:4a:95:06:fe:7f:
         c4:ef:0d:f8:d2:96:3f:f8:f0:8c:26:3a:13:f4:1a:6f:49:2a:
         86:ea:08:4b:56:74:c9:9b:10:bc:7d:15:1d:0c:11:c6:29:7b:
         84:d0:56:a7:72:6a:c7:79:b4:d7:14:1c:71:6e:b0:65:11:65:
         01:95:f0:f6:dd:85:95:60:56:a3:6c:7a:8b:e9:55:ca:53:8b:
         6d:7e:99:d6:14:f3:f7:6f:06:99:87:e1:e1:ae:c4:2d:d3:f9:
         c3:4b:d7:cd:9a:99:c7:ae:c5:2f:ba:f4:49:ee:71:02:17:c3:
         46:0b:84:c3:f6:20:7a:7c:db:7d:2f:ab:fd:e3:b0:40:51:36:
         f5:2b:12:db:90:24:1c:0d:b1:87:f5:a4:2d:5d:cb:71:f3:29:
         cd:25:49:27:fa:32:24:2c:b9:61:74:bc:35:c9:ce:86:10:be:
         d5:b8:1d:dc:09:96:5f:35:bc:47:24:fa:b8:ef:96:27:d9:2f:
         b5:7d:d5:1c:f3:c8:a9:2d:df:b0:bf:08:4f:22:6d:e7:f9:4a:
         6a:35:f3:4b:7b:6e:f5:2d:19:ed:de:9b:f3:ba:3c:95:8c:5a:
         bb:38:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:23:10 2024 by rpki-client on console-ams.rpki-client.org