Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f7c31-6468-4794-addf-4e261bbd9e31.roa
File:                     9f6f7c31-6468-4794-addf-4e261bbd9e31.roa (raw, json)
Hash identifier:          XNllXQa7zn0fjReRRY1BJ0PM52dtUZ7QFIZ/RWfveLM=
Subject key identifier:   57:CF:19:FC:1B:E7:4E:EB:ED:D3:8B:55:7F:6D:BF:E6:53:E9:41:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50243FD47BE538D1BFB37A993FBDFA6908C398DC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f7c31-6468-4794-addf-4e261bbd9e31.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:24:3f:d4:7b:e5:38:d1:bf:b3:7a:99:3f:bd:fa:69:08:c3:98:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=dc433bd0d96c0fa948828ec9b98a72c114dcc691d886af5864289418a3d411f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:79:f8:1b:ef:cf:24:4b:db:f8:63:b6:ec:19:
                    3a:39:44:4b:73:89:0f:40:c5:5b:67:4b:01:6e:66:
                    d9:1f:c5:db:78:99:8e:e9:eb:47:1f:29:f3:74:de:
                    60:60:c7:71:3c:75:cf:03:79:d0:70:61:36:f3:59:
                    31:3d:a0:39:e8:ab:7a:d8:81:65:4f:dc:66:91:31:
                    cc:f2:16:70:76:74:11:ad:b7:c6:04:ae:27:dd:c3:
                    d5:2c:e6:9d:85:55:fb:45:32:77:63:7d:70:08:d5:
                    0c:dd:4f:63:37:54:60:9d:66:93:99:76:42:66:c5:
                    b9:93:8b:7f:3f:20:8b:b4:63:d0:ee:ee:b3:b4:35:
                    bc:54:ef:a1:19:93:58:57:26:e1:64:b3:f2:88:1f:
                    ca:12:24:ac:47:a2:bb:d7:d4:40:2a:86:7e:16:3f:
                    09:7b:a0:82:b6:15:51:71:a7:50:79:a4:ee:7b:cc:
                    94:36:8d:ec:cb:58:2f:8e:8f:b6:15:b2:90:21:b2:
                    74:48:5d:73:83:e6:22:39:18:17:0d:19:df:80:1a:
                    e6:e3:71:3d:73:e0:69:c5:35:83:40:19:6f:c2:ed:
                    d7:df:80:7d:93:0d:32:82:99:8c:c4:b9:bc:5c:2c:
                    03:8a:67:74:bc:1d:c1:ee:d2:8a:ea:f1:dc:6b:db:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CF:19:FC:1B:E7:4E:EB:ED:D3:8B:55:7F:6D:BF:E6:53:E9:41:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6f7c31-6468-4794-addf-4e261bbd9e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:76:40:82:d4:73:7b:92:53:2d:d8:50:2e:86:70:3b:71:58:
         99:41:f3:d3:72:2a:35:61:87:99:3d:02:70:85:b2:db:22:48:
         12:f1:e6:4a:09:5f:9e:a1:c4:fd:d2:bb:02:b9:19:61:67:6b:
         ee:e6:4d:11:f3:a1:7f:8f:80:c4:39:01:1e:99:5a:9a:b9:13:
         b4:96:41:ca:c5:2e:36:b1:20:be:a5:87:e7:4f:d4:2b:fe:c2:
         fd:f8:78:c5:df:a6:20:1a:7b:ff:80:df:4b:b1:2a:10:ef:d8:
         29:bf:eb:1e:c6:40:64:09:f1:01:4b:be:80:a3:bd:ed:58:26:
         98:9b:9b:75:35:a2:8e:8a:d5:fd:1c:4a:22:eb:90:ca:00:ff:
         85:4e:51:76:ce:92:ff:9a:e6:fc:81:79:cf:87:09:79:b8:78:
         c7:b0:42:8f:5f:d8:61:67:51:31:55:b6:27:0b:3c:85:72:3d:
         1c:93:03:0f:20:01:cf:ec:72:c5:a9:d7:ec:bb:e9:50:a7:08:
         ce:c0:00:52:ea:e8:e7:97:07:de:c5:74:68:bb:74:03:7e:04:
         10:a1:40:7d:8a:dd:bd:52:0b:5f:62:63:80:5b:f3:c4:fb:ba:
         c3:01:bc:fe:ce:15:80:22:9c:70:e1:7c:c3:f0:60:9e:69:ce:
         48:ed:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:09:45 2024 by rpki-client on console-fra.rpki-client.org