Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a47f6e92-f629-4865-adda-33e79317a5f2.roa
File:                     a47f6e92-f629-4865-adda-33e79317a5f2.roa (raw, json)
Hash identifier:          K7WmR3qyfHEATbx2G27d7ryz5R6Ea8TQbAJ+2l5+QvI=
Subject key identifier:   A6:0E:67:91:EE:96:A8:51:AF:4C:97:18:2E:2E:ED:10:D5:7B:71:12
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       359FA1693D2FF373C5964DCBD22C1986B36771EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a47f6e92-f629-4865-adda-33e79317a5f2.roa
Signing time:             Fri 26 Apr 2024 00:00:00 +0000
ROA not before:           Fri 26 Apr 2024 00:00:00 +0000
ROA not after:            Fri 31 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        150.247.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9f:a1:69:3d:2f:f3:73:c5:96:4d:cb:d2:2c:19:86:b3:67:71:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 26 00:00:00 2024 GMT
            Not After : May 31 23:59:59 2024 GMT
        Subject: serialNumber=a564bfa6f045c64d9143820ace733ab2b99ea7d35f661bee4e6c07499aaf0e75, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:f7:5f:65:bf:84:e4:f7:8b:9f:c4:46:48:
                    b8:4a:f8:18:90:93:5e:10:3e:e8:6c:23:93:ca:be:
                    f2:48:2b:f6:30:87:a2:62:f5:0a:c7:4d:40:9f:9f:
                    ee:38:c5:ef:a1:48:4a:a6:cb:f4:2a:0d:66:1f:62:
                    95:b2:ec:2d:9f:3b:a7:e5:5a:92:d0:8d:dd:7b:9f:
                    0a:b6:31:ed:98:d0:f2:08:c1:68:71:3f:4e:0b:8c:
                    2f:87:13:6f:33:31:8f:83:56:fd:2b:89:b8:ee:20:
                    1b:05:64:02:f9:6b:8e:36:3c:8c:06:35:bd:8e:1f:
                    bf:67:90:01:05:9d:2c:a2:f1:24:53:f6:ed:cf:58:
                    9a:d7:3e:d1:e0:12:a0:79:50:00:e7:49:31:1b:d6:
                    32:fb:40:c0:a5:5c:a9:67:ea:10:c9:c9:bd:a4:b8:
                    8a:55:6f:8b:97:92:71:cd:b2:fe:0f:18:6d:82:eb:
                    8c:55:79:19:fd:43:b7:75:8c:37:6f:8f:17:7b:a0:
                    34:d2:70:df:5b:65:d0:65:1e:e1:fd:44:d7:8c:15:
                    3b:5f:38:7e:48:36:84:e2:89:e2:47:f6:4f:9f:f6:
                    f1:6d:54:b4:cc:e4:7c:43:a6:09:ca:d3:29:73:45:
                    30:5f:f5:4c:d2:83:b4:03:35:10:5b:22:49:26:6c:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0E:67:91:EE:96:A8:51:AF:4C:97:18:2E:2E:ED:10:D5:7B:71:12
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a47f6e92-f629-4865-adda-33e79317a5f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.247.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cd:2b:66:b4:54:e1:f2:09:68:84:29:60:50:a3:c6:db:e0:29:
         3e:79:97:d5:3d:8e:24:a6:d9:37:d6:5a:26:28:a4:71:11:de:
         4b:27:c6:78:8f:b8:ca:86:1a:3b:68:8c:3b:d6:db:66:cb:6b:
         12:72:92:ac:d8:3e:32:eb:2b:18:3d:4f:84:a9:ef:a6:96:bb:
         04:82:24:07:3d:0c:cc:7a:dc:af:2b:ae:8f:c3:51:07:7f:0e:
         3e:89:75:b9:0e:fe:98:85:bb:83:57:06:03:7a:af:bb:7d:57:
         02:e1:88:7f:d4:fb:f6:11:85:26:42:33:63:1d:f0:a2:52:b7:
         99:47:e6:35:8a:ff:91:a0:63:55:c1:58:1b:78:df:3e:3f:96:
         a5:e8:3e:3e:50:b7:a8:5e:eb:8e:09:4c:ec:c5:ec:75:fe:40:
         c3:2f:2a:58:1d:0f:f2:31:a2:93:cc:1a:aa:33:9f:10:8b:e6:
         19:29:cd:23:b8:a2:68:28:1b:ea:9b:7a:f9:08:88:22:50:da:
         a0:6e:ce:c2:b8:77:1e:3c:eb:21:b5:8b:3f:be:77:34:3b:52:
         53:d0:ce:b6:6b:04:ab:38:3a:35:c7:cb:fb:25:b3:0c:72:e5:
         9a:bb:f9:49:02:f2:81:ca:d5:78:14:2c:b3:49:97:8d:cb:a3:
         e0:ac:84:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:21 2024 by rpki-client on console-ams.rpki-client.org