Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed52b01-6983-4a83-8293-68857ed21d20.roa
File:                     aed52b01-6983-4a83-8293-68857ed21d20.roa (raw, json)
Hash identifier:          Zctm9CaKeJvm+/wzWmSc9OWWJG5SsD/WLV4Foogd73A=
Subject key identifier:   6C:E5:55:7D:BD:65:30:D2:13:CE:F4:CF:E0:CC:CE:70:C9:84:CD:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D4D0823207EFDAB164EB7C457F99C1C570CA8CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed52b01-6983-4a83-8293-68857ed21d20.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        44.192.0.0/11 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4d:08:23:20:7e:fd:ab:16:4e:b7:c4:57:f9:9c:1c:57:0c:a8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=b416d58945781ed1094316e46e86a84128cb43b924e2d76c808bb3d1955eaed7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:31:75:ea:05:c5:38:4a:cc:16:d3:0b:c0:
                    4e:33:4d:fc:68:6e:b1:eb:30:69:bd:3a:d4:46:6f:
                    2c:66:9a:2f:87:d7:e2:bc:a4:38:28:6d:9f:19:a2:
                    4a:55:70:93:27:7f:49:72:c4:27:ea:e9:93:b5:5c:
                    f0:de:f3:9c:af:ca:b8:35:ea:62:c9:9a:c3:c1:6c:
                    2e:f5:70:f9:95:da:c8:de:1f:4a:fc:0c:bd:dc:ea:
                    23:8c:8a:c0:4c:63:2b:56:a8:90:e5:27:9c:1a:c2:
                    7f:ae:7c:52:62:98:96:a0:12:5b:14:6b:29:33:3b:
                    16:6d:cf:57:82:85:65:4e:79:30:06:f8:c6:8d:71:
                    c7:ad:f5:e3:f0:8d:2a:99:c7:db:30:4f:ee:68:c4:
                    e3:15:64:73:97:0e:8a:d6:60:ec:8b:9a:be:22:8b:
                    fb:99:fe:d3:e9:b0:23:4d:8a:4f:9c:bb:c2:84:ea:
                    48:d4:90:ed:48:84:82:ad:39:72:c1:a8:17:46:8a:
                    2f:f5:4c:a6:06:49:17:b0:46:2a:d6:a2:31:39:df:
                    df:bf:fd:c6:1f:d9:97:ff:33:67:8f:f8:d8:e1:b2:
                    d4:16:7c:69:32:a6:5d:1a:93:a9:f7:93:9b:3f:f2:
                    76:84:32:59:52:8b:81:0e:92:2c:78:9c:b1:b1:fc:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:55:7D:BD:65:30:D2:13:CE:F4:CF:E0:CC:CE:70:C9:84:CD:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed52b01-6983-4a83-8293-68857ed21d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.192.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         0b:73:48:e9:44:75:4b:bc:77:3c:51:fd:6f:5c:79:3a:a7:ba:
         5a:e4:cc:d6:90:09:94:28:e9:5a:75:64:33:f8:d6:8e:39:95:
         ec:c4:e6:0d:ce:41:93:47:a0:77:02:ef:5b:79:63:b5:3c:0e:
         5a:0f:d8:2e:7f:d0:04:ad:f0:92:26:6c:a0:f5:a6:27:d6:17:
         aa:c6:da:ea:f2:40:2a:2f:de:e2:67:19:36:ac:c7:e5:8d:99:
         c2:d6:a9:53:5b:c6:12:b4:06:d7:03:ca:a5:4b:5b:63:37:1d:
         41:ed:67:3f:99:b5:f3:b9:1c:88:02:a9:41:55:8b:35:5a:cf:
         54:32:36:41:85:b8:82:56:40:94:90:28:a6:34:25:ae:df:1b:
         e1:17:53:6a:f9:1c:b2:18:7a:4b:05:8e:d1:80:93:b6:16:f5:
         88:31:fb:73:fd:9d:f3:0b:da:16:3e:ce:18:49:d8:70:c7:57:
         d7:b4:dc:90:1f:d6:19:fa:0d:62:c3:b5:80:5b:ad:fa:d1:df:
         ce:35:7a:04:2c:3e:10:52:3f:75:35:f4:7b:d8:8a:99:0c:45:
         80:93:dc:7a:a8:a5:e5:65:74:39:1d:9f:64:0b:e0:0e:18:ed:
         73:1f:68:94:3f:95:03:fe:63:8f:bf:46:d1:57:6e:a6:20:78:
         3e:67:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:33 2024 by rpki-client on console-ams.rpki-client.org