Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeee70ce-6c0e-4257-8b37-66de1e6d47bf.roa
File:                     aeee70ce-6c0e-4257-8b37-66de1e6d47bf.roa (raw, json)
Hash identifier:          7Jrmgqu6oaYLK5a7VeyJ7Y2c34R5dh2UUjiGW8nxrwc=
Subject key identifier:   3C:E1:5A:42:51:C5:74:87:91:62:E6:BB:25:A6:7D:70:E1:E9:45:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5AE67D8FB3EC609DDFFC76460EB1DB6EFDFA2598
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeee70ce-6c0e-4257-8b37-66de1e6d47bf.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        209.54.184.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e6:7d:8f:b3:ec:60:9d:df:fc:76:46:0e:b1:db:6e:fd:fa:25:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=53c34444e4de476c3b0ee5934753efcbe2d8d2e4f5d65bd397e091887c177f22, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:ab:fc:42:fc:5e:5b:a6:22:a8:cf:3f:68:
                    5d:b4:81:2a:91:db:ad:6b:90:38:35:44:9e:7c:5a:
                    5c:54:53:4d:bf:b3:dd:fc:b7:9b:64:bd:5b:aa:c0:
                    68:7c:c3:cf:9a:d4:16:5b:28:72:4f:ed:40:4c:31:
                    20:2b:e9:88:3b:44:a8:e5:dc:bc:1f:dc:9f:31:5f:
                    e1:9f:df:21:99:07:dd:77:59:5d:94:cb:df:91:97:
                    16:d4:e8:72:44:8d:ae:37:45:15:c2:89:d8:37:69:
                    5a:9a:21:31:24:4e:64:79:38:4a:c2:22:af:f8:56:
                    fa:28:dc:ca:ca:ed:b1:96:86:ba:06:fe:b5:e9:fd:
                    d0:cf:56:cc:33:a2:39:2e:fc:d3:ca:1d:61:2b:52:
                    d9:da:ab:e5:62:10:c5:d3:47:36:27:f7:f0:36:ca:
                    12:36:08:6a:3f:23:7b:c0:ec:3e:33:5c:27:89:6c:
                    81:b2:65:41:f0:62:97:b9:ec:cb:ce:fa:17:60:bc:
                    6a:44:b7:d8:6d:c2:6e:5c:56:97:6f:6d:3d:f1:f8:
                    b0:aa:ce:1e:43:71:31:30:50:55:3a:03:85:c3:57:
                    31:22:a4:4a:a5:c6:f5:f6:a6:21:a1:44:66:3c:18:
                    aa:d5:57:a7:5f:eb:39:15:f6:36:5a:c9:aa:05:c6:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E1:5A:42:51:C5:74:87:91:62:E6:BB:25:A6:7D:70:E1:E9:45:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeee70ce-6c0e-4257-8b37-66de1e6d47bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:c0:7e:17:85:11:ed:56:f1:27:81:41:c6:e2:69:1c:8e:e7:
         ee:33:04:b4:8e:1f:dc:e5:78:69:4f:59:db:09:d7:af:50:e5:
         ba:d4:b8:93:cf:99:ab:d0:2d:a1:18:b0:a6:76:b0:98:76:c2:
         4a:85:6e:2d:54:b2:60:f4:17:d3:9e:d6:e2:31:77:50:ce:00:
         50:e4:b1:81:07:f0:f9:82:0a:c0:a6:16:6b:bb:70:c2:58:90:
         cf:50:6d:e1:9d:bb:da:0c:c4:17:f2:f0:a0:7f:73:12:ae:54:
         b5:4b:77:7a:31:3c:03:d1:91:0e:96:2e:df:db:d3:bf:7a:92:
         99:8c:ca:7c:ab:31:cf:2f:11:23:2c:74:9a:36:d5:71:b4:0a:
         1a:4f:d8:35:36:47:e6:fc:89:73:85:47:c5:5c:da:9b:7c:0e:
         9d:0d:b1:68:00:86:ae:09:a8:32:c2:b7:ff:97:7b:5c:39:16:
         34:f4:44:cb:21:25:63:e4:4a:5b:b3:9f:7b:36:5c:39:44:cc:
         88:1b:c1:39:b9:ea:66:45:65:d2:24:13:30:28:4d:79:ca:d3:
         47:d6:4b:f8:ba:04:b6:ab:ce:44:9d:d4:9b:e4:e7:89:c2:7d:
         6d:c4:91:27:3a:20:37:f8:cf:53:79:9e:94:95:52:e5:e1:f0:
         3d:1b:f4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:07:36 2024 by rpki-client on console-ams.rpki-client.org