Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af9fa9ce-3247-481e-903a-9fd3ee1a9be8.roa
File:                     af9fa9ce-3247-481e-903a-9fd3ee1a9be8.roa (raw, json)
Hash identifier:          PWfnSww/RhX0MCpfVnqKIADvhHkIk7jKKrsfMhVdfbE=
Subject key identifier:   A5:6D:BA:0A:03:AC:18:AE:C2:B1:3E:B9:4C:B8:4A:E8:08:F9:68:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E73AEED5416CF52C49FAB1637E8C38C3068EA87
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af9fa9ce-3247-481e-903a-9fd3ee1a9be8.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        199.183.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:73:ae:ed:54:16:cf:52:c4:9f:ab:16:37:e8:c3:8c:30:68:ea:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=54105eb7a428b968df80c510b3679f6638204e0d699079ffc2324b4d7aa428d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:ca:c7:fa:41:69:6f:f8:aa:1a:c2:d6:22:
                    70:be:2c:29:ea:db:5b:e4:fb:bb:0f:6b:17:12:d8:
                    f8:5b:ae:92:b1:71:89:7a:f6:38:8d:d8:31:e8:7f:
                    f3:7b:17:e5:08:bd:88:c8:59:91:8f:bd:df:72:ef:
                    27:88:5b:e3:42:f1:4c:f0:af:b0:30:59:0a:9c:3b:
                    1c:28:a9:46:31:3e:61:e9:43:bb:e5:d2:d6:c8:65:
                    34:12:ce:9e:03:d5:4f:8d:64:54:38:ee:d1:fb:28:
                    e2:b3:48:09:67:0a:38:cf:4c:0f:6b:50:7a:9d:71:
                    37:05:3d:46:13:be:23:64:9a:d9:90:54:13:1b:8e:
                    91:96:b7:cd:0f:eb:3c:9e:31:b4:a9:2b:e5:4b:15:
                    ea:63:66:96:2b:c0:46:90:3d:06:7e:91:7f:00:ab:
                    2a:57:6e:6a:4c:a4:a2:ce:2e:10:d5:98:7e:9f:81:
                    34:9c:d4:1f:37:62:47:17:ce:a7:4d:4e:95:28:52:
                    06:d2:bd:86:3d:d2:39:be:12:8c:81:a2:da:04:a8:
                    f7:5c:a7:ec:46:6b:ca:e7:0f:a4:51:66:c8:45:91:
                    35:c8:18:25:5e:ef:45:d2:f0:14:f9:82:ba:71:ea:
                    70:54:d7:b5:1e:b2:29:96:c2:81:87:fd:d8:00:1d:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6D:BA:0A:03:AC:18:AE:C2:B1:3E:B9:4C:B8:4A:E8:08:F9:68:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af9fa9ce-3247-481e-903a-9fd3ee1a9be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.183.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:8a:60:80:08:56:97:00:6b:9d:7b:87:20:39:5e:56:ed:
         77:89:37:98:2b:88:89:87:0c:dc:28:af:a0:f4:87:c4:bb:86:
         7c:09:09:44:5b:f8:58:ef:e9:f1:aa:fb:89:df:dc:a1:4d:3b:
         f9:a1:47:5d:27:26:e3:48:35:ee:c8:aa:27:29:90:ef:d4:34:
         51:03:f6:ab:67:fa:ca:8a:d2:49:db:ef:9e:a1:d7:46:6a:a9:
         fd:9c:83:15:f6:6e:af:fa:32:4b:ba:55:e4:7c:1d:c1:a2:a5:
         0f:72:0e:06:15:85:ae:9f:4d:98:7b:33:7e:b4:50:96:5c:bf:
         92:17:7d:c1:36:a6:56:64:4d:02:dd:91:ef:c7:d4:3c:1a:65:
         7b:b0:cc:d4:fa:3e:8d:87:4a:a5:7b:87:bd:31:33:c2:d6:ad:
         6d:fb:47:6e:83:d9:59:6b:07:d5:ca:68:e2:17:9e:a2:c6:07:
         a7:b1:44:c2:bf:19:2d:45:fa:3e:1c:e6:6c:91:c3:5e:be:64:
         01:c1:4a:52:b6:94:bd:26:98:35:c8:17:9d:63:5d:26:ea:84:
         6c:c9:a8:e8:9b:3f:fc:35:03:09:2b:cd:88:9a:ea:ff:eb:6b:
         07:1d:44:ea:db:bc:dc:5f:e6:14:f6:1a:46:60:ec:21:17:35:
         3d:49:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:22 2024 by rpki-client on console-ams.rpki-client.org