Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b03b1098-1761-4671-b39d-495d60c8937d.roa
File:                     b03b1098-1761-4671-b39d-495d60c8937d.roa (raw, json)
Hash identifier:          2oeae4W2fyP4WbVci2vSs9sPcvzrdtZGhbM4Rqzk3Hw=
Subject key identifier:   3F:3D:99:4D:CC:34:1C:27:F8:A8:DF:A9:3C:3F:F5:CC:76:E3:41:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       48AE3519E2AF3C480F3E40571F92D9A4D0574C79
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b03b1098-1761-4671-b39d-495d60c8937d.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        151.160.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ae:35:19:e2:af:3c:48:0f:3e:40:57:1f:92:d9:a4:d0:57:4c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=ac5b42174ad7fa278c2ad565417b427d18ee38b99cc530712277dae048ac168c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:04:bb:f7:c0:53:86:66:b5:4a:e4:fc:c7:
                    cf:76:5f:2b:0e:1b:f9:00:18:02:0a:21:2c:15:b8:
                    43:48:9d:16:cc:45:a8:bf:bf:e6:15:c1:75:69:c5:
                    fd:bb:38:fb:2a:9f:f2:53:96:07:f2:f5:e9:a2:a5:
                    b1:0d:6f:8a:7e:d9:04:f5:c1:80:a4:d0:0b:76:a1:
                    52:83:b2:96:0f:64:f6:03:76:28:3b:a9:d2:d9:61:
                    fd:e3:33:f9:89:a4:c5:87:cd:84:59:1a:a5:df:e5:
                    8d:b8:39:4e:8c:ff:32:3e:26:03:b8:eb:71:ee:16:
                    89:2d:2b:d1:6f:34:2c:6a:b5:88:2b:f4:ba:77:60:
                    46:1b:4d:11:13:63:48:ca:b9:58:9a:0f:ab:7d:d6:
                    1c:cd:e4:4a:68:0b:3d:ba:4a:54:0c:ef:fe:c3:8c:
                    b9:74:cb:d4:ea:e3:ad:38:37:3d:75:49:be:4e:fc:
                    7a:47:60:dd:37:af:36:97:ea:3d:33:61:e4:2a:3d:
                    12:46:28:a6:6b:28:7e:e8:e8:ac:14:ff:da:7a:99:
                    e9:c0:26:e2:12:c1:cc:ea:05:0e:86:ad:60:69:e0:
                    fe:f9:19:5e:ed:40:13:7d:6f:e8:11:c5:77:9c:27:
                    df:56:53:ba:3c:cb:68:54:6e:8d:b8:13:04:c7:fc:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3D:99:4D:CC:34:1C:27:F8:A8:DF:A9:3C:3F:F5:CC:76:E3:41:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b03b1098-1761-4671-b39d-495d60c8937d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7b:0e:cc:55:48:64:cb:d6:68:31:b7:4f:ba:1a:0f:5f:60:42:
         d3:ff:55:50:e3:2b:7f:e0:9c:30:de:3f:10:a3:92:f6:75:ee:
         be:ac:c5:5e:ec:61:e5:7c:11:c2:cf:56:71:8f:e0:dd:07:2e:
         77:e5:36:1f:c0:de:86:30:a4:7a:f8:95:12:07:d5:63:2f:a8:
         1a:fd:9e:e4:d4:af:23:07:36:27:4b:5f:25:c3:23:84:39:d5:
         8a:01:22:1a:9f:ef:fb:88:82:a8:91:36:fc:4f:8e:98:c6:d5:
         eb:a9:63:40:5e:69:e9:e1:5e:73:2d:75:97:c8:61:32:7a:46:
         b2:ed:43:16:63:c8:0c:6c:e9:0e:b9:24:e3:bd:fa:3c:7c:ef:
         cf:fe:8d:2d:29:1c:9d:24:48:33:2e:73:32:f5:91:7d:57:2c:
         2b:98:69:62:5a:27:a1:74:90:55:2a:67:ce:e8:4a:1f:0e:41:
         88:46:e1:6f:6c:cc:8d:ab:b7:82:c6:06:eb:ad:2c:60:6e:5d:
         c9:c4:67:4a:18:e2:1a:77:84:e5:d9:5f:21:69:3a:7c:1b:09:
         0b:b1:63:4e:ea:d6:c6:64:25:ea:ab:ea:05:8e:b1:90:bb:dd:
         77:64:08:2d:20:65:33:d9:6c:d0:2f:fc:da:ef:2b:50:8e:07:
         49:ea:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:22 2024 by rpki-client on console-ams.rpki-client.org