Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa
File:                     b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa (raw, json)
Hash identifier:          65yjowSIPmI+qNk3y1Af2F+14PI0U/+G/6UUg7xC2a8=
Subject key identifier:   E4:A7:40:3F:28:69:9A:2B:93:DC:5B:F9:0D:FE:40:05:D7:A9:56:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       550ED9FD33A35322CB3AB350E0B562B9237E2C16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        194.21.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Apr 2024 05:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0e:d9:fd:33:a3:53:22:cb:3a:b3:50:e0:b5:62:b9:23:7e:2c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=83fbc678a62ca8034f0e2bd052ff3259a306b221b7ed36aa20adafc53146fbd0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:40:03:d4:b4:bc:14:c9:1f:38:1a:f7:81:a4:
                    33:fd:87:ec:97:a2:5f:d8:ae:9f:f4:15:e2:60:a1:
                    10:9e:dc:98:5e:10:89:20:8c:3d:09:5d:87:14:7a:
                    10:9f:a3:46:27:07:45:3b:3c:61:e1:04:78:1e:24:
                    74:c6:b1:16:c0:21:4c:cc:c3:9b:ae:4a:b7:8c:75:
                    96:28:c8:93:2d:d3:65:5b:86:76:5f:b0:27:ea:7f:
                    84:09:cc:4c:43:c9:9b:59:54:44:1f:be:fa:71:ca:
                    3e:02:82:1e:fe:ee:2e:71:45:8c:0d:8a:bb:5e:60:
                    6e:8f:ca:85:70:e0:b4:a4:89:d5:7b:74:f9:2f:10:
                    b1:04:d5:66:7b:a4:51:f9:e3:24:43:4e:94:a2:4f:
                    2e:6f:63:59:f1:b4:5b:2a:3a:f5:a9:11:a8:67:1f:
                    15:08:eb:02:7a:77:0f:61:95:f0:49:db:51:6f:48:
                    cd:77:07:17:d8:a2:05:a6:e9:8d:44:32:4e:d7:d7:
                    20:9e:1b:cc:59:15:a4:d3:d6:b5:32:64:1a:f9:71:
                    80:78:dd:97:3a:cb:89:da:f6:8c:d7:33:86:68:70:
                    dd:6e:a0:11:9e:34:3a:48:57:7e:4a:34:c5:f3:df:
                    2c:51:75:24:7c:f2:16:ad:dd:54:af:98:06:ac:02:
                    ba:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A7:40:3F:28:69:9A:2B:93:DC:5B:F9:0D:FE:40:05:D7:A9:56:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.21.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:e8:74:5b:72:22:52:8d:e6:a3:5f:0e:ae:91:84:65:12:6f:
         d5:e7:bd:1e:83:a7:ae:6b:a1:89:58:67:a6:17:0b:88:cb:8d:
         e0:94:00:e7:f1:be:bd:30:38:fb:79:f4:1f:48:81:28:63:b2:
         00:c4:71:a6:02:8c:9e:2e:d2:43:36:3c:dd:00:55:b1:70:01:
         51:89:58:ad:4d:12:f1:5a:81:73:58:53:3a:ac:7e:17:d5:dd:
         18:6e:57:05:41:75:48:d0:78:39:dc:72:6a:da:45:10:64:90:
         09:3a:50:d8:4a:79:39:25:62:4d:33:15:e8:e2:9e:65:ed:07:
         07:ba:d9:31:90:15:d6:9c:69:dd:65:ae:07:99:5a:21:10:ea:
         3a:70:37:d8:59:de:e8:a9:02:8d:e8:52:0b:5b:c1:92:23:97:
         93:f2:bc:4e:04:c1:8d:db:e6:dd:79:5b:5e:0a:61:53:33:2d:
         96:2f:20:3e:1b:04:f0:aa:18:c3:bf:14:80:a3:95:71:b0:f9:
         ad:de:7a:9b:6c:14:1b:8c:f2:f3:67:58:fa:48:48:59:bf:d2:
         8c:a9:b8:dd:fe:bc:a9:88:c5:95:08:a9:56:cf:24:3c:3d:08:
         ea:fa:1d:8d:1e:db:35:10:86:7c:63:d0:72:62:cd:db:c5:05:
         ca:41:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 17:32:32 2024 by rpki-client on console-ams.rpki-client.org