Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa
File:                     b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa (raw, json)
Hash identifier:          /HvGQLSbexecAC85V9c4l7/n+Xen7ynXQzINLcYgCVA=
Subject key identifier:   AE:A7:1E:59:77:36:EE:06:33:DC:D7:1E:53:AE:AD:58:FF:AB:92:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13C8FDA5F954AA167B0A889A4A8AA8FF68657ED3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        64.91.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c8:fd:a5:f9:54:aa:16:7b:0a:88:9a:4a:8a:a8:ff:68:65:7e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=8b83c5991831c41c58788b4ce9fe4429f6f16af7d0cb070d230adbe3ce06e85d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:15:cc:46:88:30:bf:d0:61:70:c0:13:84:
                    5c:78:7d:e9:60:20:2e:bc:06:50:6a:ff:f5:14:76:
                    51:7c:aa:26:89:b2:60:bd:a5:ae:41:d3:a5:90:f8:
                    e9:d9:6c:69:49:a3:1f:e0:1d:91:24:86:9d:50:d8:
                    18:86:e8:28:55:b8:21:49:a6:91:82:b5:88:bf:e7:
                    0e:28:ed:35:85:e8:de:8a:7c:4a:bf:c0:80:b6:7d:
                    87:85:66:7d:66:6c:93:11:6f:bd:99:09:11:80:cf:
                    81:28:22:8b:81:7d:af:3e:09:3f:70:f8:2e:55:4e:
                    26:b5:2b:6c:33:7c:d2:6c:eb:d6:5e:96:5b:99:71:
                    8f:d0:e7:2f:47:a5:2a:59:88:07:5f:01:98:8d:13:
                    e8:94:62:83:88:22:15:13:81:8b:d2:3a:e2:8e:8a:
                    62:5f:55:ab:1d:36:53:83:5c:6d:8d:48:14:f8:cf:
                    b8:7b:6b:0c:08:51:72:cc:98:86:40:c0:5f:7c:7e:
                    be:e1:08:c5:eb:db:14:ce:66:6f:d8:5e:0f:e7:db:
                    c9:13:c7:60:71:dc:33:8e:b8:2b:59:4f:ec:36:02:
                    30:f8:83:3e:dd:6b:21:69:34:c2:f3:15:ef:f0:b4:
                    07:bc:4b:d3:36:bd:3c:a4:c8:a1:bf:85:6b:2a:c4:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A7:1E:59:77:36:EE:06:33:DC:D7:1E:53:AE:AD:58:FF:AB:92:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.91.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         28:f4:ad:4c:0c:4a:71:18:2d:77:a5:14:75:25:09:cd:c8:bc:
         ed:9d:27:23:45:2a:63:c5:56:9a:3c:e6:5a:72:25:aa:19:0b:
         bb:17:c4:f6:1e:3b:4d:42:32:0f:d0:53:cd:ed:74:fc:0a:8a:
         d5:f5:92:53:71:e0:69:9b:ca:79:84:18:ea:23:88:8c:5d:c4:
         be:b2:15:6d:a2:38:7c:3b:93:c5:25:7d:ea:a3:3c:b9:ec:ad:
         fa:3a:df:79:26:d9:63:bd:17:3c:64:c2:19:2b:56:20:ff:f2:
         45:bc:dd:25:61:85:69:90:73:b1:49:c3:63:f6:dc:68:08:55:
         65:76:32:f8:d0:e4:df:72:a4:cb:64:ff:d5:15:7c:d9:e2:d5:
         35:90:ea:f1:c1:3f:4d:3d:bf:fc:70:79:4d:57:4f:71:fa:7a:
         6f:63:a9:28:82:09:90:6f:0f:46:ac:78:3e:ed:32:ec:66:d7:
         e4:4f:72:dd:91:9a:8f:66:c9:e9:81:f2:64:56:2d:50:d4:60:
         20:ea:80:5f:5d:04:61:28:5f:37:d4:b6:4c:c0:4d:6c:8b:3c:
         ca:62:2c:36:14:c0:ac:27:f8:db:5d:da:47:d4:db:a7:eb:e8:
         a5:12:8e:8e:33:9f:49:23:2e:28:78:9b:e0:90:de:8c:30:a7:
         c7:7e:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:28:04 2024 by rpki-client on console-fra.rpki-client.org