Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4f8aa10-312d-45dc-8aa8-2e33a53597e3.roa
File:                     b4f8aa10-312d-45dc-8aa8-2e33a53597e3.roa (raw, json)
Hash identifier:          O0Xb75CNts/PlTv8/Qd89q9JdeNjKss8JbGFGIlsPxE=
Subject key identifier:   67:E7:55:00:AC:42:11:1E:C6:56:64:65:7B:4D:30:74:D5:E6:4F:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F244387198AA159DD7C94A6F5722571D0A8D45A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4f8aa10-312d-45dc-8aa8-2e33a53597e3.roa
Signing time:             Fri 26 Apr 2024 00:00:00 +0000
ROA not before:           Fri 26 Apr 2024 00:00:00 +0000
ROA not after:            Fri 31 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        13.130.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:24:43:87:19:8a:a1:59:dd:7c:94:a6:f5:72:25:71:d0:a8:d4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 26 00:00:00 2024 GMT
            Not After : May 31 23:59:59 2024 GMT
        Subject: serialNumber=12b6b00ae2bf6a7148e29357ba0ee92af24093acb0b2554d74f84ff81b1746a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a0:fc:63:7b:a9:3c:91:88:ab:2a:a0:f2:8d:
                    34:14:1c:f8:c0:9f:17:3f:a3:44:ac:6e:29:77:09:
                    83:76:29:f1:98:fb:fc:c0:24:2f:b1:12:e4:7e:ba:
                    fd:1d:72:39:58:db:26:44:7f:8d:07:37:6f:a4:a8:
                    45:3c:f5:7c:6a:16:35:b1:d3:06:7d:68:72:5e:a6:
                    54:2b:95:7b:fb:09:fe:77:43:d0:11:99:0c:1b:95:
                    64:af:bc:1d:c4:16:a2:b5:ab:c6:13:c6:b6:a9:61:
                    1d:9a:2f:12:be:f0:e1:9d:da:eb:13:3c:dc:4d:05:
                    5c:a4:ee:f7:47:80:d5:77:2b:0b:ae:b5:f7:f0:88:
                    30:c3:dc:08:5a:41:72:27:77:45:e7:80:a3:a8:c1:
                    29:0e:c5:eb:34:d8:01:7a:19:c0:d8:45:dc:b8:ab:
                    7e:c3:fb:71:da:c4:b4:50:c0:b8:94:79:ac:74:26:
                    b2:32:63:41:40:c8:aa:92:1e:52:d7:1d:32:f4:b4:
                    23:0b:d9:8b:f9:e1:8c:88:de:68:28:03:43:40:89:
                    e7:6c:b1:80:8d:2f:38:2b:e9:cc:d1:cd:ce:c4:50:
                    15:70:a7:8d:a0:c1:dc:8f:d9:86:c8:4b:0e:03:4f:
                    f4:95:a6:e3:ef:52:dc:d9:8f:7c:2f:73:48:af:07:
                    4f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E7:55:00:AC:42:11:1E:C6:56:64:65:7B:4D:30:74:D5:E6:4F:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4f8aa10-312d-45dc-8aa8-2e33a53597e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:27:f5:5e:b1:87:3e:50:7c:97:d2:a8:5f:19:9c:a0:14:
         32:aa:e0:aa:24:3f:43:08:d1:5a:d0:c3:50:c7:d8:1b:40:85:
         50:45:f0:71:f3:05:ee:b6:9c:b1:9b:c2:2a:14:f7:22:4a:35:
         0e:aa:df:09:8f:a3:99:97:a5:da:3f:5a:20:53:8e:1c:84:54:
         08:ed:4e:03:4e:61:54:a9:f9:ec:c3:bb:69:5d:3a:85:b4:62:
         57:a7:8f:0a:b2:b6:f8:a5:97:10:11:66:62:ce:f4:d5:60:b6:
         66:31:79:d6:44:39:c4:dc:d8:f3:c8:bf:8e:1d:61:b6:d4:d1:
         76:18:5a:1f:0a:1d:bc:42:95:41:be:57:3e:29:c5:76:e3:b5:
         f5:0e:a3:0f:b9:ca:6d:9e:64:cf:50:45:b0:7c:7a:8b:10:b3:
         ae:83:b2:dd:b0:5d:83:21:48:25:4e:85:b7:73:0d:97:38:72:
         6d:03:cf:d0:53:bc:03:29:11:5f:cc:0a:ed:d7:5a:34:41:4f:
         a9:a7:63:7b:d8:15:70:38:1e:02:8c:44:90:b8:35:f8:c5:44:
         2c:bc:d3:f7:95:b1:49:bc:26:25:78:21:fe:11:18:e4:6a:71:
         39:c0:1c:94:f6:3b:4a:cc:a8:20:8b:7c:18:3a:23:89:a3:db:
         dc:5a:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:22 2024 by rpki-client on console-ams.rpki-client.org