Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa
File:                     c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa (raw, json)
Hash identifier:          NmWjRN0n0DsvBN3rK5wycVlZxEkeNJXlVMLOAVY6q64=
Subject key identifier:   8C:20:DF:DD:7D:78:DF:52:AF:7F:CD:F4:80:1C:FE:67:46:30:E2:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14AB17052D62C375DAE7329441F5F0085F7E9B1E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        69.2.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ab:17:05:2d:62:c3:75:da:e7:32:94:41:f5:f0:08:5f:7e:9b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=117fa22d2e52a792aeb690a36132dfd0de063af9b679d373e33c59b29aedd451, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:bf:09:11:c2:02:c4:1f:dc:b6:fc:eb:b0:
                    8e:bd:30:88:7d:69:7a:a3:92:8b:01:a9:18:b3:57:
                    75:41:9b:90:a9:e7:98:a8:5c:c3:17:24:e2:01:ab:
                    c7:6f:80:3e:77:a8:cc:79:b4:ce:85:75:50:87:ad:
                    c0:c1:0b:1e:89:9f:e1:3a:dc:1b:6a:35:18:23:5c:
                    aa:aa:3a:33:7c:0d:80:53:61:d9:61:53:f4:17:3a:
                    14:1f:7c:21:34:c9:f7:bc:f7:08:5c:a2:a3:19:26:
                    8e:29:a6:31:7c:dd:c9:0e:ca:90:fa:5e:73:64:a8:
                    3f:5a:76:fc:34:e3:2b:28:cb:80:cf:58:57:14:6c:
                    6f:57:48:a8:40:2b:9d:b5:a3:61:9a:37:99:77:42:
                    ae:b4:66:28:f7:3c:e2:49:ec:4f:fb:9b:fd:6f:ac:
                    28:b9:41:83:9c:85:c0:6e:74:44:01:25:ae:b9:4e:
                    e5:fd:ee:4b:62:b6:d9:6a:fe:37:57:96:f6:46:a1:
                    39:b9:fa:c8:50:99:ee:05:a8:e2:84:29:e3:f1:cd:
                    06:d2:06:a0:f9:ac:df:e2:9c:e6:8a:2e:3b:6f:a7:
                    3f:00:01:c0:14:e6:35:37:15:c6:01:2d:5e:51:a0:
                    3e:de:37:b3:ed:ca:e0:5c:68:36:57:da:5b:bf:3c:
                    f8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:20:DF:DD:7D:78:DF:52:AF:7F:CD:F4:80:1C:FE:67:46:30:E2:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.2.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:1e:81:bc:d3:3e:99:07:6f:9c:60:43:f2:c1:12:dd:5d:a7:
         85:6d:d1:be:b9:30:0d:7b:01:70:19:b4:2b:89:c2:fc:d3:85:
         74:56:42:35:40:9c:c4:83:1b:28:ac:a9:31:04:82:ca:fb:cd:
         d2:e6:a0:7c:3b:31:3c:36:44:4d:65:16:1d:3c:8d:17:07:e3:
         14:40:3c:f6:7b:27:59:9e:40:b3:26:34:3c:78:9e:6e:8a:38:
         7b:8e:33:f0:6c:94:75:38:52:77:b7:8c:52:98:ea:71:9f:eb:
         8c:f0:bc:fb:c2:28:9d:5b:7e:64:3a:5d:6f:12:90:21:8e:1a:
         54:b9:a3:3f:7d:fa:b8:ef:d7:7d:37:aa:86:83:12:1f:c5:f4:
         42:c5:7c:eb:24:8b:66:15:dd:b0:fc:43:13:8b:68:66:cb:48:
         42:22:41:52:51:75:62:b5:b5:a5:44:2b:cd:df:26:66:79:44:
         be:58:37:a7:d9:31:1e:b8:d5:1f:f1:fe:9d:5c:c5:7c:73:43:
         a8:7e:60:9d:7c:c5:19:df:03:83:43:30:73:58:39:5f:1f:c7:
         7f:1b:b8:89:0d:4e:f4:76:d6:6b:47:ea:8f:36:6a:21:75:e9:
         87:14:58:e5:00:3a:67:31:49:81:dd:91:d6:15:92:f1:5f:80:
         ca:7e:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:09:11 2024 by rpki-client on console-ams.rpki-client.org