Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5715358-b449-42fe-9031-4085cda2dd36.roa
File:                     c5715358-b449-42fe-9031-4085cda2dd36.roa (raw, json)
Hash identifier:          pokEZWEQCk8bkmp+fhu++NRS7CfYMAebzadTl4c3ysw=
Subject key identifier:   D8:DD:91:32:AF:7C:74:70:CC:CF:F4:26:1F:18:98:C9:7D:EC:70:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BE7997755118BA930769E909A0D739F97876076
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5715358-b449-42fe-9031-4085cda2dd36.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        46.215.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e7:99:77:55:11:8b:a9:30:76:9e:90:9a:0d:73:9f:97:87:60:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=7a6a8c932dec0edf6d7b1d9fe245842dc929599ea111d745052bc98e18cba880, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:89:d8:c1:b7:ab:a5:a1:ee:58:3c:97:47:
                    1f:21:59:00:36:61:1b:50:4d:30:4f:e1:38:c5:2e:
                    18:1e:ae:64:5c:af:b8:fd:d5:bf:e2:06:eb:69:96:
                    5b:52:b4:4a:54:75:51:b1:95:33:c5:71:bf:fb:a2:
                    90:5d:11:9d:e6:c8:6d:c1:1e:b9:61:e2:16:b5:b1:
                    7b:c3:d1:e9:3c:d5:b7:c8:d4:e7:e1:dc:6c:c3:d7:
                    d2:80:af:c4:34:c3:e4:6b:a0:17:3d:4e:1f:56:00:
                    0b:68:93:ab:ba:3a:29:20:53:c2:1c:df:a0:6a:54:
                    ab:db:d2:a7:25:e8:9a:d1:a8:21:1e:05:da:65:2e:
                    f4:71:25:0f:4a:7b:0c:71:a1:de:78:25:68:27:1f:
                    e6:52:34:8e:4b:6a:be:57:1d:a4:63:49:69:77:31:
                    74:b1:e1:63:85:7c:f3:55:f4:63:e5:45:37:7f:b2:
                    77:e7:4f:86:9f:9d:e7:4b:78:c7:f7:54:bd:30:23:
                    20:e3:0e:a9:36:02:73:f5:08:5c:60:b4:6b:53:36:
                    ec:62:82:37:56:b2:05:1f:fb:24:b6:87:78:55:d7:
                    f1:72:e2:ce:d8:66:d1:cd:8d:99:65:e5:eb:29:c7:
                    a1:08:1d:97:eb:94:34:3f:5e:79:0a:33:6d:4d:74:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DD:91:32:AF:7C:74:70:CC:CF:F4:26:1F:18:98:C9:7D:EC:70:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5715358-b449-42fe-9031-4085cda2dd36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.215.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:82:ee:4a:4d:34:34:b8:2d:41:0f:59:3e:56:b8:8e:a9:32:
         16:11:1e:f0:e6:78:25:10:b9:47:34:8e:d4:55:1f:ce:d5:50:
         fa:b8:2d:8f:12:ae:e0:52:3f:52:5e:34:6b:65:b5:be:8a:db:
         5f:c6:15:9e:82:56:00:cb:a6:1e:8b:bb:ca:7e:88:c8:c0:f0:
         42:62:ca:c2:0a:d8:4a:26:98:d5:08:c6:03:35:50:1b:9a:cc:
         a6:e6:94:28:87:e9:a1:9e:13:6a:0a:c9:89:ff:cc:30:30:b5:
         3a:e8:45:b1:29:d8:f5:5b:d7:a5:94:6c:4f:14:04:f5:62:15:
         86:04:4f:0c:10:fb:9e:85:45:17:6f:14:95:80:2a:e9:86:e5:
         fa:b1:04:1b:f2:d9:51:1b:1f:24:64:0c:2d:52:66:8c:cc:9c:
         76:c7:99:3e:ff:dc:ec:4c:1a:94:78:da:55:1c:60:30:e5:de:
         88:51:d1:3b:bf:88:56:cd:7e:c4:04:b9:4c:af:48:d2:46:bf:
         46:ab:11:ae:ff:bc:ce:74:a1:62:55:78:6f:c1:1f:42:25:6e:
         aa:35:d7:8f:44:8c:2a:97:79:3c:32:18:d8:e4:48:0b:c9:89:
         e9:74:f3:52:0f:62:85:c3:ad:15:bd:bc:fb:fb:74:c8:f6:84:
         93:9f:95:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:25 2024 by rpki-client on console-ams.rpki-client.org