Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5e7adb4-e2ae-4398-a5d2-59215b1d206d.roa
File:                     c5e7adb4-e2ae-4398-a5d2-59215b1d206d.roa (raw, json)
Hash identifier:          gb9N8U/xsOv0AaXGfJrdMph5dpvTpDXKbm5rK52jfDI=
Subject key identifier:   38:85:93:2F:AD:B4:A3:EC:D6:46:B7:6E:C1:F9:6E:75:7C:2D:F6:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1543E13FC164A0AE1AEAD777AED0C26A725D1021
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5e7adb4-e2ae-4398-a5d2-59215b1d206d.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        40.177.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:43:e1:3f:c1:64:a0:ae:1a:ea:d7:77:ae:d0:c2:6a:72:5d:10:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=a2771d20c48d99c30c6d3e3dfc5504a9e44e975b99f817905437ddd6762b7114, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:51:eb:dd:9e:bb:da:0c:7f:cd:b8:d9:51:
                    47:b0:44:eb:a4:1e:85:3d:51:8f:d7:05:b8:07:6d:
                    36:43:74:ad:62:37:df:9f:e4:e0:21:70:88:b8:3d:
                    3f:10:69:8c:25:da:97:0c:bd:35:85:16:a0:df:20:
                    99:f1:e0:1e:55:f1:b2:15:c8:6b:bc:10:3d:36:2c:
                    ed:af:ab:c5:97:a3:a0:65:c3:75:ea:3d:68:db:12:
                    42:16:8a:90:dc:44:20:cd:bd:97:cc:c6:ef:f1:70:
                    b0:3e:78:18:ca:98:44:17:9e:4c:1a:49:3a:0d:1a:
                    3a:7b:f1:de:da:2d:5e:26:5c:ed:f2:93:24:2e:a8:
                    93:00:aa:07:2f:8c:74:3e:1a:75:4f:e5:06:1b:3b:
                    55:8a:ba:73:50:46:4e:1a:0a:96:c1:b1:4f:cb:72:
                    a4:df:68:bd:79:8d:c6:57:61:e4:78:dd:42:47:f9:
                    49:99:73:b0:5e:8d:cd:e3:2c:9e:01:74:29:e1:be:
                    ff:8f:e3:c7:6a:87:56:ce:17:97:97:74:5b:50:0f:
                    c4:92:65:20:b2:64:97:91:5e:3b:df:9d:2a:8e:07:
                    26:e9:66:56:6f:6e:a7:cb:8c:ff:f9:7c:38:3d:a7:
                    0c:d4:78:db:f5:b9:bb:d3:ce:f5:7b:df:cc:e3:02:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:85:93:2F:AD:B4:A3:EC:D6:46:B7:6E:C1:F9:6E:75:7C:2D:F6:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5e7adb4-e2ae-4398-a5d2-59215b1d206d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.177.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:ec:2a:94:40:60:04:ed:a6:8c:0e:d1:cf:b0:13:5f:65:39:
         74:bf:87:24:b2:72:12:9c:29:1f:cc:f8:8c:3d:09:b1:25:2c:
         0e:05:2d:a2:05:2c:4e:21:db:65:3d:81:28:d7:68:5b:b7:30:
         6e:7b:58:08:68:48:8d:0f:df:a5:15:67:92:a6:f2:ee:a3:2e:
         33:66:25:2a:8c:d4:06:6a:5b:73:22:a5:1d:f1:c8:cf:33:3c:
         1b:10:12:60:52:77:e2:22:c2:bd:66:2d:c7:46:ae:56:00:2f:
         55:cc:db:6e:56:a1:d8:60:90:18:b0:9f:61:68:47:5d:b4:37:
         a2:f1:ba:aa:ff:be:1a:2d:50:e2:75:3f:ea:25:69:ca:ae:bb:
         48:c8:7a:88:c7:95:74:14:07:15:f3:d1:81:c1:e1:a0:3d:06:
         e5:6c:86:0d:3c:49:86:aa:e9:86:5d:84:f2:a3:a7:50:b8:a3:
         29:b5:3b:c5:e1:65:f9:45:33:35:cc:43:42:00:bb:37:56:f8:
         52:b0:5a:35:d6:29:15:fd:3f:6d:cb:f4:9e:a8:43:3d:f3:bb:
         66:58:23:65:62:1a:6b:ed:17:91:dd:0a:b1:97:0e:4a:43:ba:
         fa:36:85:1a:81:e0:60:d2:7f:d7:02:47:45:49:8e:ba:74:f6:
         73:cd:f6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:25 2024 by rpki-client on console-fra.rpki-client.org