Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb56cb92-b2af-486c-8e14-550871fce8cf.roa
File:                     cb56cb92-b2af-486c-8e14-550871fce8cf.roa (raw, json)
Hash identifier:          UHCi7FgBOzY69LCcUMtSulhs8k+NUeMlhvs7sN+9Bp4=
Subject key identifier:   78:8E:26:23:AA:9F:CD:8A:D6:91:EA:1D:E4:70:AE:1D:BE:C8:10:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23288FF475AF7973BCE663FD4A5C88BDE3B93AA0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb56cb92-b2af-486c-8e14-550871fce8cf.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        70.131.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:28:8f:f4:75:af:79:73:bc:e6:63:fd:4a:5c:88:bd:e3:b9:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=8cf4f260348f5a2526f645deba0a7ec5a8e34372d9dac9bfb16fa59924626d38, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:6f:99:30:f7:5c:e7:90:c9:1c:5d:fc:c0:
                    05:22:9f:33:b1:36:25:7a:ed:dd:0f:4d:d9:a2:8a:
                    12:ad:01:6c:83:38:58:4b:e8:37:f7:1d:60:17:8e:
                    a4:69:a8:fa:87:1a:95:d7:35:1d:c9:67:3e:cb:f5:
                    b5:d7:d2:c3:73:19:76:48:7b:32:e4:a3:d8:45:58:
                    ae:9e:6b:e8:df:09:13:27:f7:ed:63:68:ea:a7:cf:
                    93:07:cf:6f:c1:77:db:e5:4e:a2:bc:92:81:f1:4c:
                    90:b8:8d:65:be:ad:0b:51:24:20:12:29:6e:3c:91:
                    d0:57:37:51:6f:43:29:cf:37:d7:51:95:29:6a:7a:
                    6a:5f:78:00:b2:42:88:23:0e:e7:dc:ef:5c:b0:f5:
                    08:89:bd:a6:2b:26:6d:c9:6e:f2:f0:d5:80:55:f6:
                    29:50:22:65:c1:f2:2a:25:dc:61:a3:5b:1c:08:5a:
                    e2:b3:de:f6:89:c4:55:7a:75:0f:dd:a5:4d:6d:37:
                    da:7c:f7:08:42:73:d8:0b:f9:9f:2b:61:91:7d:c4:
                    46:1c:41:9e:81:4c:67:a1:82:c6:a7:d9:c9:4c:11:
                    1f:3f:87:81:cb:4f:7e:9a:b7:10:00:74:4c:c6:d2:
                    0d:bf:cf:0d:b5:aa:0e:90:3d:1a:b9:fe:fd:2b:5f:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8E:26:23:AA:9F:CD:8A:D6:91:EA:1D:E4:70:AE:1D:BE:C8:10:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb56cb92-b2af-486c-8e14-550871fce8cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.131.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:6c:be:6f:fe:74:13:ae:14:fd:d5:2c:b9:52:88:a7:b7:8f:
         cf:d6:1c:96:40:8c:97:71:96:0b:dd:91:37:f6:17:a6:2b:8f:
         7d:b8:d0:92:11:69:ab:5c:48:c0:73:90:a3:7a:da:81:ac:fd:
         e9:f2:a6:1e:23:f3:7a:94:ba:a3:e5:6e:d6:9c:24:21:86:d8:
         b9:3e:c5:de:30:64:52:c7:0b:7b:18:fd:ad:de:27:50:e3:33:
         71:93:ba:f9:89:c2:05:2b:d8:93:77:31:4e:38:3b:b8:10:ea:
         44:4f:ad:89:06:28:4a:a9:09:cc:2a:65:f9:c6:9a:2d:43:aa:
         cf:f4:fb:74:56:d7:ee:72:a0:9e:4c:3e:7f:be:e8:ba:fb:cc:
         26:a0:d2:9e:4b:56:28:2e:f9:08:b0:e7:53:ab:c6:5e:74:16:
         7f:7a:49:df:1b:fd:8f:03:11:f6:92:fe:cb:8d:eb:77:4c:1d:
         1a:a8:3e:1a:07:d5:b0:aa:51:64:89:72:a8:e9:1c:43:3e:b9:
         bb:1a:ce:47:71:a2:3a:f2:57:5e:20:99:3f:92:50:a0:61:2e:
         b6:fe:ab:ed:33:a0:d4:aa:58:93:5e:3c:8e:8e:03:f8:56:ff:
         f2:80:06:47:79:b4:1c:9b:51:e0:1d:95:df:5f:18:4e:c6:d0:
         f0:0a:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:25:38 2024 by rpki-client on console-ams.rpki-client.org