Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b2e16a-c690-449b-b047-e0cdcb9ab93c.roa
File:                     d1b2e16a-c690-449b-b047-e0cdcb9ab93c.roa (raw, json)
Hash identifier:          xqpQs/IlM7senUlalyiUS7FHYMQbbiuellTcwDIDPdE=
Subject key identifier:   F8:34:2E:9C:82:16:37:D1:8E:C9:C1:60:08:64:84:0B:FD:97:55:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04D6B854D8E0F404E5FE2D9D8088AAAE2A2590B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b2e16a-c690-449b-b047-e0cdcb9ab93c.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        161.228.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d6:b8:54:d8:e0:f4:04:e5:fe:2d:9d:80:88:aa:ae:2a:25:90:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=f85fd4111fd82c264b063c10c17d3fcd31f7df7cea7073dad082d9661a39a877, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:5b:d2:aa:c2:3b:c2:e0:da:35:62:27:e0:
                    d7:dd:73:54:1f:0f:12:08:8c:56:e1:db:0c:b8:5d:
                    ca:cc:90:bb:20:c1:2f:93:c1:cc:38:47:62:62:55:
                    47:66:9f:24:d6:7c:4d:1b:6e:ea:46:17:65:06:75:
                    01:03:e7:13:15:e9:4f:57:c9:43:63:89:83:b1:7b:
                    ff:f5:fd:0c:c4:b8:fb:cd:d2:d0:ef:b4:31:d8:4e:
                    f6:65:68:59:98:02:99:80:3f:c4:38:f9:b6:e3:b4:
                    f6:d3:ad:27:f2:e5:2c:44:9a:26:f8:0d:2c:25:ba:
                    b9:1d:03:bf:3d:a9:8c:fb:91:05:ca:53:c3:74:c8:
                    0a:aa:14:5c:69:4d:4d:11:1a:e1:00:21:6a:01:44:
                    ec:77:c4:9e:6e:fc:dc:94:1a:2c:26:02:e2:f9:4b:
                    f4:c4:42:43:c8:7f:1d:ad:54:7e:5e:0f:e6:5f:a1:
                    51:87:71:44:4b:c0:2d:3c:b4:7c:44:7c:60:e7:6d:
                    8c:65:90:9e:43:6d:aa:d7:76:b5:a4:a8:35:df:23:
                    e9:cd:2b:df:8c:fc:51:54:dd:7e:b7:03:85:9c:0e:
                    fc:29:f6:5e:d7:70:de:90:c4:68:e1:3c:55:5d:8d:
                    53:b5:eb:86:dd:a8:13:b8:96:28:5b:a5:02:c6:bb:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:34:2E:9C:82:16:37:D1:8E:C9:C1:60:08:64:84:0B:FD:97:55:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b2e16a-c690-449b-b047-e0cdcb9ab93c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.228.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:29:7b:f4:03:3d:b3:7d:4f:03:42:c7:f5:be:51:fc:fd:e6:
         9a:b6:02:35:13:ea:5d:e8:3e:9f:90:40:a1:28:30:c0:94:e4:
         a8:ce:66:8a:ba:5e:55:12:1d:ef:85:7b:0d:db:16:2e:c4:4c:
         46:c3:6d:c4:5f:74:2f:9b:74:76:7b:14:4d:4c:e6:da:89:32:
         fb:61:2f:b7:62:9f:af:25:df:19:4c:61:fb:11:75:11:88:74:
         3c:76:b4:25:67:4f:b0:c6:2e:63:19:5a:d8:c5:c1:8e:80:b7:
         1b:d2:ec:5b:06:18:0a:b3:58:2f:0c:d0:70:e4:be:6e:48:a9:
         79:4b:fd:98:4b:a2:57:bc:0e:b4:15:58:6b:56:5f:59:35:0e:
         ba:01:33:94:94:b3:3d:c2:b7:aa:64:64:27:23:06:79:f0:ee:
         1b:bd:c0:53:58:fd:c0:f9:18:34:2f:ac:42:67:2d:21:f0:cc:
         cc:78:0a:94:a5:d1:4e:48:3a:1c:5b:3f:b4:22:bb:9a:92:44:
         3a:fe:b1:19:eb:c3:a6:51:75:a8:9f:da:3a:a7:43:f6:55:82:
         9f:a6:f4:f4:6d:5e:c0:f5:c9:d2:d6:59:59:9c:ab:71:ed:f0:
         9c:8c:e7:7f:39:94:54:4d:fe:fc:24:5c:40:cc:41:89:58:84:
         ec:8c:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:11:38 2024 by rpki-client on console-ams.rpki-client.org