Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d83792ea-71f8-466f-b54d-d92ec2735649.roa
File:                     d83792ea-71f8-466f-b54d-d92ec2735649.roa (raw, json)
Hash identifier:          IiF+DtlvgIYNEkHiLDaBC5XWNBqape/0TzM44+pjabg=
Subject key identifier:   E4:8E:07:CE:4D:84:92:06:F6:3F:8E:F1:33:8B:B4:C8:DF:08:17:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D9E27316FF2D83579E1AB9C1EE212FD40DF3C7C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d83792ea-71f8-466f-b54d-d92ec2735649.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        130.31.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9e:27:31:6f:f2:d8:35:79:e1:ab:9c:1e:e2:12:fd:40:df:3c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=e68713d935c7ce7239375fa27620f69dfcc0c245ff4beb3d4a5beec4efa6a843, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:86:7b:09:38:2a:39:d3:31:dd:ff:95:96:
                    2c:1e:c7:56:09:9a:05:80:72:9e:34:bb:d7:f4:c5:
                    f0:c2:d1:5d:b3:0d:2b:15:26:b8:b3:0f:5d:19:9a:
                    ad:75:1d:2f:38:1a:0b:3e:b5:0c:30:91:aa:4c:89:
                    0f:49:54:9a:2e:f6:d4:b5:68:76:ce:59:73:c3:a0:
                    69:9d:75:10:71:23:e9:38:24:40:a8:9d:d9:4e:1d:
                    b3:93:64:58:59:4f:7c:ca:9d:91:5f:17:bd:c4:4b:
                    cd:3d:a1:c4:5b:f8:51:58:35:1f:65:e3:c4:14:0a:
                    e5:cb:72:9c:e3:55:6b:95:a6:90:39:d4:11:48:3f:
                    f7:96:ab:1f:6b:5f:18:d4:e5:d3:63:c7:be:37:08:
                    d1:c9:08:70:3e:e1:7e:33:2e:ce:01:e6:a8:80:95:
                    a3:68:71:30:27:43:4c:47:05:61:a3:0b:17:4a:df:
                    ac:1a:ce:d3:4b:a2:41:af:0f:49:fc:5d:d3:04:f1:
                    40:f3:d8:30:a9:ce:ee:4b:09:52:db:2a:4c:d3:ad:
                    9d:a6:34:9e:64:6c:50:d6:94:7f:fe:b3:95:f7:94:
                    1e:f9:c9:af:52:28:e5:b9:35:3c:fa:c6:13:cb:ff:
                    9e:6b:2c:91:10:c9:9c:98:6a:74:8c:df:f0:25:e6:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8E:07:CE:4D:84:92:06:F6:3F:8E:F1:33:8B:B4:C8:DF:08:17:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d83792ea-71f8-466f-b54d-d92ec2735649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.31.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:09:e2:ec:ae:91:64:40:b9:a5:6e:e8:cc:13:27:78:e4:35:
         21:62:29:d6:69:0a:7d:6c:ff:ba:74:3c:34:90:2b:b1:d1:70:
         7c:f5:d2:91:57:fc:dd:d5:77:60:7c:0a:ef:e7:55:65:8c:bf:
         17:22:69:8d:ce:b3:ec:ef:9a:ba:15:71:4f:e3:c0:87:e5:89:
         2b:b0:4b:40:a5:34:18:ab:4f:1d:ac:6f:ec:cb:c8:08:0e:fe:
         61:99:d5:94:a4:46:38:45:0d:13:80:5f:3d:d2:3b:9a:5f:6c:
         5a:cc:e5:01:94:33:b4:fd:11:67:ef:05:18:48:2d:0f:f8:dd:
         8e:00:c3:49:a7:e4:7b:2d:d3:ae:6b:4e:ed:a0:f3:52:6b:05:
         85:f4:43:35:4f:9d:a2:52:dd:43:8a:b6:2b:07:ee:ae:50:de:
         dc:c4:d1:a5:ad:e4:b5:ac:cd:28:5e:52:fb:93:d8:bb:67:7a:
         c8:fa:c8:92:b1:12:c2:6a:79:e9:53:f6:51:38:51:61:19:12:
         e1:b7:a9:4c:c2:27:21:ee:3d:50:36:4d:8f:f3:94:d2:23:e8:
         9e:a9:0d:66:c4:03:b3:3c:77:74:aa:80:6a:2b:5d:d1:55:55:
         48:0f:43:f5:25:ff:3b:8b:70:b8:90:f7:bc:67:9d:8e:89:a5:
         af:59:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:26 2024 by rpki-client on console-ams.rpki-client.org