Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8565160-197a-4008-b4b2-a00776aa71ff.roa
File:                     d8565160-197a-4008-b4b2-a00776aa71ff.roa (raw, json)
Hash identifier:          cuRer8ZqGSBNm0j+K/4vG5ki/6CyBCDoJi5xBKZGSv8=
Subject key identifier:   A0:18:0B:FE:6E:19:15:5D:8B:BA:A5:FC:7C:33:51:55:84:0F:6A:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       697050E57A08F2F9E60E6704352FE8EDA11BB4C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8565160-197a-4008-b4b2-a00776aa71ff.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        71.141.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:70:50:e5:7a:08:f2:f9:e6:0e:67:04:35:2f:e8:ed:a1:1b:b4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=4b7c9387345b4ac4469e12b3c7f206697d2ac21047dc84e87b19176ec2ca90cb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:10:37:cf:c5:e7:2d:1d:7a:4e:66:c0:11:14:
                    12:f2:d8:40:26:02:a5:a1:28:94:9b:2c:10:31:71:
                    ee:65:a9:bf:77:70:b5:c3:41:cb:36:4f:34:43:b4:
                    2a:4f:2f:28:2b:cf:00:eb:82:74:f7:bd:e8:8f:b1:
                    39:d2:77:d0:67:f1:aa:87:e9:f2:b4:78:51:e0:b0:
                    62:ba:2d:ac:5d:d4:2c:3b:dd:1f:a7:d1:58:4a:18:
                    74:43:b8:ee:74:17:27:e9:41:d4:05:1f:56:ae:b7:
                    87:e4:d6:85:eb:a7:93:a4:06:12:58:81:d7:ba:53:
                    26:09:07:a6:57:f3:40:d6:8d:a1:13:05:24:6c:3c:
                    8d:a5:e3:7e:89:25:0a:af:03:26:6c:42:43:9a:74:
                    dd:dc:0a:91:87:28:26:4d:c8:fe:fe:c9:50:a3:7a:
                    0e:07:f8:e0:8a:70:71:56:5e:1f:9d:4e:e5:cb:3d:
                    ee:50:8f:74:06:bf:27:2c:53:ff:c5:34:52:3e:bb:
                    3a:03:0b:b8:fc:f4:52:92:5f:00:9c:8b:8c:14:a4:
                    d3:9e:1f:5c:18:da:e7:bf:9c:b8:0d:e9:a1:d9:94:
                    0d:6c:e3:c2:f8:b8:3b:8e:c4:d4:75:06:e0:31:c3:
                    86:11:35:da:b4:7b:3c:69:c1:27:37:70:e3:58:3d:
                    d4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:18:0B:FE:6E:19:15:5D:8B:BA:A5:FC:7C:33:51:55:84:0F:6A:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8565160-197a-4008-b4b2-a00776aa71ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.141.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c9:75:d9:c3:94:34:91:1d:6b:43:e6:8c:a3:90:8b:5b:f6:1e:
         f0:e4:87:89:42:de:49:88:b4:bb:61:82:ad:f0:ac:0e:d0:98:
         c3:f8:93:a7:ed:a7:7d:48:e9:4f:de:05:5a:d7:b0:6e:31:f4:
         a2:2f:f5:69:05:f7:3d:75:d5:83:44:81:25:69:fa:ab:9e:ba:
         74:f5:f1:f8:a5:1f:9e:36:28:a9:e0:e5:05:00:4e:b6:f9:6e:
         12:0c:2b:45:5f:bd:ad:3c:a4:be:b7:f1:fb:fe:c4:0f:6f:02:
         89:f5:b0:88:eb:de:9e:10:ad:dc:49:48:80:d7:ac:bb:f8:ca:
         2f:bc:1a:43:8c:bc:6c:ee:44:24:e8:97:f8:45:21:5b:61:dd:
         70:f8:f6:28:83:e1:7b:ff:4e:7d:0c:9a:cc:bf:75:29:4e:2e:
         c0:1d:bb:10:5f:9a:ce:bb:23:cf:aa:33:e7:9a:78:2f:87:a2:
         b5:7a:0a:89:71:1d:5f:5a:f0:65:49:96:40:e5:7e:d5:df:01:
         0c:90:c2:8f:82:bb:0e:ba:2d:17:19:e3:96:05:84:f8:48:9d:
         64:d0:2e:de:d0:d3:68:bf:c1:7d:58:db:ab:90:6a:65:04:79:
         8f:f7:31:c6:19:71:73:f3:5f:06:5c:93:cb:d8:31:67:69:73:
         8c:10:7c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:26:32 2024 by rpki-client on console-fra.rpki-client.org