Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d90d63ec-9d65-4d9f-a290-2ecb84f5e98f.roa
File:                     d90d63ec-9d65-4d9f-a290-2ecb84f5e98f.roa (raw, json)
Hash identifier:          f+29Q7p1ijlqwRbkp/T6lFs1g/eTmrRYTAM5wveclvM=
Subject key identifier:   59:FA:EC:81:7A:C2:F4:FF:F4:55:D4:98:49:96:C2:5C:5F:00:D1:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       650B67E35E7CFA02E618DF4625A98F94A1888945
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d90d63ec-9d65-4d9f-a290-2ecb84f5e98f.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        194.148.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0b:67:e3:5e:7c:fa:02:e6:18:df:46:25:a9:8f:94:a1:88:89:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=b2bc6ec119f9de8ba0b2602c935c095fcc804b8a8aeecb06dc7a6779d3171c19, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:92:58:1a:62:6a:41:b8:8c:15:a7:d5:a1:
                    7d:a2:a2:d4:91:db:78:bf:cb:44:fd:9c:4b:1d:32:
                    7e:6e:7f:f4:a8:4e:ca:d6:71:d2:97:e2:35:e0:26:
                    2f:64:64:67:cf:10:27:79:81:9d:21:7e:35:7c:53:
                    28:f3:d9:cb:92:ec:82:d3:83:bd:4d:bb:78:ae:d6:
                    b3:f3:d2:31:77:cc:05:a2:c2:54:30:2c:c2:2b:a7:
                    21:4c:54:83:47:65:61:80:29:ec:bb:be:31:02:a9:
                    18:f8:26:3b:fc:db:c8:23:e1:48:7b:70:14:74:cd:
                    d7:74:e5:4e:e0:7e:6d:c6:43:16:a1:1e:62:ba:59:
                    c9:3a:bb:ad:63:54:a7:23:41:3a:26:34:01:14:4c:
                    8e:c2:af:b3:59:7a:b4:a3:6e:12:70:fb:88:80:b1:
                    55:fe:b9:4c:6a:cf:12:77:71:8e:50:1c:62:20:4f:
                    63:28:5e:fa:d4:51:ea:75:fb:a0:9d:2d:47:7e:55:
                    2b:5c:e1:5c:f9:ad:e7:78:f4:59:9c:fc:96:87:eb:
                    a1:e5:4d:57:84:de:ce:59:91:b1:3e:c4:00:2e:db:
                    6a:27:64:a7:84:81:a1:e9:a0:87:7d:9e:09:a9:3c:
                    36:a4:27:04:ad:37:30:5c:31:b3:a9:f1:7f:ef:75:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FA:EC:81:7A:C2:F4:FF:F4:55:D4:98:49:96:C2:5C:5F:00:D1:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d90d63ec-9d65-4d9f-a290-2ecb84f5e98f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.148.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:5b:10:96:10:55:7e:64:cb:67:a1:fb:ad:fe:63:18:de:71:
         14:93:43:61:52:68:a2:b6:1a:ae:f7:e3:9e:86:09:6b:bb:ae:
         f8:82:13:2f:58:17:d8:4c:aa:9a:fb:e7:5f:c2:2e:7c:06:2e:
         eb:a1:e7:1d:55:c1:2a:14:ac:6e:a0:16:c0:6b:6a:15:0e:a7:
         b0:09:82:68:37:4f:c4:7c:22:b7:2e:6d:fe:37:49:02:c9:c9:
         fd:38:dc:a0:b5:0f:b2:5a:47:56:17:00:33:ad:92:fd:8a:ce:
         41:43:59:98:17:ac:26:37:3c:bc:ff:87:83:87:3e:af:50:79:
         ef:25:23:56:50:90:d4:55:4d:26:04:28:f7:18:fe:fe:71:b4:
         ba:88:ba:fa:68:76:62:29:82:68:3e:f6:6b:e3:83:dc:3a:5d:
         a7:4d:84:6d:31:57:1f:dd:67:4d:c7:0e:24:91:fa:f3:9c:67:
         9e:a0:61:c5:4a:a6:5f:93:fc:52:64:01:cd:34:42:51:19:e8:
         8e:10:b1:1a:df:e1:62:d5:89:5c:77:db:ad:dc:d0:3a:61:6e:
         25:9a:d4:f6:bd:14:e5:9c:d1:24:79:21:37:80:a0:dd:b0:55:
         e7:43:fa:e4:8b:9f:3d:94:20:ce:2f:64:84:1c:e1:00:42:60:
         ea:63:69:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:40 2024 by rpki-client on console-ams.rpki-client.org