Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de215d32-3cf7-4146-b264-f996ff25bcd8.roa
File:                     de215d32-3cf7-4146-b264-f996ff25bcd8.roa (raw, json)
Hash identifier:          5UsfvoGMKv+oBfNm8zhXUNscvaFkOZmyg4I5c9YrB8c=
Subject key identifier:   D4:08:EE:1F:4F:C0:B9:50:0E:BD:1B:8B:45:78:70:22:A0:D2:1B:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22377CE37552E995F8C0C713735105B75DD50D71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de215d32-3cf7-4146-b264-f996ff25bcd8.roa
Signing time:             Sat 20 Apr 2024 00:00:00 +0000
ROA not before:           Sat 20 Apr 2024 00:00:00 +0000
ROA not after:            Sat 25 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        93.79.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:37:7c:e3:75:52:e9:95:f8:c0:c7:13:73:51:05:b7:5d:d5:0d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 20 00:00:00 2024 GMT
            Not After : May 25 23:59:59 2024 GMT
        Subject: serialNumber=31e8b1c287e7649660ef07c9407a562464c8b1f4aa7ab156cb91dc1db4e84097, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d2:49:cf:5f:86:86:b5:66:c8:af:79:44:45:
                    e5:43:cc:cb:14:b1:93:8b:11:b7:91:2b:bd:05:c8:
                    cf:fd:4a:84:68:13:c2:be:f1:92:41:f8:c2:ea:4b:
                    72:c8:16:ce:f8:22:1e:98:93:0b:f8:ff:86:4c:4c:
                    79:ed:ae:24:66:82:66:24:bf:2b:1a:e9:44:66:98:
                    0a:f4:7e:3f:7f:e8:e5:10:1a:99:bf:34:9e:14:0f:
                    e2:8e:f2:da:e7:5f:d5:ad:d5:d1:25:70:9a:6e:ed:
                    eb:8b:69:7d:3d:5e:e2:d3:fb:7b:f8:7b:7f:ee:64:
                    d3:25:3f:b2:1e:6a:29:e1:60:02:02:4d:4f:6c:04:
                    1e:d6:f3:ad:cc:6c:d8:87:18:56:36:fc:c0:00:b8:
                    7d:e7:3e:e0:ba:8c:35:b4:8e:10:9c:9c:8e:64:6f:
                    95:7c:08:69:fa:af:41:9d:67:c1:5a:24:fd:ce:45:
                    2f:3d:84:72:e1:f2:f4:b0:ab:ea:e4:46:db:46:43:
                    56:64:7a:f0:94:10:a1:08:d9:f4:15:56:87:35:c1:
                    d1:ea:a7:59:60:1c:05:9f:d4:e1:cf:ea:5d:d2:74:
                    8c:4e:d4:ce:40:93:33:e7:e4:ae:67:fe:3e:a4:60:
                    ac:c6:bd:6a:b6:13:10:0e:83:24:80:9d:f6:60:7b:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:08:EE:1F:4F:C0:B9:50:0E:BD:1B:8B:45:78:70:22:A0:D2:1B:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de215d32-3cf7-4146-b264-f996ff25bcd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.79.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         02:29:eb:24:c3:be:b7:a7:fd:8e:67:82:62:42:8e:7d:27:fd:
         7e:3a:2c:d9:e4:94:96:01:15:e1:c6:bc:ab:e2:a4:92:19:47:
         04:24:57:a8:65:95:1d:1f:40:ad:e4:8f:c0:c5:19:00:6b:41:
         23:bc:d9:f3:3a:dc:a7:39:71:8d:61:93:7f:60:48:18:84:f7:
         44:96:b3:4d:ec:f2:59:c6:ac:01:67:e4:c0:eb:ff:65:62:4e:
         37:08:51:e1:fb:b9:f4:7e:e6:86:4b:53:a6:56:93:b6:a9:4a:
         22:94:81:5c:1f:b6:48:dc:71:ab:ed:db:d3:c4:7a:d8:5e:00:
         67:49:64:90:80:94:cf:18:65:0e:50:14:1f:e0:2f:c7:65:9f:
         c8:f3:d5:1c:8b:99:f9:f5:47:b5:e3:6c:1f:0c:69:9a:ba:89:
         6c:70:de:87:84:e9:4d:39:e0:98:49:43:f9:79:f0:cb:07:8a:
         60:4d:fb:83:18:40:66:0a:1d:57:dd:6a:4e:3d:26:6d:85:2c:
         0c:72:5e:de:05:42:35:10:ef:1c:cb:85:a1:2d:6e:b3:31:b2:
         91:03:5b:03:43:bc:c4:da:10:2a:84:37:6d:b3:33:94:3c:b5:
         2a:9c:24:2c:a8:91:aa:84:25:fd:b9:0e:68:25:11:64:9e:ac:
         a4:61:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:05:44 2024 by rpki-client on console-fra.rpki-client.org