Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4f678cb-1897-41d4-b6a2-b45f958900f6.roa
File:                     e4f678cb-1897-41d4-b6a2-b45f958900f6.roa (raw, json)
Hash identifier:          fsN0OPX+FYbubRJl0yV6TFL666mKbn/+HCl4Sa9t7ic=
Subject key identifier:   C3:69:0F:08:A8:05:43:48:9F:30:89:53:EB:10:8E:A6:50:C7:2A:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08458E6F0489530FC6F3D5D5228616040A60541B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4f678cb-1897-41d4-b6a2-b45f958900f6.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        40.235.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:45:8e:6f:04:89:53:0f:c6:f3:d5:d5:22:86:16:04:0a:60:54:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=1f1843ffffaf3aa1956cc6feaffa7d789021e816e04cd04ff4c174f9344fd33e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:bc:da:97:45:7b:6b:e9:76:95:7d:fe:0a:
                    04:f5:10:55:a0:98:6e:9f:85:b0:0f:0a:c2:f7:6b:
                    9e:0b:78:9e:07:08:96:14:52:0d:b2:d5:58:db:cf:
                    72:33:c9:11:46:eb:bb:09:b8:65:4d:95:ac:11:d1:
                    94:98:b5:7c:28:9e:9a:8b:51:22:c6:a4:e9:81:09:
                    d7:4d:31:60:7d:3c:65:6c:5d:29:a9:a0:31:fb:09:
                    8c:c0:d0:69:0c:b9:fb:5d:04:6d:38:7a:76:bc:cc:
                    ca:9c:0b:e8:68:bf:f7:05:05:42:23:f7:0e:bf:f7:
                    2f:a9:88:10:18:53:36:ed:41:35:48:a0:cc:d5:be:
                    85:55:e6:c9:d2:5f:c1:0d:7b:bd:ea:2a:ad:84:f5:
                    a2:43:f0:27:df:7e:34:2d:53:16:56:18:13:ad:b4:
                    ad:7e:bf:32:4f:e6:39:c5:7d:2b:8a:6f:dc:bb:3a:
                    d4:ab:4d:7c:62:8e:59:07:3d:5b:4a:a6:f0:fa:97:
                    04:c6:b8:8a:12:d1:67:fe:62:5b:51:0a:e7:18:ba:
                    44:19:bd:49:3a:76:ba:1f:4f:db:07:70:44:a6:80:
                    19:70:a3:0a:68:4f:9f:cb:62:12:f9:fe:60:bd:47:
                    96:71:50:0c:d2:53:96:a5:52:52:3a:d0:83:e8:0a:
                    35:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:69:0F:08:A8:05:43:48:9F:30:89:53:EB:10:8E:A6:50:C7:2A:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4f678cb-1897-41d4-b6a2-b45f958900f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.235.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:e8:c5:c0:2d:69:31:c9:0f:ac:a3:ee:7a:4c:59:9e:64:bb:
         29:58:ad:de:95:b9:5a:24:90:99:b0:43:42:6c:c1:80:f3:27:
         23:5d:1e:ae:01:22:55:50:6f:7c:9e:e7:2b:a6:79:bb:ef:84:
         68:d6:e7:95:ee:57:0b:55:c1:a3:a4:2b:a7:26:ed:f9:5f:02:
         ab:7f:ad:ac:75:af:b1:45:75:e9:41:de:64:dc:43:03:12:f9:
         4e:f3:fe:ad:19:89:71:5c:fb:8e:3f:8b:07:15:ac:7a:7e:55:
         dc:df:53:e2:0b:da:7a:0e:3a:9c:74:a1:03:2b:9e:53:b1:d5:
         80:41:85:ce:a4:7f:19:b0:09:fe:6b:14:13:d7:34:6d:56:62:
         50:37:d0:21:96:5a:62:5e:ec:80:4b:a5:e4:37:cb:9f:c1:c3:
         2e:b4:4f:c9:46:69:7e:9a:0f:3b:83:c2:44:8a:b4:2a:94:20:
         75:1a:08:85:ea:f5:95:d9:62:a8:f7:ed:5d:9a:d7:da:fb:3a:
         9c:09:47:3f:00:bf:4f:59:28:1e:85:1f:6a:f4:93:ca:46:87:
         5d:21:7f:90:74:13:65:2d:ff:5f:10:41:28:8f:c1:34:0d:1c:
         41:95:67:0e:d2:70:ee:6c:49:be:ff:40:70:dd:a0:80:80:ab:
         5a:9f:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:51 2024 by rpki-client on console-fra.rpki-client.org