Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ddfdc3-556f-4407-a58b-d20b5a2ca974.roa
File:                     e6ddfdc3-556f-4407-a58b-d20b5a2ca974.roa (raw, json)
Hash identifier:          4NxAwb+O/JWvd8d+u2LWdxhV5yAkXOXFXjzjadT5EKI=
Subject key identifier:   FD:4A:7F:C4:96:2E:5C:B7:EB:03:CB:A5:94:CC:C4:8F:59:2A:DD:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6647265D0D98645E31EA2D76CE389991FCF742EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ddfdc3-556f-4407-a58b-d20b5a2ca974.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        63.176.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:47:26:5d:0d:98:64:5e:31:ea:2d:76:ce:38:99:91:fc:f7:42:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=4ca9576309db4c15833ee3fe55b9798dd1565c393a9a59bb38a2795bf8b8fd60, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:20:82:e6:a1:75:7c:cb:99:c9:8d:33:3a:29:
                    0d:d6:95:53:e2:7c:a4:80:b5:4f:73:9c:1a:4b:22:
                    48:ff:28:f5:aa:11:8f:79:89:5a:c3:b6:98:c3:d5:
                    48:9f:1e:11:66:01:3e:f1:b8:5c:91:ab:9b:39:c0:
                    eb:80:0b:14:93:c3:4a:a9:88:80:30:aa:eb:1e:4e:
                    70:7e:66:be:b0:19:80:2d:17:91:1e:f9:cc:e7:23:
                    c7:31:fe:6c:96:6d:d5:6e:10:4e:8c:12:8a:52:56:
                    12:46:39:b3:dd:d8:2d:1a:34:a7:09:0d:dd:44:08:
                    be:f0:2f:bf:19:52:cb:fb:f4:1f:26:78:e8:27:1b:
                    96:9c:ca:8d:a4:f3:b3:c4:66:6b:46:29:27:c2:27:
                    58:64:92:94:00:de:7c:76:51:7b:47:64:6a:9a:17:
                    df:4f:16:2c:cf:e2:09:67:ad:03:a1:a3:fc:87:f8:
                    1e:1d:a1:11:1f:96:c7:88:e6:6b:0b:ea:c0:e7:49:
                    74:1f:06:08:af:33:f5:e3:a3:b5:5e:de:84:0e:8a:
                    22:3a:b6:f8:ff:3e:2a:17:26:24:c0:7d:b5:7b:a5:
                    e9:09:6a:b6:f5:83:d9:08:ef:ad:df:94:10:5d:27:
                    e5:f2:15:01:66:bc:00:e6:66:bc:d7:e5:01:9d:da:
                    66:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4A:7F:C4:96:2E:5C:B7:EB:03:CB:A5:94:CC:C4:8F:59:2A:DD:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ddfdc3-556f-4407-a58b-d20b5a2ca974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.176.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         02:c0:fa:5b:88:47:31:6e:6a:51:82:c8:ba:7d:5a:c7:3c:72:
         f9:2e:fb:60:79:64:54:14:d7:02:8a:67:2d:99:1f:0e:6a:47:
         73:86:cb:67:56:a7:ac:c1:e0:31:c0:f1:87:57:6e:ec:ff:32:
         b0:e6:1b:ba:6f:93:1d:78:f8:93:a7:3d:36:c0:39:ce:2b:bf:
         5c:c3:ef:b0:09:cb:6c:69:9b:2f:b1:c8:9b:f3:e8:a3:35:ad:
         53:62:e1:e5:98:86:57:23:d1:b5:1b:87:26:1a:58:c5:6b:16:
         03:d1:14:b5:4a:e5:2c:36:ca:a8:fa:ba:7d:d6:b3:07:9a:de:
         bc:23:fc:87:2a:0f:c0:d7:c8:05:05:d6:dc:2b:2e:b8:54:b2:
         f8:a6:84:db:6a:6e:98:e9:4c:5e:6c:0b:b7:8b:97:ff:c7:18:
         f1:43:3c:25:ae:6b:39:ba:2c:22:1e:cc:ef:af:d9:09:39:b7:
         32:67:f0:0b:7a:a8:f4:f5:bc:68:c8:54:22:ad:6e:29:1d:45:
         5c:ad:c1:54:ce:27:83:b3:8f:47:70:fc:4e:5b:1a:40:d6:05:
         68:de:bd:8c:88:a7:d8:2e:3a:79:a0:9e:e0:c8:3f:25:30:db:
         09:84:81:99:25:44:80:5a:fb:83:c2:46:f0:e2:b5:06:04:81:
         0f:ea:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:06:45 2024 by rpki-client on console-fra.rpki-client.org