Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e70619ef-99f7-46eb-a898-5e439f8b4962.roa
File:                     e70619ef-99f7-46eb-a898-5e439f8b4962.roa (raw, json)
Hash identifier:          OaBLZEt6maEh4l18RkMpeCWOD/EXL2RhGJrgU/0VZFk=
Subject key identifier:   AE:16:63:E4:F8:0F:29:67:3B:85:93:F7:AC:A3:C4:DA:A8:AE:87:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37268A42641CE8F54CE10335FA5FC00052E9C7D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e70619ef-99f7-46eb-a898-5e439f8b4962.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        194.134.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:26:8a:42:64:1c:e8:f5:4c:e1:03:35:fa:5f:c0:00:52:e9:c7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=66214624a83438609939d8ad65c84ddfc6054466a973cc88020f49cd9c5d0a44, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:7f:93:73:5c:9d:bd:e0:ae:9d:f0:2c:c5:
                    9b:3d:00:6f:29:ab:94:d1:6c:bd:36:71:94:c3:39:
                    84:89:76:38:64:fb:39:60:02:fe:a3:5b:47:f1:50:
                    68:aa:3c:f6:ed:6b:e4:fc:2b:91:ca:52:c4:fd:df:
                    2a:1d:c8:3f:3b:fa:ca:f4:17:ea:2b:70:65:ce:4a:
                    58:a3:e3:a9:90:52:30:0a:e1:b4:ba:d2:5a:01:f5:
                    85:94:0c:d4:0d:74:e3:ee:66:d0:e9:10:a8:3a:b2:
                    5c:12:36:5a:2d:2c:15:eb:dc:7c:17:dd:2d:c1:0b:
                    ac:c0:47:46:a1:08:7a:58:91:9f:0d:b9:20:45:21:
                    15:b2:5f:57:97:7a:25:63:fe:49:c4:1d:15:e5:cc:
                    49:eb:f1:6f:02:1d:67:f1:68:1f:c0:94:0a:77:a0:
                    bc:90:25:a0:5f:2e:0e:c5:a6:cf:da:4c:21:0a:d3:
                    2b:46:df:6a:da:62:a8:d6:af:95:ed:7e:49:bc:a3:
                    c9:b6:66:21:37:a2:f3:9f:2c:22:e1:59:4d:d3:ed:
                    4e:31:b0:0c:20:3f:01:2a:9b:65:ae:39:e8:01:2b:
                    6d:50:ed:db:0b:d6:21:d6:d3:6e:ca:6f:2b:3f:77:
                    d1:c5:d8:83:71:c1:a9:fe:b1:5d:f1:dc:f8:22:cf:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:16:63:E4:F8:0F:29:67:3B:85:93:F7:AC:A3:C4:DA:A8:AE:87:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e70619ef-99f7-46eb-a898-5e439f8b4962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:1b:cd:06:4b:e6:f4:e4:b6:f2:19:f1:28:bb:ad:b3:c4:
         36:b6:7b:5f:e4:fa:26:af:6e:50:3a:8c:8f:7f:7e:25:76:de:
         03:68:b4:73:76:26:8f:fa:40:33:ec:0a:ff:88:59:00:44:da:
         e0:94:d2:02:70:d1:e0:b7:b4:c4:b2:bc:5b:94:35:8d:19:28:
         1b:28:7b:6a:e9:fd:e2:b1:da:23:71:d0:1f:f9:7e:e5:d0:1b:
         b5:50:df:e6:c5:ec:fd:5b:5d:aa:61:bf:51:17:75:5e:00:cf:
         eb:31:b8:f9:28:73:29:4f:07:96:7d:fe:cb:57:8d:a6:3b:6f:
         c9:37:44:c5:3f:a3:75:b7:c1:29:3c:53:3d:f0:f7:5d:03:e3:
         f9:3c:8b:6b:15:70:71:6e:e2:a3:6f:d4:5f:83:d5:71:89:e8:
         65:54:2c:89:ca:a5:13:18:c2:25:a2:a4:f0:7e:41:30:e5:65:
         ba:3f:55:42:d0:73:7d:8a:43:a5:b5:b0:25:fe:6f:9d:a6:e1:
         21:4b:70:f8:58:b6:9e:42:de:75:64:e2:7b:8a:42:9c:15:57:
         7e:83:47:02:cb:07:4d:9a:a8:27:ea:28:6b:a6:7a:c4:52:56:
         64:a8:9e:50:58:05:36:89:27:a2:3f:89:34:a5:e9:00:6c:4a:
         a8:7a:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:19:59 2024 by rpki-client on console-fra.rpki-client.org