Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eae7a77d-f9de-49aa-84be-d1c938181031.roa
File:                     eae7a77d-f9de-49aa-84be-d1c938181031.roa (raw, json)
Hash identifier:          wsADr94HpWl9I62aDfCACeW1wXg3h5MrnL1f4n4bot8=
Subject key identifier:   A7:1E:A5:58:27:87:5E:15:AE:3A:66:4A:CC:CE:D5:3A:8D:37:8D:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C1F471D20AE6882D2F8F9C2EDFA20CAFECE3965
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eae7a77d-f9de-49aa-84be-d1c938181031.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        198.132.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1f:47:1d:20:ae:68:82:d2:f8:f9:c2:ed:fa:20:ca:fe:ce:39:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=4a0269488ba2e76b7c745c64ae0d1d5892e21e841a6997efd9303bd1de4fbe9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:3b:a8:1f:bb:75:20:0e:70:91:60:68:a2:
                    79:15:6c:32:63:6e:f8:e2:32:0b:2a:04:6e:63:70:
                    44:0f:3c:5c:c2:c2:b8:25:9b:42:16:54:73:5e:43:
                    58:bf:e1:4e:4a:52:c5:f2:ff:a7:e2:b0:26:17:74:
                    26:79:96:1c:8e:cb:ef:37:e1:af:9a:f3:3f:ee:8f:
                    ac:4f:8d:c5:f1:7d:eb:e0:43:04:d6:b2:c7:fb:7a:
                    04:66:a1:67:b3:ba:36:7f:45:31:2a:d8:c5:8f:3a:
                    7b:a0:b1:61:19:8c:89:31:46:a3:5a:33:03:63:07:
                    25:83:79:f3:cd:b9:d4:e6:bb:85:d6:44:7c:f9:a2:
                    55:98:18:26:0e:e4:0e:6a:d8:ea:ca:43:d0:93:73:
                    7c:22:51:5d:80:0c:c1:75:21:56:82:13:14:51:fb:
                    f8:35:16:a4:af:d1:0f:0e:82:05:69:82:21:c5:1b:
                    37:5b:26:c6:c6:5c:5c:e3:2b:5a:a9:b7:c5:05:b8:
                    c4:21:09:c1:df:84:58:b3:5f:65:bd:40:e7:2e:8f:
                    05:d3:a8:6b:6a:84:4a:a7:19:65:66:5b:35:0f:b7:
                    1c:19:93:0c:85:b9:98:bf:ce:03:6e:b8:62:38:0b:
                    b8:70:bc:19:13:60:9c:92:45:a9:8a:7c:cd:af:48:
                    6d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1E:A5:58:27:87:5E:15:AE:3A:66:4A:CC:CE:D5:3A:8D:37:8D:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eae7a77d-f9de-49aa-84be-d1c938181031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:37:a8:c5:59:82:60:57:99:2d:c4:42:b6:f4:19:95:09:
         9f:9a:16:5f:87:1e:01:5b:e8:df:9e:6d:3b:ec:25:33:a5:71:
         67:31:d5:48:32:3f:52:f2:9d:88:ea:20:d0:b9:12:cb:6e:a9:
         66:e4:97:92:c8:0d:31:83:4f:38:c6:5c:bc:db:2a:01:70:eb:
         de:f4:61:46:34:88:0f:92:0d:7c:09:48:ef:50:15:1a:f2:3e:
         56:d2:41:c0:35:d9:e6:cd:30:31:7b:15:6d:af:13:a4:eb:c5:
         db:f9:ae:28:9d:59:f1:21:a4:af:73:82:4c:36:d6:9f:c1:dc:
         9e:11:f7:a0:90:e1:16:58:49:55:28:32:a6:bb:94:7c:25:dc:
         1e:a6:22:8e:a2:5a:25:a8:0d:6b:a5:6f:e6:d3:cb:d3:94:60:
         61:e1:f6:fe:a6:56:d7:81:9b:da:79:c7:b6:a2:6e:9b:d5:a7:
         73:2f:8d:33:0c:ff:c9:22:17:1b:c5:bf:b5:81:a2:b6:2c:69:
         cf:41:2b:d5:94:90:3d:f6:b2:8a:d1:76:17:fe:9d:bd:47:8a:
         2e:04:ac:b2:b3:d2:6e:ad:1b:f5:b3:3a:9d:64:54:3d:be:30:
         4b:ba:9d:05:5c:50:f8:f6:e3:b9:80:7c:67:a4:94:6d:08:8d:
         86:96:c4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:51 2024 by rpki-client on console-fra.rpki-client.org