Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec722075-d5fe-426c-9806-c8ef01d81449.roa
File:                     ec722075-d5fe-426c-9806-c8ef01d81449.roa (raw, json)
Hash identifier:          rTuUMgTaAP6XyQP+sYdIpw6ZTrYgAHHtAgCK8fpSgmQ=
Subject key identifier:   85:07:C9:1F:62:7B:5A:BD:0E:E7:BA:07:E2:8A:AF:A9:12:FD:B9:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       717C40642E2623F8F921A35A53E7C1CA8458BF0E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec722075-d5fe-426c-9806-c8ef01d81449.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        155.40.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7c:40:64:2e:26:23:f8:f9:21:a3:5a:53:e7:c1:ca:84:58:bf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=dae0e09a0523d7d2f30f4518fcf27f29d7d985e4803951ed0a85d5e9fd048374, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:eb:c1:29:6e:30:eb:44:e5:2a:be:fc:95:
                    08:f7:2b:f1:5c:2c:b8:d9:af:ec:53:45:b9:73:85:
                    ff:72:8b:64:3b:46:c0:bf:e0:26:59:94:7f:4b:14:
                    b5:a0:1c:00:9e:96:02:bc:b1:0b:28:d1:c2:c5:77:
                    6a:43:96:b4:e9:1f:be:06:f3:1d:5a:68:dd:1c:46:
                    5f:d5:e6:5c:d6:d8:07:0e:4e:73:3d:fd:b6:55:33:
                    e7:0d:6d:5f:41:03:63:76:be:75:bb:fb:b8:95:0a:
                    ff:85:4f:14:ef:70:82:ec:aa:88:c4:ce:32:99:72:
                    eb:b2:fd:b7:1a:6b:c6:f7:49:fe:0a:fe:cb:8b:ac:
                    81:53:42:70:49:2c:61:4e:20:56:01:98:43:5e:91:
                    b1:99:8a:df:ad:03:df:19:e8:38:36:fd:6b:57:b3:
                    0e:26:2e:d2:20:ef:01:d7:8c:97:61:8c:86:5f:eb:
                    aa:a4:1c:15:9d:9b:36:7e:87:a3:52:59:25:33:c8:
                    27:ba:99:28:35:37:c6:08:49:8d:a0:72:f1:64:e2:
                    5b:12:5a:6e:e3:40:f6:6a:e1:6a:3f:4b:8a:23:96:
                    d2:41:ca:d7:49:54:25:ad:76:1b:b6:2e:1d:dd:d6:
                    e7:a4:1b:19:6f:7c:bc:68:38:6d:5e:cc:4b:fd:8f:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:07:C9:1F:62:7B:5A:BD:0E:E7:BA:07:E2:8A:AF:A9:12:FD:B9:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec722075-d5fe-426c-9806-c8ef01d81449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.40.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:93:e4:7d:99:2e:da:4e:67:3e:74:1f:c9:a0:fc:4f:98:
         a7:52:1b:a6:a1:3d:fd:0a:a6:f2:f5:91:e7:a9:5b:5b:bf:8d:
         2f:87:97:59:e7:f0:d3:ee:ca:7a:af:3d:2c:b4:f6:19:d3:09:
         3c:52:29:7e:9f:0c:32:05:e0:80:b8:e4:ac:4f:fe:61:cb:9e:
         0c:09:5f:88:4f:a8:07:c0:76:e7:cf:ae:8c:44:33:d0:17:21:
         23:17:21:ba:8e:84:dc:03:84:7c:62:50:95:ab:a9:07:59:dd:
         c0:19:e1:86:0d:a4:c3:89:16:4e:4b:6a:44:2e:ba:4a:71:74:
         1c:89:2a:75:8e:9b:e7:bd:0c:46:ae:d1:2f:ca:e0:19:49:26:
         93:79:d1:a4:84:1a:ef:64:4e:e9:aa:a4:ba:4c:76:f8:5e:3b:
         7f:33:b1:b6:6e:94:29:79:b2:88:3b:fd:d4:d5:56:eb:67:6b:
         ea:d0:c1:27:a4:b8:b7:e1:61:5a:40:10:0c:b1:c7:cd:67:76:
         a9:f8:d1:1b:27:fb:51:8b:d2:2e:33:4d:da:92:72:17:a3:34:
         81:e6:ff:3d:af:44:4e:dd:c6:22:d5:84:fd:5f:5c:14:af:02:
         6e:93:4e:0f:9f:7b:6e:12:3c:50:d8:a5:13:f5:4d:e6:8d:e5:
         ea:14:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:28 2024 by rpki-client on console-ams.rpki-client.org