Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4243645-7ea0-475f-bd89-ab1ee2efb5c3.roa
File:                     f4243645-7ea0-475f-bd89-ab1ee2efb5c3.roa (raw, json)
Hash identifier:          hDF8n53qrUPd9S3M4iI5xdFJCMrREYPI/6ehEQrFYoU=
Subject key identifier:   15:59:01:4B:29:09:7E:1F:51:5B:58:42:24:C6:28:31:DA:F8:5E:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45E9F28D22A55C3EB0F4D1CB8A2083DADDC2CAF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4243645-7ea0-475f-bd89-ab1ee2efb5c3.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.137.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e9:f2:8d:22:a5:5c:3e:b0:f4:d1:cb:8a:20:83:da:dd:c2:ca:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=1a7744f0a8b8752c639853d5ed95069468e7a15691269f247fc283742e0132e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3c:8d:9c:11:43:c6:ba:0d:79:13:ff:ae:bf:
                    69:ed:f1:f9:85:c2:7d:79:92:09:36:28:98:59:7b:
                    f3:0f:27:b1:76:f7:19:f2:fa:d1:fa:e5:68:09:d5:
                    46:dd:3c:66:2a:55:10:a6:99:ed:0c:50:f9:0f:e6:
                    be:b6:a2:38:5f:34:f9:70:aa:94:cc:1b:0e:eb:f7:
                    6b:5e:c3:37:0c:ab:b7:43:62:8c:c1:15:5e:99:0f:
                    4e:c8:1b:ff:e9:82:53:a3:19:4d:24:31:94:fd:79:
                    6f:83:bd:8b:76:23:48:69:8c:17:27:b6:35:d9:c0:
                    a2:3e:1c:af:7e:e4:d7:c8:f6:d6:f9:4a:e6:57:f2:
                    b0:8e:7f:58:ed:c5:40:8b:9e:14:9a:5a:f5:a7:2b:
                    b0:bd:ac:b8:12:a3:65:09:57:25:12:13:a2:b3:9c:
                    16:78:47:86:ad:f8:5d:5f:dd:f4:be:c6:64:0a:b7:
                    1c:4a:f0:ee:e8:64:f4:c3:34:14:29:a7:c1:09:da:
                    90:42:b0:d9:5b:80:86:50:9f:3f:6d:45:8c:72:b3:
                    c6:85:76:67:6c:87:1c:cd:1a:23:c6:49:f5:d5:b6:
                    94:9f:a3:39:76:cb:a6:af:0b:fd:f2:cd:fb:bb:7f:
                    9f:e7:31:14:0e:ad:e1:6c:d3:53:67:10:f5:6a:7d:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:59:01:4B:29:09:7E:1F:51:5B:58:42:24:C6:28:31:DA:F8:5E:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4243645-7ea0-475f-bd89-ab1ee2efb5c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:1b:03:20:59:04:4b:13:b2:cd:e3:22:e6:cb:48:f3:c8:91:
         49:b8:6a:04:d5:ee:bc:2f:31:ae:46:40:f7:51:ea:08:a7:94:
         d6:dd:62:9c:be:16:64:97:55:7e:08:21:0f:6e:36:ca:c6:4e:
         ba:33:af:e4:86:d6:40:82:c4:1f:e4:10:43:56:69:97:20:0b:
         33:48:01:4e:29:95:07:70:4b:07:cf:70:11:8b:3c:e4:cd:55:
         a2:bd:c2:91:f3:f5:37:57:bb:03:d8:45:92:0b:64:a5:6f:27:
         f6:b2:8f:1a:1a:a2:b0:59:92:07:32:c5:c5:e6:c8:d0:4a:cb:
         f1:3d:70:79:c9:3c:1a:7a:b0:53:88:8e:cb:dc:c1:d5:34:86:
         67:b2:c7:90:cf:7c:7c:b9:ae:77:bf:1c:eb:6a:15:83:79:58:
         10:da:f7:ab:7c:fb:c8:ca:5c:6a:4d:20:4c:8f:5e:f3:42:97:
         fb:79:c8:d7:36:91:78:f0:50:f2:fb:dc:85:7c:49:e1:b1:89:
         82:a6:92:94:81:9c:80:8b:d5:2f:a5:dd:f2:4f:d6:21:22:b6:
         da:61:66:a3:3b:86:87:9d:12:80:3a:5c:0d:64:91:1a:65:0a:
         60:f6:91:6b:e0:7d:32:1d:b8:fc:46:9b:b9:ad:d5:7e:91:41:
         68:98:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:06:46 2024 by rpki-client on console-fra.rpki-client.org