Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4f2f94b-db7e-48bd-91eb-34bd4a07f649.roa
File:                     f4f2f94b-db7e-48bd-91eb-34bd4a07f649.roa (raw, json)
Hash identifier:          CEuKkmVB9gyUCpFBsFhUQYQYpHdZlweFHLQ1nmtXSxQ=
Subject key identifier:   6C:07:D5:27:DC:88:59:D1:01:5E:2B:BC:B2:DB:C2:21:1E:BF:CD:78
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       415277B6CE41AD7C31A060A6029ACA8237367A6F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4f2f94b-db7e-48bd-91eb-34bd4a07f649.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        108.136.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:52:77:b6:ce:41:ad:7c:31:a0:60:a6:02:9a:ca:82:37:36:7a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=bcf57a12299667a0ad1efe6e1937e687b2960a798947bb62046d78f0e649bec5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f8:d3:7b:2b:9f:4b:51:98:87:73:3b:88:90:
                    6d:85:5c:35:a7:35:a9:5d:2b:a5:ab:b3:f3:fd:8b:
                    7e:b8:1b:7a:7c:dd:4a:a8:80:85:f4:ee:88:48:cf:
                    d3:34:ac:17:2c:4a:63:ab:dc:0e:f5:04:f0:2c:86:
                    19:c6:fc:45:bc:5b:f1:c9:d5:18:c3:6b:92:3f:d0:
                    28:62:d6:81:25:68:23:05:bd:79:26:3f:b1:f8:24:
                    99:18:e5:5e:8b:5e:04:a3:80:24:0a:e5:3e:dd:7b:
                    65:03:d0:4a:36:10:c9:ad:f4:bb:2e:7b:02:e3:16:
                    3c:a9:01:26:5d:77:80:51:af:ea:21:e7:46:6e:cb:
                    df:65:d4:24:cc:09:3a:72:0b:7a:71:77:fc:d1:40:
                    63:f5:2d:6a:39:8c:00:fe:f4:d3:ff:39:56:d2:c4:
                    be:7f:44:67:82:5d:ee:81:c0:cd:86:2f:c3:64:53:
                    50:ed:06:37:b8:68:81:c7:d7:d7:ef:78:84:fd:10:
                    d8:72:3d:41:ec:a7:dd:d2:fa:5f:61:99:ce:aa:fc:
                    e4:d5:52:0a:08:fa:6d:ed:ed:c5:3d:9c:d5:c0:3d:
                    d0:24:ad:3e:90:9f:ea:85:95:c9:3a:6b:32:4b:a8:
                    a0:54:34:53:7c:ab:e5:13:f6:e3:78:56:26:48:40:
                    4f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:07:D5:27:DC:88:59:D1:01:5E:2B:BC:B2:DB:C2:21:1E:BF:CD:78
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4f2f94b-db7e-48bd-91eb-34bd4a07f649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:b3:6c:88:f5:fe:db:d3:94:fe:36:1e:c8:83:27:80:0f:
         04:44:46:8b:c1:2a:da:67:86:0e:3e:5c:39:38:6c:56:e5:14:
         eb:21:07:5f:8f:d7:33:ca:52:af:08:b9:c8:38:bd:88:09:55:
         05:3f:78:ae:db:66:83:14:cc:34:b2:cc:f2:ed:06:cb:44:5e:
         ab:7e:ab:9d:7a:39:6b:86:29:89:0d:7a:0b:d5:47:08:ea:0a:
         f4:e7:57:2a:ac:c7:39:65:9c:04:08:e7:ba:24:92:a0:52:e2:
         12:6e:0c:d2:e6:d5:4c:6d:7e:3c:52:d2:6c:fe:73:65:fe:b1:
         1f:c1:22:f7:84:47:26:f8:82:13:fd:4d:7d:cf:45:01:61:d5:
         85:94:d0:e3:0c:51:e0:e8:f8:61:ea:62:28:40:ee:6a:33:66:
         d4:02:ba:b9:73:86:69:42:f6:99:09:2a:93:f0:6d:b1:54:eb:
         5d:3e:b0:7c:d4:00:18:bb:e0:bb:0c:52:58:cd:d5:16:67:2b:
         1a:22:77:c9:a7:9e:af:4c:63:9e:ae:ac:53:68:0c:08:d6:65:
         a9:70:fa:04:92:44:ae:83:92:3c:f9:53:52:38:88:1b:1e:f8:
         e2:0b:25:df:5b:57:3e:26:ed:71:63:4b:de:44:f9:e7:9c:53:
         aa:64:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:51:16 2024 by rpki-client on console-fra.rpki-client.org