Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb635d41-9a0f-4519-940c-e94f80ae9d7e.roa
File:                     fb635d41-9a0f-4519-940c-e94f80ae9d7e.roa (raw, json)
Hash identifier:          iK1/Z2hVmVbSOtj5Kjw+o7tS8bOZgKRdDqFDiStV45o=
Subject key identifier:   63:6A:18:EC:A9:30:C3:CC:71:55:77:2A:37:B2:03:BA:28:66:68:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53E06AC4EF7D43057F606FE59A1D2E37C5E7DFC7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb635d41-9a0f-4519-940c-e94f80ae9d7e.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        35.30.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e0:6a:c4:ef:7d:43:05:7f:60:6f:e5:9a:1d:2e:37:c5:e7:df:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=59752f1d3fbd0bc2a4aa967a1292eb57e0d6cf8392f0d16b85b6b1b7c402a8de, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:8f:cd:4c:e8:67:fd:6a:2c:f2:64:47:c2:
                    9f:5d:f0:b4:cf:1f:33:fb:d8:45:e7:82:60:5e:41:
                    d0:99:f3:bf:76:e8:6c:80:01:4a:37:56:a1:a7:23:
                    5f:62:26:ff:a4:cb:88:7d:5d:84:b5:24:ed:bf:14:
                    8b:67:f4:47:79:73:c2:18:7a:35:66:38:c9:1e:61:
                    9f:c1:33:61:88:5a:c5:df:be:9c:c4:64:9b:65:f2:
                    92:61:f6:1a:61:de:57:1f:91:4d:4c:f2:ae:3c:dc:
                    dc:b1:80:1f:4e:ed:fd:89:5d:8a:4c:63:20:fd:fe:
                    f3:8a:a1:10:65:e1:13:16:d8:5b:8e:b8:e7:48:f6:
                    23:55:d0:8a:d8:e0:02:0a:53:26:e9:eb:9e:35:d2:
                    05:c8:43:3b:b0:4b:4b:9e:04:d4:49:38:f4:1f:66:
                    f2:90:95:b8:a3:1d:2c:e9:95:85:fa:ba:15:4f:9d:
                    62:ac:73:fc:e4:bb:b2:69:86:4d:71:0c:76:fa:3e:
                    75:30:a2:34:59:fa:b1:74:77:b8:bf:ec:28:20:76:
                    e9:22:c6:60:9e:d9:0a:f1:68:d4:93:e7:48:79:a3:
                    2d:31:4b:1c:19:b9:1e:7c:63:f2:09:1f:f3:51:0d:
                    59:27:28:27:61:90:1d:47:53:37:54:62:b9:14:c2:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6A:18:EC:A9:30:C3:CC:71:55:77:2A:37:B2:03:BA:28:66:68:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb635d41-9a0f-4519-940c-e94f80ae9d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.30.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         02:ef:c8:e0:d3:03:12:45:ee:2f:5f:65:ad:0e:d7:30:cf:51:
         f1:97:70:ff:62:da:e2:4a:e0:2b:74:e3:cd:ab:05:f4:be:41:
         39:e0:9f:63:81:f9:79:e8:c1:72:73:49:1f:0e:a0:d9:75:f1:
         07:88:b8:3f:12:08:58:74:34:3c:26:0c:04:2e:9a:5b:f8:a1:
         86:9b:7e:3f:7e:4e:fd:93:29:4a:44:2d:e6:7c:a2:34:78:17:
         b9:d5:e7:da:fd:ad:82:4a:a0:0d:06:f0:f0:8d:c8:51:98:b6:
         ad:e2:23:ec:79:06:3b:75:d9:67:15:9e:53:f8:8b:19:92:cc:
         ac:27:dd:e3:f5:ec:61:15:1c:e0:87:8c:b7:38:4f:3c:55:bf:
         5a:ae:24:5d:60:93:58:61:58:ae:4c:0c:09:1c:84:3b:01:e5:
         43:98:68:ed:b2:a1:91:22:10:de:54:a1:d1:a3:50:d2:91:60:
         05:02:b5:4a:84:fc:15:90:54:54:32:dd:31:d7:86:4f:28:45:
         80:7e:45:6c:2c:56:46:92:79:29:a6:a2:ba:8c:09:d1:f7:ea:
         9e:33:f8:1d:8f:43:c2:34:f3:c4:42:45:80:f2:13:fa:f2:c8:
         81:c6:80:c0:97:a9:3c:85:76:ab:86:c6:eb:7a:aa:00:83:50:
         fc:2d:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:51:16 2024 by rpki-client on console-fra.rpki-client.org