Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbd49bcd-224f-4a8b-93d2-80dc17cdd84c.roa
File:                     fbd49bcd-224f-4a8b-93d2-80dc17cdd84c.roa (raw, json)
Hash identifier:          9Co2WFWgnU9UTTibJUNe1lMSnzw7OQyIMr1ed1zLAfI=
Subject key identifier:   53:D5:D3:1E:E2:9E:96:E2:E2:D9:4F:46:37:3F:7F:8E:11:C7:92:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E425119E3FA80837EF1A055BCABAB801D6C373D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbd49bcd-224f-4a8b-93d2-80dc17cdd84c.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        64.252.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:42:51:19:e3:fa:80:83:7e:f1:a0:55:bc:ab:ab:80:1d:6c:37:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=f33be1102a2644d9160999870bf904c6fc71cf0933fb4965c3473a4de7434707, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:d3:3d:48:61:3e:c9:d2:2b:3b:1b:65:a6:
                    8b:5a:ac:b5:a0:d3:40:96:0d:c0:fa:ab:cf:90:20:
                    91:3a:85:41:4e:55:83:8b:db:17:69:34:53:cc:87:
                    51:a0:2d:1a:dd:9f:04:dd:56:93:48:f6:dc:8a:e7:
                    8d:b4:6d:ea:20:e6:f2:f7:32:07:be:1e:54:59:56:
                    6c:1d:26:b8:b9:f9:7c:3d:a9:f5:21:6d:7d:95:89:
                    91:fa:aa:9f:f1:64:c4:5d:5b:a0:52:ee:1b:9a:12:
                    1f:99:45:00:85:0a:31:28:14:93:aa:75:2f:9d:fe:
                    20:ed:a8:7c:82:56:9f:f8:aa:e1:09:93:e2:a9:34:
                    85:98:b3:85:b2:d7:d1:67:4f:ae:6e:bc:8f:89:33:
                    b5:b0:f5:03:7a:bc:21:6f:b8:a9:65:0c:c4:06:13:
                    fe:7b:38:49:f9:c5:6f:8a:a3:e2:2d:56:88:b7:dc:
                    7f:19:6d:da:99:29:e7:f8:60:2d:95:98:b1:10:af:
                    e0:b2:78:47:7e:7a:c6:12:b3:99:ce:f1:0f:51:85:
                    8e:31:36:90:fe:af:64:1d:40:12:fd:eb:8c:b4:7a:
                    c8:5b:af:a1:54:76:d8:2c:ee:65:ab:5f:5f:4d:65:
                    c8:cc:b9:03:25:40:9e:21:88:42:20:f8:99:4b:1a:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D5:D3:1E:E2:9E:96:E2:E2:D9:4F:46:37:3F:7F:8E:11:C7:92:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbd49bcd-224f-4a8b-93d2-80dc17cdd84c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d0:fb:94:3a:11:1e:98:1d:3a:b5:3e:d3:f5:10:58:25:53:
         c3:e7:c6:d9:37:4c:1b:18:fe:f1:ef:69:a5:7f:42:24:11:04:
         7f:a7:49:17:42:7f:bf:1d:4c:43:ab:8c:93:a8:1d:6b:0d:91:
         7c:1f:45:fd:08:d4:12:c7:0a:41:ba:d5:f0:4e:de:a8:1f:c4:
         bc:6b:cf:c3:47:55:4a:d0:af:ca:80:96:57:b4:fd:c8:d4:1d:
         77:ae:ac:53:d9:86:f6:6f:49:6f:5c:26:39:0a:ad:db:7a:c6:
         66:51:f4:e2:d7:68:1d:ed:90:ea:e1:98:ea:8a:b2:dc:54:c4:
         fc:17:42:88:7c:ab:2c:30:9a:de:b6:06:84:d9:67:29:00:4f:
         09:58:a0:fb:e8:76:27:76:af:2a:69:bc:d9:56:d0:9e:4a:29:
         53:44:22:02:47:b7:a4:42:37:04:0a:8e:59:c5:a8:f5:1c:af:
         3e:15:ae:f5:61:fe:10:7d:d2:7e:a1:b1:c3:28:22:36:58:b6:
         4d:43:e4:bf:29:7b:fd:52:1d:8d:f5:3d:d4:a1:65:88:90:17:
         8c:f8:9d:21:01:3e:8f:fa:df:4e:69:ae:eb:ff:0b:a3:83:fd:
         7a:16:3e:48:cc:a4:52:2a:70:b2:88:3b:99:70:54:bc:99:e2:
         26:b0:df:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:41 2024 by rpki-client on console-ams.rpki-client.org