Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ede5543-1eed-4473-8969-df0ce3aefd61.roa
File:                     2ede5543-1eed-4473-8969-df0ce3aefd61.roa (raw, json)
Hash identifier:          1daqORUP9/eQQcesdBAq5uZt3zqOib6I1P+BpGoC1XI=
Subject key identifier:   66:98:AB:1D:E7:48:7E:47:0D:91:57:67:E7:AE:E6:FD:49:1C:BD:A3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58A26C1AE5E25B0C976C94436D7DE09F08B8294A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ede5543-1eed-4473-8969-df0ce3aefd61.roa
Signing time:             Fri 31 May 2024 00:00:00 +0000
ROA not before:           Fri 31 May 2024 00:00:00 +0000
ROA not after:            Fri 05 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.125.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a2:6c:1a:e5:e2:5b:0c:97:6c:94:43:6d:7d:e0:9f:08:b8:29:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 00:00:00 2024 GMT
            Not After : Jul  5 23:59:59 2024 GMT
        Subject: serialNumber=be9a80651066c573a5d4b63dab9e382d957012d54e9ceec4d86cf35fced0efd2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:1e:bd:fe:b3:63:47:ec:70:59:8c:7f:81:
                    5c:2b:e6:12:be:f1:6f:ff:7e:dc:6d:bc:0b:b4:3e:
                    ca:e4:2b:6a:fd:8f:ea:de:64:08:8d:b9:00:79:74:
                    49:e6:69:5a:a5:87:71:05:fd:90:27:aa:85:b9:24:
                    74:1a:85:75:8c:40:51:4f:ef:9e:88:f3:80:14:f8:
                    27:fa:44:b1:b4:73:81:b1:56:64:cb:84:8c:57:b0:
                    b1:d3:36:1b:90:b2:2d:28:3e:f6:a9:9f:12:df:19:
                    4c:ec:db:49:ca:8c:56:f0:87:88:52:9f:6d:50:09:
                    e7:37:e3:47:45:bf:7e:df:a9:f1:f1:1f:1b:cf:88:
                    88:bc:97:3e:96:b4:3f:ed:e4:18:f3:c7:45:ad:d3:
                    5e:19:02:b5:17:c4:a0:52:38:aa:62:1f:84:66:77:
                    bd:e1:e1:d7:e9:8e:85:e5:aa:a8:9b:bc:e8:f6:49:
                    81:f6:cc:b1:b9:cf:a2:54:5b:3a:bd:c6:ea:ac:4e:
                    be:00:8b:84:ae:9f:0a:48:45:cd:a9:7f:e2:71:9f:
                    d0:c7:06:31:ce:78:fc:58:04:ef:2d:05:81:34:ed:
                    01:95:82:c6:87:c8:7b:b9:4c:0e:1e:3e:68:7c:55:
                    80:0a:a0:47:79:a5:a7:f6:b9:22:81:86:11:c0:b9:
                    52:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:98:AB:1D:E7:48:7E:47:0D:91:57:67:E7:AE:E6:FD:49:1C:BD:A3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ede5543-1eed-4473-8969-df0ce3aefd61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:16:a3:04:7a:1a:5d:cd:72:bd:60:e5:1a:a7:32:bc:62:0e:
         37:e6:66:b7:9f:63:a4:84:14:65:53:c9:4e:59:05:58:6c:90:
         36:8d:8d:37:a0:52:86:d5:54:cd:b4:ce:43:f1:e1:34:ec:e4:
         4c:59:05:1a:60:b0:53:96:cf:08:1a:29:53:25:c7:33:11:ad:
         0f:b9:52:e8:ce:ad:fd:9c:5f:93:5a:a9:2f:65:47:b9:62:fa:
         45:af:27:12:a1:d3:91:17:10:d6:da:11:5c:79:ea:23:67:72:
         ad:42:d9:e5:1a:55:d2:f9:c9:7e:72:81:75:6d:d2:08:5c:b6:
         b1:02:7f:93:05:5e:9d:f0:70:7b:e1:8c:15:d2:cd:d5:bd:48:
         80:34:b5:c9:e7:8c:27:34:d0:bd:ef:8b:63:aa:07:80:a1:19:
         31:b4:32:93:e2:18:c1:57:1c:b1:6f:92:4a:62:ad:b6:36:12:
         15:0a:d0:2c:52:79:ac:1a:3d:74:0d:7a:d6:b8:ce:a9:11:9d:
         8c:85:25:b1:40:ef:6a:51:96:ea:d3:d1:66:f2:95:0e:6b:08:
         3d:4e:2c:31:5b:69:02:a7:86:9b:66:b1:ec:e9:d0:67:88:b4:
         1a:89:77:e7:d5:87:85:32:48:e8:35:55:b6:29:d5:70:78:86:
         15:f1:f3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:50 2024 by rpki-client on console-fra.rpki-client.org