Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37a1287e-7819-402e-9c6a-a46f890f048f.roa
File:                     37a1287e-7819-402e-9c6a-a46f890f048f.roa (raw, json)
Hash identifier:          1l8Qf2qy5P0ux8J5udwS4DZWYp3gXsN6FrdIcKPRtb4=
Subject key identifier:   79:93:DC:60:DF:8E:E4:DA:85:E1:84:47:67:12:D2:5F:A5:B2:9A:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45B59D83BFD13DD92121E54530689E6FFA6E1044
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37a1287e-7819-402e-9c6a-a46f890f048f.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.38.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b5:9d:83:bf:d1:3d:d9:21:21:e5:45:30:68:9e:6f:fa:6e:10:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=c3db264179f2292a3a464a0179b9c3d9b592ce1ff7ea771f06cd8417f2fe94c3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9b:d9:ae:d5:c2:0f:1f:71:9a:00:9d:a7:b0:
                    c6:05:cf:05:29:01:0c:a8:b7:02:ca:83:2a:8d:dc:
                    46:5a:d7:c3:81:0b:db:50:86:ec:de:ed:81:9f:01:
                    5a:b4:3d:96:1a:5f:1b:7a:ae:3a:a4:2d:1b:5c:a8:
                    6a:56:68:7d:b5:c6:c4:fa:61:20:0b:10:23:d2:fc:
                    4a:58:eb:9d:69:9e:11:6b:a5:47:f9:7c:5e:e4:a0:
                    06:d7:f5:9e:36:4e:1e:d3:b6:54:fe:a8:d0:17:a4:
                    9f:a3:a1:fa:78:3f:8a:00:bd:01:48:e9:05:87:fa:
                    09:ba:b9:d2:ff:33:62:3c:d0:ad:26:78:65:9f:4f:
                    6b:8f:cc:02:5d:be:d0:b5:36:b8:3d:c5:ac:fb:5b:
                    de:fd:b3:0f:c7:cf:b4:18:0f:c0:d1:02:aa:f7:d6:
                    f3:3a:79:49:de:46:53:90:cc:74:69:07:cd:6c:e3:
                    8c:84:5b:31:5a:bf:f4:f2:65:ba:8e:b5:80:ae:19:
                    19:81:3c:f6:8d:f5:ca:c3:87:6e:02:ba:30:2b:63:
                    1a:d9:de:21:80:29:e3:3e:8f:9e:bc:0a:9f:0d:32:
                    b3:9f:f3:24:d7:7e:73:76:a4:d3:3d:da:f2:58:f3:
                    ad:c3:20:a4:54:a9:40:8e:f5:07:ce:be:3c:9d:a8:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:93:DC:60:DF:8E:E4:DA:85:E1:84:47:67:12:D2:5F:A5:B2:9A:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37a1287e-7819-402e-9c6a-a46f890f048f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.38.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:34:22:b8:1a:9e:68:82:41:d7:ab:26:c1:7b:43:dc:5b:0a:
         1b:d0:6f:de:ba:51:86:eb:b8:80:18:21:54:d1:84:ed:9f:e9:
         2d:76:f1:84:15:d8:f3:40:7e:7c:69:69:79:5b:6b:f0:85:cd:
         16:d7:41:46:4b:28:27:ca:ba:40:78:20:4f:e3:3f:c7:ee:4a:
         80:f9:3d:fd:d2:3a:60:8d:07:68:0e:f7:0c:99:1e:b5:4c:0d:
         78:f0:8e:3f:0b:87:e1:f0:df:1d:10:ab:5a:6d:c7:e8:d2:9a:
         48:f4:65:ad:f5:c2:28:5b:28:5a:eb:60:90:9a:58:32:b2:07:
         5f:96:9c:2b:84:21:46:ef:e6:2b:b9:8b:14:fb:b0:f9:14:69:
         11:a6:27:61:89:fc:1e:6a:81:9e:27:40:59:bb:ac:be:74:da:
         31:fb:35:17:48:e4:a8:50:f7:52:0f:0f:fb:53:b7:d4:c0:61:
         23:ec:4d:21:fa:26:a0:31:0f:97:35:20:8b:67:47:1e:97:e9:
         63:ae:ca:8d:3c:7d:7e:72:9f:b0:d7:ec:97:44:76:be:fd:01:
         e1:b8:9d:99:62:49:46:1d:04:bd:f0:4b:73:8c:f9:40:5d:31:
         35:b8:92:e4:79:ec:5f:ee:61:de:a1:b0:6a:9e:4e:15:f3:43:
         36:a2:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:51 2024 by rpki-client on console-fra.rpki-client.org