Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dcff05a-b485-4af0-b517-7423dc28da41.roa
File:                     8dcff05a-b485-4af0-b517-7423dc28da41.roa (raw, json)
Hash identifier:          z2GFdhgjhCN3H25L1+oX9ChZEIE6hSCD2dy/hIe2mRU=
Subject key identifier:   92:61:AD:94:BF:F3:D4:57:84:50:ED:CF:28:82:06:88:04:CD:6F:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A8E36086EADA7A6DCF22794509752D3F5B9923F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dcff05a-b485-4af0-b517-7423dc28da41.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.244.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8e:36:08:6e:ad:a7:a6:dc:f2:27:94:50:97:52:d3:f5:b9:92:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=e6b90803aab7c306e0efc7989aeb9e00068debbd39f492a28eeffe0c4168d5c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:d7:5e:d8:5d:2a:73:d4:7f:60:69:17:5e:
                    ae:dd:4b:2e:63:a3:f2:fc:0a:24:91:f7:13:ad:a7:
                    16:e1:ee:12:48:05:4c:25:34:a3:4b:88:83:df:52:
                    fe:73:b6:a1:ce:94:56:eb:d4:02:ea:eb:c8:7c:33:
                    3a:77:e4:6c:02:91:46:08:ac:68:06:39:5c:7a:b6:
                    98:d9:71:00:69:49:2e:eb:1a:25:f8:0d:74:bc:f6:
                    a6:87:99:bd:09:4a:c3:82:79:83:50:8b:53:a8:a7:
                    9f:17:3f:8e:c5:d6:6e:b2:d1:83:a7:6e:63:79:9d:
                    a1:96:a8:6d:06:c1:15:d4:f4:be:86:78:22:52:4d:
                    1b:bc:0b:04:8c:1b:ab:a3:95:4f:68:af:af:71:7b:
                    53:8b:68:97:1e:26:91:11:6e:cc:de:a4:92:88:c0:
                    95:05:2b:c4:fc:19:36:3e:9e:80:a2:f0:5c:2f:1e:
                    3e:5b:3c:4c:85:22:98:52:5a:2c:89:9f:35:c3:c5:
                    7d:fc:14:fb:62:b3:4c:75:3c:af:b5:39:a3:55:53:
                    9a:e7:18:e2:01:df:92:ab:b1:7b:e4:be:f0:f1:6d:
                    31:75:47:15:e4:30:85:f2:b7:d7:76:a4:12:ef:3f:
                    34:84:74:45:3e:48:6f:f4:ce:c6:bb:6f:1c:c6:85:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:61:AD:94:BF:F3:D4:57:84:50:ED:CF:28:82:06:88:04:CD:6F:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dcff05a-b485-4af0-b517-7423dc28da41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:83:57:3a:f0:e7:15:ca:a7:6f:d9:c6:f6:9f:1a:7e:46:e0:
         98:bd:c1:69:e7:5e:30:a0:85:89:03:f8:e2:a0:55:3b:f2:8f:
         f1:9c:30:6e:dc:08:f0:72:64:b5:b0:01:a3:17:88:af:bc:02:
         8c:2b:fa:62:39:46:d5:cd:db:3a:a8:4f:a7:d3:b0:bf:54:25:
         24:37:42:ac:29:b6:ef:91:7c:38:5d:1d:98:64:6a:42:0c:0a:
         0f:4d:8d:c9:de:51:19:b3:30:1b:6e:e4:16:5e:03:bc:81:36:
         85:97:83:64:8d:3a:b5:73:20:f5:df:ff:6a:e8:c2:d9:4e:4e:
         f7:b5:0d:d5:f4:95:f4:44:f8:9b:d0:a1:37:34:88:c5:66:6b:
         83:8b:3e:5c:4d:7a:51:1a:b0:e1:f6:82:ba:37:f8:0b:28:75:
         fb:b1:25:59:4d:b8:64:13:5e:ff:c9:20:6a:18:f9:43:00:64:
         db:ed:f0:30:8f:86:a3:b2:0a:97:2e:2c:86:2c:d3:ae:d1:bd:
         81:22:9f:ab:bc:da:f7:47:37:2b:29:cb:bf:9e:ba:e8:06:70:
         64:6b:be:ef:32:67:b4:01:69:87:88:14:c6:2c:cd:0a:0e:29:
         d2:5e:7c:cf:59:fa:f2:41:cc:65:6a:71:a0:6b:ae:c8:a4:7f:
         21:82:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:29 2024 by rpki-client on console-ams.rpki-client.org