Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa
File:                     c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa (raw, json)
Hash identifier:          x/OSnATuTULmJJYiDhI4IDEKHEBFa2jLz/R9OrAPh8g=
Subject key identifier:   A1:E3:EA:2B:75:C0:EC:8C:42:29:40:CE:A8:43:23:86:5B:9C:DA:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       324B693CC44C4BE6C1C1B5998A8EBB2FEC518DA9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.123.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4b:69:3c:c4:4c:4b:e6:c1:c1:b5:99:8a:8e:bb:2f:ec:51:8d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=14915d9ca157d936b8d34630e05a6a5f74d631ec9c86e0cbaef4aa4fd400c171, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:45:91:8e:28:0a:2a:72:56:1b:89:34:ea:
                    51:14:18:bd:80:d1:56:71:11:ff:27:34:a7:3d:53:
                    c9:11:6b:72:49:78:b5:11:b2:69:95:dc:f7:ed:c9:
                    16:e0:4d:a0:4e:03:df:89:86:1d:c0:ac:17:6e:4e:
                    fe:ab:ac:ad:3d:40:b0:f8:c8:11:4b:80:bd:ac:e1:
                    fa:56:ee:1c:00:90:17:57:e2:47:8e:d6:a2:29:07:
                    c3:46:d9:3b:bd:4b:95:29:e4:b6:7e:0b:1c:e0:eb:
                    fd:37:e4:8b:3c:b9:0a:d9:e1:e1:bc:23:f5:f3:6f:
                    dc:90:aa:1a:c9:54:54:cd:85:a1:b1:d6:ca:3c:83:
                    dc:0c:72:f3:db:8f:ea:ba:ce:3f:6d:e0:1f:c3:27:
                    76:db:41:fe:ea:5c:4f:2e:ed:56:2c:6d:4f:03:61:
                    b8:82:cf:9b:5a:2b:6d:cd:85:59:6d:86:c1:95:a4:
                    3d:6c:10:b3:0e:c1:a2:0d:e9:97:0f:27:89:6e:48:
                    c2:22:1b:e0:73:20:78:20:d6:34:b6:9e:07:05:7e:
                    2d:29:44:ba:5e:8c:e8:36:b6:18:e4:dd:ec:07:b3:
                    c4:df:bb:f8:b6:87:20:01:09:1c:b2:78:90:7f:e8:
                    53:cc:74:20:13:5c:71:a9:3f:86:5c:85:20:5a:b5:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E3:EA:2B:75:C0:EC:8C:42:29:40:CE:A8:43:23:86:5B:9C:DA:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.123.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:59:ef:19:63:74:79:a1:9e:45:36:ec:e3:49:5a:97:fe:6e:
         4d:37:3b:71:a9:79:d0:91:55:48:75:a3:6c:83:ff:20:4d:3b:
         68:98:34:9c:d4:2c:d3:75:46:45:09:76:f0:31:54:c0:af:60:
         c4:66:3d:75:66:18:29:b9:32:b5:23:cf:30:85:c7:9c:4a:27:
         48:00:83:e7:1c:a2:2d:d0:ad:e8:f0:9f:3f:6a:68:df:94:7b:
         33:d5:93:90:b8:f1:5c:2b:57:06:50:be:25:2c:42:5a:2a:99:
         9d:7b:b2:22:68:ab:4d:e2:27:35:22:ab:bf:9e:c2:2a:95:bc:
         d8:6d:2c:3f:79:b9:88:5d:d4:60:b3:7d:e7:70:6e:59:3b:30:
         dc:35:58:41:ad:ff:09:f1:d2:50:93:1f:ff:be:2e:77:f5:92:
         e8:c4:48:83:74:6f:86:d7:ad:00:77:22:ea:d5:e9:11:c7:94:
         03:8c:1a:b5:8f:ad:75:17:67:96:03:cb:6f:c6:49:16:cc:42:
         99:76:7a:9d:eb:c0:1f:86:38:67:0a:2f:bc:1b:32:9a:80:f5:
         ca:37:b5:12:5a:2a:5e:53:cc:d7:ae:ed:a4:c9:7e:b4:18:02:
         77:c9:ed:77:68:34:9a:70:bc:22:b4:cf:f4:24:82:80:b6:58:
         ca:47:d1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:42 2024 by rpki-client on console-ams.rpki-client.org