Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e512016b-e16c-4edb-9384-830c85c7799a.roa
File:                     e512016b-e16c-4edb-9384-830c85c7799a.roa (raw, json)
Hash identifier:          ORxHtGqs0Zs3nsP63M0/saf36jc/MtUMmM0/uN3N0uk=
Subject key identifier:   CA:FF:E2:A0:63:52:CD:58:CB:84:56:9E:41:6D:37:1A:CB:45:1A:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       179AF32703C26148DE5782EA97FC3C5E69EE4A53
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e512016b-e16c-4edb-9384-830c85c7799a.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.167.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9a:f3:27:03:c2:61:48:de:57:82:ea:97:fc:3c:5e:69:ee:4a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=0bf6a8545e798cad36cf6f31292dfb4229edd05b7d8e27380dc92e1ec89ae053, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2b:85:f6:84:56:67:bd:57:7e:cc:f8:72:f5:
                    7f:84:53:a5:df:8e:40:e0:9f:4f:53:91:64:86:9a:
                    59:6f:4b:99:a2:07:3a:ea:44:be:36:14:b6:1d:ae:
                    94:8a:8e:4a:10:69:4a:f7:79:72:d0:1f:a6:b8:f6:
                    bf:4f:55:04:a7:23:22:3d:2d:f5:46:6e:59:83:65:
                    5d:10:f2:b0:92:47:2a:cb:c8:82:a8:25:dd:ce:03:
                    4f:08:46:56:bb:c9:fc:3f:a9:d6:24:bf:9c:5f:b3:
                    0c:59:b2:69:7b:31:d0:36:cd:43:b3:b9:96:e4:a5:
                    fd:0e:52:9b:cc:94:7e:e5:9d:a8:55:32:2d:a2:b4:
                    16:d8:31:18:69:04:a5:bc:40:e6:05:7c:f8:d7:0b:
                    25:af:9c:97:7e:46:a9:33:d2:e7:a2:9b:1c:91:3e:
                    ff:6b:9b:16:49:f3:7f:2f:1f:59:17:5f:a7:ed:47:
                    51:48:02:7e:d6:64:38:b2:db:9c:c3:b5:01:68:e1:
                    c1:ce:74:21:61:2c:70:95:0c:21:c5:ac:9e:68:40:
                    c4:aa:50:c8:55:15:91:05:71:20:0f:a0:c9:a7:21:
                    ad:1c:01:49:42:63:9c:46:de:22:6d:c4:45:a4:e9:
                    86:8a:21:98:7a:1f:3d:ce:fa:42:23:bf:e5:a1:b2:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FF:E2:A0:63:52:CD:58:CB:84:56:9E:41:6D:37:1A:CB:45:1A:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e512016b-e16c-4edb-9384-830c85c7799a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:01:76:91:66:85:71:b2:b8:db:2e:7d:4b:ee:cd:fe:1d:75:
         25:eb:8d:df:b4:e1:6a:53:33:2f:a7:25:a3:e0:38:62:39:ab:
         51:cb:73:01:bb:65:8f:09:55:75:7d:36:ea:00:8b:10:b8:65:
         17:8a:2a:ec:41:89:8b:d4:87:dc:cd:bb:90:a9:ae:b3:3d:91:
         ee:ec:d4:4e:f4:f4:a7:f6:56:3e:56:4d:e3:7b:ec:7a:78:f6:
         af:b1:14:bc:80:d1:5a:79:a7:1c:17:d2:ba:59:ee:ae:7f:02:
         fb:4b:ba:76:ad:f0:bd:06:3c:05:8e:ec:72:ac:10:5a:b0:a1:
         16:3e:ab:36:39:15:a2:a7:96:65:be:7f:c1:c7:fc:d6:e9:a9:
         09:68:a6:da:f0:fe:d0:1c:6b:b7:09:9f:99:1f:44:0d:9f:a4:
         fa:fb:9b:a3:fb:32:59:e3:4c:70:7b:22:9b:66:1c:54:73:0d:
         37:ee:9b:b3:81:c6:4f:63:cf:d2:b4:54:d2:4b:cd:60:11:fd:
         9a:b1:54:c2:b4:6d:f0:3a:3a:41:bd:1a:8e:e2:89:30:b5:40:
         81:2a:aa:86:a1:f2:ec:84:4a:59:ca:87:36:16:85:30:36:c9:
         c0:5d:5e:8e:d7:d7:69:b5:ee:21:c8:47:f0:ac:7c:0e:49:47:
         fd:8a:fe:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:42 2024 by rpki-client on console-ams.rpki-client.org