Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05f569a5-385c-4cb8-93c2-2f09899573c3.roa
File:                     05f569a5-385c-4cb8-93c2-2f09899573c3.roa (raw, json)
Hash identifier:          dFMtXdIBy8XnJ3u6pZNeXhd+OLAGGUYW/v538R3ChW8=
Subject key identifier:   DF:69:1F:6D:81:27:15:0D:49:B6:2B:8A:DB:B6:9C:E1:FC:CD:EF:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       363C64B3DA964DE12B48A54EF107E510E96007CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05f569a5-385c-4cb8-93c2-2f09899573c3.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.229.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3c:64:b3:da:96:4d:e1:2b:48:a5:4e:f1:07:e5:10:e9:60:07:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=07b944128b93f463291bec2e0f6bd8dea51dfb570c88e4b1ee081a0e60af2348, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:70:48:98:5d:5f:80:8d:b9:53:9a:82:9b:
                    c3:58:41:de:bf:45:d7:81:b9:a9:a2:50:52:f2:23:
                    18:a9:49:7f:e3:58:55:97:e5:37:c9:27:cc:c2:2e:
                    6a:bf:ba:02:a3:7e:08:4b:a9:cd:dc:bc:06:ed:58:
                    8a:e0:ba:d6:a6:41:ff:6e:d1:34:93:69:d2:52:8f:
                    ba:7f:3b:5f:77:c5:a6:05:27:3a:48:03:82:b1:4e:
                    d7:4f:85:30:0d:65:a2:1a:19:7c:20:55:be:68:13:
                    3c:64:96:58:1e:18:6a:c4:ec:a4:7b:31:f1:ae:19:
                    e8:ed:7d:91:0d:37:87:a3:f9:f4:70:9c:27:4d:0a:
                    28:02:0c:93:7c:57:95:bd:7c:8a:0c:57:e6:4e:47:
                    4b:58:71:3b:4c:54:60:f9:89:5d:59:f9:d4:2a:f8:
                    d9:7d:4b:7d:34:d6:41:f7:9f:a3:20:9b:4b:80:41:
                    ef:07:da:9c:ad:64:1d:69:3d:a8:9f:f8:01:a1:28:
                    11:ca:ba:c0:ca:09:8f:26:ab:20:c3:d7:1d:bc:9e:
                    93:02:57:15:62:96:58:e7:f2:55:ad:17:19:94:1b:
                    91:bd:b1:0d:9a:65:26:9d:46:08:84:8e:3a:52:03:
                    9d:95:93:6b:0d:ea:bf:0a:78:9d:17:e1:c8:84:05:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:69:1F:6D:81:27:15:0D:49:B6:2B:8A:DB:B6:9C:E1:FC:CD:EF:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05f569a5-385c-4cb8-93c2-2f09899573c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.229.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:a3:9a:19:db:0b:2b:85:0b:84:24:96:6b:c8:e2:89:6f:46:
         02:8c:1a:7f:50:0a:28:86:f0:44:be:0c:03:8c:f1:63:47:8d:
         18:aa:55:f2:1a:fc:8b:41:93:a1:33:80:e0:50:9e:c8:d4:7c:
         02:85:8d:82:61:e2:ae:ec:68:15:23:c8:73:83:80:a0:61:bb:
         62:f4:cb:7c:77:a2:2a:d3:0c:2f:be:52:aa:3a:30:11:e2:65:
         ea:43:3e:38:28:14:23:8c:49:2f:0b:f5:c4:f2:ae:79:8c:2b:
         9e:f1:b2:f0:97:62:ff:1c:ad:e6:d3:2e:8c:9f:47:85:05:88:
         3b:93:b2:ee:87:de:45:fe:e6:1f:0d:8a:43:3b:27:a5:d3:e3:
         41:95:b0:58:5a:a4:15:2a:ed:d1:bc:df:65:b5:c4:5f:49:e2:
         1b:b4:34:1a:a7:c0:2c:bb:bb:ef:90:e8:69:a0:b4:40:24:6c:
         97:a2:61:00:58:a6:21:1a:ba:5d:fd:4a:36:85:af:cf:5b:91:
         17:77:6d:de:e5:c9:1d:8b:df:5a:8f:2a:44:e8:d3:8f:4c:f3:
         d3:bb:17:08:3d:7b:9f:93:c4:f8:b4:00:bc:5c:ae:1b:a6:62:
         45:2d:76:d3:00:a3:88:2f:fc:2e:43:66:9b:c6:ba:55:6d:a2:
         26:aa:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:18 2024 by rpki-client on console-fra.rpki-client.org