Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa
File:                     07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa (raw, json)
Hash identifier:          jQfOKueVA01znjHTqy7g57ekQy/LSmu4PNtamNjnR5o=
Subject key identifier:   AF:CF:72:99:05:67:08:51:F9:11:44:4E:E8:4F:E9:A8:05:FC:DF:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D75CB59D247F04F4F8EC174E7BE09909FCE03A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.208.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:75:cb:59:d2:47:f0:4f:4f:8e:c1:74:e7:be:09:90:9f:ce:03:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=d26f6c702075c4624743cca18128c3fa1de161f590cb48555fec7ee2d5482511, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:40:1a:75:36:2f:a2:09:92:9b:f1:d3:b2:28:
                    30:c8:47:1d:01:41:59:87:aa:fe:22:bf:6d:00:48:
                    ee:a8:ae:1c:a9:5b:af:f9:84:49:cc:c1:bb:b3:ea:
                    19:9b:57:d3:de:ab:aa:29:92:7d:c0:56:23:03:ab:
                    99:ec:dd:c7:8b:5e:ef:d8:97:e7:98:18:74:d0:a0:
                    5d:0f:27:1a:5a:44:31:06:7b:71:d0:9e:a0:91:11:
                    e0:16:2f:0f:2d:f5:4d:cb:22:58:e9:03:c4:c9:2d:
                    3c:8a:5d:24:d1:9d:59:fc:35:6b:83:44:f4:60:4b:
                    64:66:af:4a:de:86:38:e4:57:30:99:48:30:51:3d:
                    13:68:85:36:82:0f:6f:c8:7d:bb:20:a5:fd:17:e5:
                    90:91:2e:21:41:a6:38:34:4c:05:c7:bd:01:70:9a:
                    1d:0c:d5:bf:46:c7:46:fc:c2:37:bc:a3:08:ca:fb:
                    eb:a6:78:38:40:76:72:6a:e8:8a:1b:99:32:69:74:
                    f3:1a:a2:79:16:e4:b5:89:19:11:cc:55:70:a3:31:
                    9e:cb:91:03:75:5b:48:4a:a7:11:b2:90:57:d1:46:
                    68:3b:a1:a2:3c:76:3d:54:8e:e0:9e:25:5e:95:4f:
                    42:08:d2:db:6e:da:59:3d:e0:23:2a:55:f4:7e:39:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CF:72:99:05:67:08:51:F9:11:44:4E:E8:4F:E9:A8:05:FC:DF:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:ba:88:e8:b1:12:59:73:27:cb:35:92:34:98:39:19:8d:d5:
         68:2a:67:27:55:4f:bc:ca:1b:fe:b6:e4:9e:05:59:1d:3a:f3:
         b3:7c:43:84:09:d5:29:51:f3:eb:ac:fd:b0:ea:43:53:9c:85:
         60:9a:53:bc:fa:22:51:e7:80:92:70:dc:7a:3f:4f:ba:c5:64:
         57:95:66:d4:5f:1d:db:28:82:13:5a:2e:20:d4:ee:85:98:30:
         37:25:7c:63:0e:30:6e:cd:42:0a:e2:b5:cf:6f:de:99:45:2a:
         40:7b:6d:9f:d4:03:98:6a:08:97:21:bb:07:e2:8e:15:2f:c1:
         d0:ed:cc:08:91:77:55:3f:71:2c:47:b7:ba:0c:c0:55:8b:55:
         f8:21:b5:ae:34:63:69:37:b1:bd:d3:88:b9:81:ca:b0:11:eb:
         d6:00:1e:c4:2f:0b:e8:3a:a5:06:2c:54:37:a7:34:94:d8:75:
         e1:4a:74:49:5d:87:09:ed:73:28:c7:42:58:87:e3:88:34:9c:
         00:40:14:b8:11:11:cc:b5:bf:34:28:80:d0:df:da:72:d1:ce:
         ee:f2:d1:86:6f:e3:ff:ae:b3:f5:d2:9f:e7:9c:3c:a2:d8:e6:
         03:35:fe:ff:4d:0c:7e:a8:3c:51:3a:0a:2f:2e:a5:15:57:56:
         9f:90:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:41:01 2024 by rpki-client on console-fra.rpki-client.org