Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08e40c0e-513f-4211-bcc7-72038fad7525.roa
File:                     08e40c0e-513f-4211-bcc7-72038fad7525.roa (raw, json)
Hash identifier:          TQiNk9yd6BeKorJKkZZFppsXOdJurnfxPCuMlGX4AK4=
Subject key identifier:   78:D3:DF:46:6E:CC:C0:D2:0B:9B:72:69:E5:E8:A4:B7:3D:DC:73:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5777554E8365BB3A5A090898FBFC6F0FC53848C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08e40c0e-513f-4211-bcc7-72038fad7525.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        139.56.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:77:55:4e:83:65:bb:3a:5a:09:08:98:fb:fc:6f:0f:c5:38:48:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=c8a44e2d243fbc38af155b81d020402f957c0139e260091e01d086966125c8be, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:c3:bc:48:42:d1:d0:31:2a:d1:b4:22:62:
                    51:ac:d1:b0:c0:e1:19:95:42:fe:f2:e4:06:ba:4b:
                    5b:2f:92:aa:62:ed:79:e2:be:d6:f4:e4:4b:b1:1a:
                    a0:42:79:95:ac:43:15:24:23:8b:9c:0a:ad:a0:15:
                    07:db:40:f9:1d:86:f9:83:a6:30:ca:8b:37:9a:5a:
                    15:a3:eb:27:60:8a:a8:69:69:d6:f4:27:c7:8c:bc:
                    b0:f0:17:30:22:55:bf:b3:67:25:92:d0:d9:72:6b:
                    a0:9e:69:76:02:9b:fa:fa:8e:b4:97:0d:dc:4a:72:
                    9f:cf:aa:00:00:ff:cd:d4:35:0a:eb:c1:4e:22:d8:
                    6b:76:bc:64:85:c1:9d:bc:1c:9a:d6:38:35:0b:a2:
                    89:e3:3e:ed:08:e0:28:17:e9:06:45:97:ef:88:87:
                    b4:ed:62:5e:66:53:0a:86:c5:82:5b:35:8b:00:ca:
                    f3:7d:54:f8:10:ac:88:c7:3e:1f:4e:c1:65:47:83:
                    99:3a:51:54:39:b2:ba:58:9b:87:a6:f8:d0:96:8d:
                    43:83:7b:b0:61:fe:d6:f1:11:65:12:ef:68:eb:51:
                    c4:4e:c3:52:1c:ab:fc:20:3e:c6:5a:e3:59:30:a9:
                    65:a9:01:1d:b2:85:2a:04:c1:cf:fe:24:3a:0f:40:
                    97:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D3:DF:46:6E:CC:C0:D2:0B:9B:72:69:E5:E8:A4:B7:3D:DC:73:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08e40c0e-513f-4211-bcc7-72038fad7525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:2a:24:84:ad:d5:e8:80:53:0b:21:9b:3c:8a:21:76:2f:89:
         06:11:f7:b9:48:81:1b:72:ce:75:86:1e:41:c2:fe:1c:f8:bc:
         fd:0f:ca:d9:32:c7:88:4d:54:34:10:38:03:cf:c2:4b:4b:64:
         60:f3:9e:5d:97:c2:c2:63:b1:90:f9:3f:48:e0:8e:cf:e3:d5:
         a2:d3:a6:5a:44:6d:5b:31:5f:98:85:96:dd:37:b3:c1:54:f3:
         e3:35:8c:32:35:44:a8:27:b5:09:6e:07:9d:52:1a:b1:24:b3:
         36:c0:5a:df:eb:8d:c3:61:4f:34:69:c5:44:1d:05:d5:66:f0:
         4b:4f:82:14:20:9b:52:19:95:5e:10:0a:b0:75:43:5e:a1:87:
         c5:3c:e8:e3:72:61:95:0d:ba:1d:40:44:7b:ea:8a:c6:c0:43:
         2d:07:43:7a:db:ef:38:c1:e7:31:8b:c0:31:84:d3:f9:18:b5:
         af:59:97:b2:9a:5d:63:7c:6c:43:04:68:0e:a3:4e:c8:fb:c9:
         60:2a:61:02:87:4f:aa:55:1a:b3:79:5c:45:82:90:ac:39:7c:
         06:d3:78:d5:23:94:ff:62:29:a4:8b:39:7d:5d:fa:80:cc:9d:
         11:4b:b8:83:41:0e:3b:e0:62:8f:e3:48:7b:8b:d1:45:a6:cf:
         db:57:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:51 2024 by rpki-client on console-fra.rpki-client.org