Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aaf4a36-4d66-4bca-851d-4fb7f908b8e4.roa
File:                     0aaf4a36-4d66-4bca-851d-4fb7f908b8e4.roa (raw, json)
Hash identifier:          lk52AaJUf95ytOuV1gz3oAqpLi2s7tEC8+FAQtRQTyc=
Subject key identifier:   1D:FA:2C:4C:06:51:2E:BA:B0:9C:1D:2D:FF:89:4C:F4:F0:4B:B3:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31E748206EB4E40FA5F607D02BA56BD488F713AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aaf4a36-4d66-4bca-851d-4fb7f908b8e4.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.178.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e7:48:20:6e:b4:e4:0f:a5:f6:07:d0:2b:a5:6b:d4:88:f7:13:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=0da04cd8ce98b569a6ca8a89d6300f4f032be60b51090f3341a94c875733946e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:4e:95:4a:2c:1f:d3:47:70:45:c8:42:46:
                    b0:49:2f:5d:d4:7d:e8:c1:08:31:fc:04:fd:af:e2:
                    ed:11:e9:55:89:0e:bb:46:36:8e:ab:18:e6:77:b4:
                    52:e1:4c:07:21:55:b8:ea:da:46:38:e2:89:2f:1b:
                    a2:20:77:4b:8d:a4:73:6f:f5:d8:8d:17:a7:7d:40:
                    d6:f5:d5:62:e0:83:4f:f9:3f:e0:19:9e:34:8b:d5:
                    12:73:9e:4f:81:b2:6a:11:e7:00:38:d4:e8:d9:5b:
                    a4:39:1a:17:4a:6b:33:9f:c9:85:82:82:cd:cd:1a:
                    3e:64:0d:88:78:1b:af:2d:db:28:bd:bd:90:56:eb:
                    8f:b2:bf:e9:40:69:5a:fc:be:aa:c8:17:45:fd:cf:
                    80:9b:51:d9:df:98:d0:9a:b7:8e:a6:40:63:e1:39:
                    66:0a:9a:f4:07:5f:d6:34:f5:2c:6f:92:c8:dc:af:
                    30:1b:3a:6f:f0:6d:6d:66:a3:ab:a7:dd:9c:36:20:
                    f9:9b:1f:61:51:86:72:00:99:64:1e:3b:8a:9e:0e:
                    c2:2e:92:f9:38:b5:45:83:5d:e2:79:4c:c3:93:d4:
                    45:fe:76:ad:16:c7:92:81:59:b9:ef:18:2f:d3:f3:
                    c8:6d:cf:50:9b:d5:23:fa:5a:98:8f:51:bd:29:e9:
                    cf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FA:2C:4C:06:51:2E:BA:B0:9C:1D:2D:FF:89:4C:F4:F0:4B:B3:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aaf4a36-4d66-4bca-851d-4fb7f908b8e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:82:d5:9a:1c:2c:86:73:3b:bc:07:8e:d6:ac:b7:54:93:7f:
         07:39:8d:95:97:9b:be:2e:9c:c6:4b:18:f1:63:0a:2d:81:1a:
         7b:b7:30:ca:18:4d:7b:a8:69:95:c6:73:3f:83:8a:01:b1:86:
         fb:01:c5:3f:17:58:36:fd:37:db:59:d8:b1:7c:d4:1d:c8:ff:
         78:4c:65:ef:6f:ce:48:c9:cd:28:50:5c:12:e9:e0:72:f5:02:
         87:86:43:84:d4:7e:5d:c4:20:d7:70:0d:83:e1:d7:31:11:71:
         f6:65:3e:9a:a9:60:64:44:f4:af:00:38:e0:a0:bc:eb:02:d8:
         97:75:74:3c:64:bf:f8:15:a7:c1:48:51:89:a8:35:53:d2:08:
         5d:80:f1:22:c4:04:b0:a8:f8:8c:42:e9:0a:c1:d2:8d:58:6f:
         6e:f8:cb:01:10:d4:7f:39:ea:9a:77:82:2e:31:fc:88:71:da:
         1f:fe:46:69:cc:c5:6a:2c:af:5c:c0:0e:c8:f0:93:80:ca:e6:
         36:69:45:50:d4:2c:aa:0f:1a:24:90:0f:fb:45:31:ab:80:e4:
         df:ee:d1:6e:e8:19:62:ef:76:96:04:c5:46:6e:5f:0c:ea:eb:
         b7:77:96:96:9f:fa:7f:ed:b7:87:97:ea:25:54:6c:f8:7c:54:
         50:98:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:22:59 2024 by rpki-client on console-ams.rpki-client.org