Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c686f00-7a8a-470a-9f73-d55c6e3e9624.roa
File:                     0c686f00-7a8a-470a-9f73-d55c6e3e9624.roa (raw, json)
Hash identifier:          zq7WArOUU681JhvHKc1boiqR+jqcSpAeJPQi4viiQ+k=
Subject key identifier:   D5:1E:C6:F6:15:7A:43:AB:A5:9D:08:B7:3C:44:AE:D8:65:71:04:0A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       071D8872DAEF4B7CBD7826D24C0D7BBE802B7CFA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c686f00-7a8a-470a-9f73-d55c6e3e9624.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.241.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1d:88:72:da:ef:4b:7c:bd:78:26:d2:4c:0d:7b:be:80:2b:7c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=ccc95a2116f0ec4fdf3e5d06178471f166d01c0955ee39fd711d447e332ce885, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:bf:49:b3:1e:78:77:4b:22:aa:18:64:5f:
                    7f:23:e3:12:f1:d5:f0:b9:36:bf:6e:ae:78:80:08:
                    d2:25:fc:3c:c9:a1:c2:34:de:6e:a7:73:7c:ec:13:
                    e0:87:81:7e:5f:0e:40:29:a3:2a:50:e4:64:ad:61:
                    46:3a:2f:40:b0:8c:31:61:b3:41:97:bc:dd:0b:a3:
                    17:bc:dc:4e:5c:64:b6:ed:54:fe:75:cd:f3:8c:59:
                    bd:d3:ce:81:98:7a:84:8b:91:c7:80:1f:bd:2d:8e:
                    53:88:47:4b:80:06:79:5f:a6:7f:b0:04:6a:3e:aa:
                    88:b2:74:e2:2f:cc:f7:58:62:a6:0f:f9:b6:47:d0:
                    47:9c:d6:9c:24:03:71:71:b4:15:2d:dd:35:b9:26:
                    67:9c:c3:f9:04:77:33:57:12:ba:1c:4a:2e:a2:95:
                    cb:31:f1:e4:f2:05:9a:91:74:ef:4f:bf:1f:63:23:
                    8a:22:cd:3f:10:5c:31:d4:0d:87:51:b9:cf:6a:41:
                    95:27:9c:a6:c9:d0:ca:30:f9:b1:8b:0c:7c:5d:3d:
                    da:64:9e:68:fd:be:fe:e6:53:ad:e4:da:e1:a8:df:
                    12:a2:29:2e:53:38:a5:c0:c2:0f:52:f3:38:b3:80:
                    ce:8c:22:e6:17:e8:70:8a:71:1f:b8:12:a3:c9:2d:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1E:C6:F6:15:7A:43:AB:A5:9D:08:B7:3C:44:AE:D8:65:71:04:0A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c686f00-7a8a-470a-9f73-d55c6e3e9624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:ef:5c:9f:fa:73:d4:50:6b:2d:30:67:44:4d:bb:f2:63:82:
         22:1c:7c:dd:fc:f6:7a:bf:8b:7c:87:c8:ad:e8:2c:97:b3:56:
         d6:95:47:2e:30:d6:3e:bd:34:63:0a:46:4d:6e:b2:47:7a:06:
         40:2f:f9:31:ed:e6:b5:5d:a5:e3:90:fa:c2:02:de:fd:1a:1b:
         7c:7e:1b:97:72:01:c4:9a:f6:1f:e7:5e:54:d1:1e:3b:3f:c5:
         ff:da:74:74:65:9e:eb:09:eb:89:d8:23:cd:1f:f1:f9:a0:96:
         39:60:9e:37:16:ec:8f:dd:a6:4b:42:74:b9:d8:1a:fc:59:1d:
         ee:c9:47:09:1f:95:12:7f:ef:c4:ed:30:d3:06:59:85:cf:c8:
         cf:5b:e7:74:0e:89:ac:f4:c3:7f:13:87:4a:81:ac:a9:22:88:
         be:10:3d:65:73:27:ef:e4:e1:1d:32:e3:d5:f6:21:fc:7e:0b:
         dd:1f:93:3a:a9:4d:10:b0:14:71:7b:53:63:03:d1:c7:17:17:
         a8:cd:8a:08:60:f1:72:ff:c0:22:e6:cf:2c:a3:dd:85:83:34:
         ad:25:97:02:5b:bc:13:37:0e:75:c1:e3:23:f3:69:44:5d:34:
         cf:d0:d0:40:54:d3:ae:84:ed:3d:ae:1e:32:80:56:99:d1:67:
         26:1d:14:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:19 2024 by rpki-client on console-fra.rpki-client.org