Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19afbc06-f87f-490c-b11d-85014d7475ea.roa
File:                     19afbc06-f87f-490c-b11d-85014d7475ea.roa (raw, json)
Hash identifier:          FfDQhx3IgGU/pi7OQy+ybF73bdxIugXKxXPfSQWji/k=
Subject key identifier:   B0:BF:5D:7F:63:68:65:83:92:E7:50:AF:A9:5B:99:53:D5:C5:C4:AA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       699C5CB68D5F7F22FBFEB04376C47B8DD8CFC606
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19afbc06-f87f-490c-b11d-85014d7475ea.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.50.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9c:5c:b6:8d:5f:7f:22:fb:fe:b0:43:76:c4:7b:8d:d8:cf:c6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=bd8d5056faebbf69cbbcc325521ef70b9ee48d3a3ea94ff04a8e83c6d5f88ee0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:11:d2:13:01:27:b8:83:88:6d:01:e7:11:47:
                    1b:d2:b4:b7:d1:cc:80:17:9f:b0:1a:a5:99:23:35:
                    af:52:bf:38:03:bf:4f:f3:79:69:e0:b4:d5:50:44:
                    65:cf:af:08:27:8d:1e:f1:c9:ba:1c:40:8c:86:9b:
                    9b:41:b2:99:b1:44:db:3f:65:a4:28:13:f6:6e:c8:
                    ee:73:5a:fc:d5:d6:34:cb:20:20:3b:8e:0a:9b:b3:
                    06:49:74:ad:5c:d8:e9:f0:0e:84:9f:48:ff:4d:0c:
                    e1:4d:69:25:f1:7d:e0:fa:5a:bc:4a:f9:02:9b:7b:
                    05:a6:f4:ae:ee:81:4c:f2:b6:3b:a0:18:c5:48:cf:
                    4b:8d:2e:a9:1a:2a:80:da:36:b9:66:d1:f3:a1:83:
                    06:03:ea:d0:05:b1:e7:9f:44:ef:0d:04:b5:99:a9:
                    f0:c3:e6:16:87:57:70:77:3d:7b:64:3c:a8:69:d2:
                    7f:ca:c2:7b:49:7e:bb:37:8d:a3:63:b6:95:43:92:
                    0e:1c:9c:52:ee:d7:03:05:f9:3f:d7:59:8a:5c:93:
                    be:73:0f:15:af:b4:6d:c2:f9:1f:5f:9b:b9:33:70:
                    c5:18:bb:ca:ed:b1:37:9a:2f:db:a4:b3:7a:37:c6:
                    2f:df:45:48:39:21:51:8c:5c:20:e6:7d:6a:9e:5e:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BF:5D:7F:63:68:65:83:92:E7:50:AF:A9:5B:99:53:D5:C5:C4:AA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19afbc06-f87f-490c-b11d-85014d7475ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.50.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:e6:06:c1:7f:55:a0:b5:69:0c:9b:b3:dd:7a:ae:ce:cb:
         b5:fa:75:28:64:36:a8:d2:b4:1c:53:46:33:73:f4:e0:bc:79:
         b2:ce:47:0f:38:25:d1:d5:34:e8:be:7d:7c:9f:09:69:b5:cc:
         7a:1d:a6:03:13:37:49:0e:3b:0c:ed:66:01:0a:ae:5d:b0:15:
         cb:31:18:a8:da:cf:d9:64:ec:37:cb:0d:04:20:a0:8c:26:e4:
         80:83:d0:1b:92:0e:78:72:87:88:13:61:79:19:65:c2:e2:70:
         cf:e9:92:41:fa:ef:de:f3:0e:1f:64:17:d1:83:17:0f:83:4d:
         f5:2a:05:08:43:2c:1e:8a:60:33:2d:2d:4b:61:da:74:ec:b8:
         e4:b0:8c:e1:ee:2a:dc:f1:0f:ab:56:d1:1b:0f:a2:59:ad:45:
         a4:60:2e:f2:d7:1f:14:b9:0c:1a:7f:17:5d:f3:47:71:4f:f6:
         9a:43:d0:d3:2f:fb:42:44:a3:7b:bc:39:ce:0c:27:91:06:ee:
         f5:65:b8:1a:d3:20:20:02:d5:a0:ea:72:23:e8:69:b2:16:2d:
         7f:f7:fd:64:d4:bf:af:c6:46:8c:ad:ef:d9:45:63:93:18:d3:
         a2:74:a6:86:85:22:30:83:87:29:9a:b1:4b:59:b7:c8:c5:9f:
         41:5f:4d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:02:28 2024 by rpki-client on console-fra.rpki-client.org