Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26f0937c-4f39-4fd2-952e-bfa88a50dec1.roa
File:                     26f0937c-4f39-4fd2-952e-bfa88a50dec1.roa (raw, json)
Hash identifier:          mCvDqpL8oPkn3gpMfIMLmX1fuwelkfsg4xSc2iOaAuQ=
Subject key identifier:   66:08:86:E3:96:A8:77:50:2C:94:A7:C8:FC:97:F2:B2:1C:2D:5E:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4059BD1306F5407C87D3D120258B084B76E689C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26f0937c-4f39-4fd2-952e-bfa88a50dec1.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        139.56.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:59:bd:13:06:f5:40:7c:87:d3:d1:20:25:8b:08:4b:76:e6:89:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=4081edc0ceef112c9844dc200294261bedf7acf0907b10b236f7dfa0b2acf4a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:43:81:db:76:cc:a1:8f:cb:7a:31:b7:ef:
                    0c:50:31:d0:4c:5b:07:97:7a:23:38:5f:92:38:0c:
                    0a:aa:4a:67:df:28:28:ad:e8:c1:c9:b3:1d:57:84:
                    5e:43:4c:b7:12:3f:76:65:14:51:2d:30:44:ce:6e:
                    24:10:6d:d5:94:ed:0a:c4:92:5c:e3:20:94:0d:93:
                    b2:53:6a:5f:f4:6e:3f:a9:c3:33:7e:28:11:07:28:
                    d6:ae:46:e7:e6:c0:c0:20:bc:bf:d9:b9:07:7a:b8:
                    0d:a4:e7:6f:a0:3a:66:58:6a:1f:38:02:9a:f2:ed:
                    ea:c1:37:bb:77:85:40:4b:a8:12:f6:e2:e6:25:e3:
                    ad:35:a1:6b:63:88:80:75:0c:39:ea:9d:37:b2:ff:
                    a7:9b:b2:da:87:c6:de:1e:af:f4:4e:01:c0:a4:f2:
                    a6:10:ed:89:a0:bf:cb:ec:5c:b4:db:0b:32:bd:24:
                    57:6c:da:cb:73:90:e4:e7:e9:43:26:3d:9b:c3:73:
                    3f:82:02:1b:0a:6f:9c:97:f5:b7:c4:0d:d5:a4:58:
                    b9:f8:2e:0b:19:d2:5d:75:9c:6f:cf:28:a8:06:e5:
                    65:36:e1:c1:bf:f1:d0:6f:39:f3:2b:8a:d9:e7:2b:
                    17:e6:93:ec:f8:00:0b:85:70:39:91:be:e7:eb:ef:
                    2a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:08:86:E3:96:A8:77:50:2C:94:A7:C8:FC:97:F2:B2:1C:2D:5E:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26f0937c-4f39-4fd2-952e-bfa88a50dec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:4a:1d:51:fd:a8:11:0b:4b:dd:9a:d4:73:4a:f8:49:00:4b:
         fb:ff:23:ce:85:e7:8d:84:23:5f:28:3f:8b:b2:20:e8:56:58:
         28:16:63:c2:24:32:84:14:bd:7f:98:e6:28:8b:36:c2:24:8b:
         6a:dd:e0:86:14:13:40:77:73:1c:9a:fb:6f:99:5f:b5:68:59:
         0a:dd:a1:4c:29:9c:40:2f:88:ac:2d:88:7d:67:7b:ce:11:ce:
         bf:d7:b8:07:62:00:96:4f:6f:cc:f0:3f:38:3b:83:2c:5b:22:
         2e:d6:36:b8:fb:e9:ef:dc:c4:8a:74:51:96:e4:76:bc:db:d4:
         cb:93:6e:41:00:f6:0e:7f:08:13:c0:3e:32:8a:8a:7c:01:14:
         aa:3e:bd:51:98:47:2b:0b:0e:a5:fc:df:32:6d:f1:47:f2:4a:
         3f:c5:3e:80:40:5e:33:dd:52:09:6e:96:2e:bd:7f:3d:fe:88:
         22:d4:33:a9:7d:60:eb:18:b1:28:5b:bb:0d:2b:61:c6:3c:15:
         44:bd:8e:73:39:26:cf:d3:c0:ac:ba:ce:0a:a0:3a:89:08:14:
         b7:61:da:56:b1:5d:74:cd:f4:9e:2f:f1:92:11:66:2d:fb:b9:
         77:4a:73:74:33:dc:52:b1:85:18:c7:2e:5a:f1:fc:8f:ef:9a:
         93:cc:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:48:56 2024 by rpki-client on console-ams.rpki-client.org