Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298617f2-8863-481f-8488-927968fe9855.roa
File:                     298617f2-8863-481f-8488-927968fe9855.roa (raw, json)
Hash identifier:          xpD4VwaEMT557MfHqn6+j1FWWBsaYunRGsX9uCMPBm4=
Subject key identifier:   9A:2C:A0:7B:43:A3:4A:1A:76:EA:36:5E:DD:69:2A:54:FA:7D:30:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       608C1628F13A30A87600652ADCC0E9183FC62113
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298617f2-8863-481f-8488-927968fe9855.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.128.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8c:16:28:f1:3a:30:a8:76:00:65:2a:dc:c0:e9:18:3f:c6:21:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=b0a901fdd2f620d72c7b159c964749f5de5dbb4b8ae56759b089443f993a168a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:88:ef:41:60:c4:42:1a:ea:bb:9d:e3:84:
                    8d:aa:5f:b3:04:54:82:4d:13:8d:2f:90:88:4e:9f:
                    05:aa:ba:9e:39:65:9f:6d:99:3c:b2:9f:52:68:80:
                    60:1d:fa:57:29:69:54:1f:97:a6:a4:b4:2b:c3:7c:
                    7c:96:cc:2c:47:5b:72:73:cf:7b:4b:a7:b3:36:10:
                    1e:3a:36:19:96:d7:f1:e6:34:24:89:ab:00:fd:57:
                    c3:e0:89:70:85:27:ad:c5:f0:cb:1a:7f:cb:90:1c:
                    ea:83:aa:50:6f:4d:fa:4a:ad:53:fa:4c:ed:85:27:
                    d9:5f:d3:c3:4f:08:23:6b:b1:db:6a:ec:22:c1:30:
                    f5:2b:5c:c9:30:bc:28:ef:ff:de:bf:79:bb:35:bf:
                    e8:ec:e3:3f:79:a9:c6:ee:e6:60:0d:5a:ca:cd:c7:
                    10:78:9c:62:f1:96:40:28:03:76:d0:33:e1:86:60:
                    b2:bd:0b:88:a6:30:e8:ae:e9:f8:ab:55:a6:c3:e1:
                    64:d6:8e:1d:e9:f5:19:37:f3:11:9f:0e:5f:cc:fc:
                    cf:fa:8f:0b:34:28:0c:2d:c0:44:b8:d2:dd:4a:75:
                    72:61:7f:d4:87:3f:20:8c:bb:54:45:ef:65:3d:ce:
                    30:21:a2:9d:32:e6:63:5e:10:78:1e:6f:79:fd:3b:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2C:A0:7B:43:A3:4A:1A:76:EA:36:5E:DD:69:2A:54:FA:7D:30:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298617f2-8863-481f-8488-927968fe9855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:c5:f8:0d:27:25:83:c7:19:cb:76:5f:49:f0:88:f3:dc:32:
         74:ed:61:68:57:3c:97:a9:85:9f:84:6f:00:ca:48:ce:53:35:
         fb:92:6d:9e:c2:5d:83:88:c2:2e:ee:0b:f2:a2:7d:95:43:d6:
         ac:d9:4f:22:74:9a:b2:c3:ac:01:a8:d0:0b:1a:2d:9c:07:78:
         65:52:3c:94:6d:b3:af:fb:e3:96:86:59:a2:17:da:e1:15:de:
         83:b4:c8:ce:d6:ee:44:7c:c4:e9:1e:af:3b:df:72:f1:84:04:
         3b:a5:d1:5e:02:58:0e:3d:6a:e7:71:90:7e:36:6a:ba:39:a1:
         1f:a1:73:05:a1:e5:42:bf:6b:ae:c5:9a:cc:f1:2a:f0:72:cc:
         09:94:70:b0:f3:27:45:91:e1:bb:d8:e0:8b:55:52:ae:d8:83:
         a7:57:b6:8b:a6:6a:ee:74:a9:02:24:e1:e2:22:61:68:27:4e:
         c4:06:1b:2f:d3:e5:e4:59:1b:db:c5:38:b6:0c:10:1e:08:dd:
         85:27:0d:4c:f4:af:40:b3:d0:2b:1b:8e:c2:6d:ab:f4:f7:ed:
         7d:7d:9d:13:09:b2:89:34:27:3b:51:b3:d0:6a:5b:19:66:3e:
         b6:ae:b6:1b:d7:cd:f4:ac:61:2a:69:50:be:c9:6b:1a:3d:86:
         17:85:17:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:33:12 2024 by rpki-client on console-fra.rpki-client.org