Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/367fa28a-28d9-45e5-a71e-117883bb227b.roa
File:                     367fa28a-28d9-45e5-a71e-117883bb227b.roa (raw, json)
Hash identifier:          AS2KEA7jvFuIWZ2Wxy/qSKeGpZfUX1eSjCMYkGhFhiw=
Subject key identifier:   C3:34:68:79:1E:25:BA:5E:24:39:FA:6D:4D:66:EC:02:8B:48:7E:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1458D9BD4B0FF0E57214FDDC2AD7627541CBEF15
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/367fa28a-28d9-45e5-a71e-117883bb227b.roa
Signing time:             Mon 06 May 2024 00:00:00 +0000
ROA not before:           Mon 06 May 2024 00:00:00 +0000
ROA not after:            Mon 10 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.108.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:58:d9:bd:4b:0f:f0:e5:72:14:fd:dc:2a:d7:62:75:41:cb:ef:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:00:00 2024 GMT
            Not After : Jun 10 23:59:59 2024 GMT
        Subject: serialNumber=c7102246d5a0239e3e2bfff9e773b33609e77dae8f01c829b1d29e3843a14806, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:f6:aa:b3:4c:4b:41:5e:35:04:43:b1:2c:
                    03:47:64:9b:5f:2e:4b:75:eb:db:4e:c5:76:02:2b:
                    5e:96:b1:4e:ce:45:a6:8c:90:c2:88:29:b7:d6:0e:
                    80:13:b8:85:7a:9a:80:6f:aa:69:b1:42:23:1d:42:
                    ab:66:a5:23:ff:3b:73:31:61:e7:1f:99:f0:42:b2:
                    56:0e:4e:8c:4e:2f:38:46:55:59:43:4a:80:fe:d0:
                    58:46:3c:46:27:19:67:f9:21:f0:97:bd:13:57:44:
                    ae:17:15:aa:05:62:94:6e:9c:00:97:d6:2d:43:34:
                    2b:30:49:22:7d:04:e7:8a:dd:cf:c5:63:97:ec:4d:
                    3c:ab:23:43:d5:75:28:a1:1e:98:14:fb:2f:23:a3:
                    c8:40:f9:47:bf:01:35:e5:39:74:3e:2d:e8:5f:0a:
                    28:5d:4d:aa:fd:3f:72:98:0e:45:e6:b8:0d:0c:1f:
                    a7:67:26:03:6a:54:98:12:94:64:1e:b5:dd:62:8d:
                    97:e5:0d:80:68:46:95:d1:bb:be:2e:ed:9d:f0:7e:
                    a4:3f:60:f3:60:76:b4:31:74:d5:24:d0:b4:0d:bf:
                    ed:fe:74:85:90:1a:05:17:67:bd:bc:8b:a4:4d:f1:
                    0b:36:6c:73:19:7c:d2:48:64:28:c1:27:15:0c:31:
                    eb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:34:68:79:1E:25:BA:5E:24:39:FA:6D:4D:66:EC:02:8B:48:7E:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/367fa28a-28d9-45e5-a71e-117883bb227b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.108.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:9c:1b:9e:76:06:59:c5:8a:57:a7:ba:d3:ae:af:a9:9f:d1:
         eb:b4:56:18:2f:9d:eb:c2:74:c2:10:ec:f2:b7:38:8e:c9:5c:
         c8:1b:c5:f9:f2:34:24:16:af:10:78:6a:08:69:b5:10:da:50:
         41:de:f7:bb:b2:43:40:92:0d:f9:a2:cc:54:c8:d3:25:53:81:
         ea:50:34:2f:0f:08:5b:9a:55:b3:ba:e5:9f:44:65:3d:b1:7f:
         44:2c:92:15:2e:b6:4f:ba:3e:e2:ca:59:9a:66:20:51:5c:fd:
         c4:d8:0e:f6:75:25:17:a3:74:8c:0d:a5:cf:5e:91:93:15:b0:
         61:f7:2f:fd:c1:97:49:92:6e:b0:f2:65:49:a8:29:90:d7:21:
         9c:7c:be:91:3f:b4:0f:fd:92:50:b5:b6:61:ab:21:1b:ca:0a:
         cf:21:25:4c:26:11:bd:6a:46:9c:1e:87:1c:4b:71:ac:af:28:
         09:06:56:c3:46:7c:8a:78:af:28:7e:4f:fc:ea:a6:44:85:37:
         2b:2d:cd:f8:01:43:ed:a9:92:6b:60:7d:a3:12:36:5f:14:21:
         71:f7:9f:96:c2:5d:bf:47:33:01:2d:e4:67:71:52:95:45:50:
         92:e3:e8:9b:10:94:2c:b1:72:52:30:76:a4:51:03:97:fc:84:
         26:9f:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:25 2024 by rpki-client on console-fra.rpki-client.org