Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/371abb2d-8fc9-4ddb-8dcb-0082ee8335cd.roa
File:                     371abb2d-8fc9-4ddb-8dcb-0082ee8335cd.roa (raw, json)
Hash identifier:          sVoYlesLvR49YN7RnxR+8yz6wXhonCS6vGYhwPeP3Rc=
Subject key identifier:   93:EC:9A:57:6A:C0:30:C6:A5:A9:0B:64:7D:05:E6:B4:8A:4A:F3:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C1C4068A336939FEF5E7A6DFECBBAD4D597628F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/371abb2d-8fc9-4ddb-8dcb-0082ee8335cd.roa
Signing time:             Mon 06 May 2024 00:00:00 +0000
ROA not before:           Mon 06 May 2024 00:00:00 +0000
ROA not after:            Mon 10 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.56.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1c:40:68:a3:36:93:9f:ef:5e:7a:6d:fe:cb:ba:d4:d5:97:62:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:00:00 2024 GMT
            Not After : Jun 10 23:59:59 2024 GMT
        Subject: serialNumber=0d55f7384c882af6f2ff1ad43cfbc778d8a8291b8cfa2ef297add79705fa115f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:71:ec:d2:03:93:50:30:4f:93:29:7b:b7:3b:
                    ca:a1:20:05:43:39:36:57:8c:20:7d:51:70:55:c4:
                    5e:8f:8c:ce:46:50:92:a7:5c:8f:6a:70:92:0b:c7:
                    b6:da:f5:b7:70:4c:41:54:c1:e8:e0:57:a5:2a:40:
                    c3:1b:ba:18:b9:dc:90:ce:c4:c1:3c:37:ac:c3:d9:
                    b0:79:0f:a2:c5:44:67:da:81:db:e6:73:ea:0e:13:
                    7c:06:99:6a:ca:46:ad:f0:a3:06:4b:f5:ab:7b:99:
                    22:13:b4:ee:ec:20:7a:f4:ac:57:ac:38:e9:bc:72:
                    c2:dc:52:e9:d8:17:25:6e:f0:b4:de:c6:44:3d:05:
                    6e:ca:20:2b:94:71:fc:4c:f7:12:12:d8:2d:f7:1a:
                    d1:a3:03:a6:1c:dd:63:70:d0:cd:ee:8a:8a:2d:79:
                    30:1c:47:48:89:4e:64:6d:f6:76:5c:b4:41:48:2f:
                    95:ad:39:b7:51:dc:98:9e:e2:a1:09:16:98:4d:eb:
                    70:da:7a:29:4e:c3:1b:1c:4e:24:0c:21:c0:44:0a:
                    37:87:c4:de:01:1a:df:c8:fa:8c:b3:1a:f4:6c:df:
                    2c:1e:08:91:e9:13:08:8a:26:b2:ad:21:12:8f:97:
                    ae:8b:52:f0:98:5f:03:bf:dd:44:38:dd:4e:fa:cf:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EC:9A:57:6A:C0:30:C6:A5:A9:0B:64:7D:05:E6:B4:8A:4A:F3:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/371abb2d-8fc9-4ddb-8dcb-0082ee8335cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.56.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         58:e1:b5:e7:70:f0:83:db:cc:90:b9:c4:f2:11:a2:92:9c:3f:
         00:a5:c8:aa:0b:21:6a:86:4b:81:69:94:8b:f6:db:9f:fb:88:
         43:32:1f:e9:76:31:b2:1d:af:51:63:c9:56:19:3f:ff:62:fe:
         43:88:1a:10:44:96:39:4a:8a:f7:ab:f5:59:c2:d2:fe:ae:17:
         a4:ee:67:df:78:ec:d8:46:1d:db:3a:9b:51:e7:f6:e2:55:b3:
         af:71:b4:d6:c7:22:e9:32:5b:f7:30:a7:a0:ac:26:85:79:d0:
         b8:0b:55:d0:e4:49:b1:1a:69:af:00:a2:72:98:89:aa:14:e0:
         83:75:7d:15:fd:6d:51:0f:83:d0:93:a7:b2:eb:d6:ac:b7:bb:
         81:2b:38:00:a3:85:87:23:7c:21:58:fa:61:83:fc:47:a5:d9:
         f5:a1:02:33:ba:32:99:c5:ee:4b:01:2e:16:49:e2:76:6b:d7:
         c1:80:0e:86:52:16:95:a6:aa:67:5d:f8:6e:fa:4a:37:54:1a:
         97:35:da:d1:6f:28:cc:14:41:15:3c:24:2e:3d:56:ff:a2:9b:
         6c:4f:1a:fb:64:f2:82:a7:a2:a8:84:28:4b:30:55:ad:98:0d:
         71:52:d1:4e:0f:d0:9b:ab:ce:b7:d9:b2:29:72:0c:8b:7f:de:
         58:88:29:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:26 2024 by rpki-client on console-fra.rpki-client.org