Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37fdd889-ff4b-4652-9daf-2cde6f995549.roa
File:                     37fdd889-ff4b-4652-9daf-2cde6f995549.roa (raw, json)
Hash identifier:          lHPWG1TNFU05pmDTZS84wU1KgSY2n+Z8KsgKBjaXgNs=
Subject key identifier:   64:7C:F9:9C:B7:91:76:C7:2C:81:AA:8C:45:99:D1:A6:88:67:F9:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       329F608521C2F845E62C3B79C854E558A2D9CB48
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37fdd889-ff4b-4652-9daf-2cde6f995549.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.218.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9f:60:85:21:c2:f8:45:e6:2c:3b:79:c8:54:e5:58:a2:d9:cb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=ab53e65f02c2b417870e62ce8719a5a29b1e2befbd3cb98f7777262ebb562c84, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:51:85:d6:e3:ef:4f:ce:5c:03:24:52:85:
                    ac:5b:51:85:6b:81:79:65:f2:91:99:b0:97:56:35:
                    5a:9a:5a:e6:f6:cd:39:67:c5:41:cc:9b:d7:bb:d0:
                    50:5e:c5:52:ce:09:6e:d6:16:5a:c4:71:a7:ba:ad:
                    b4:43:b1:6c:70:74:9a:d5:05:b1:12:8b:f3:98:16:
                    e6:55:84:46:c6:69:5f:df:89:14:45:5f:c5:42:7b:
                    6c:d6:2b:17:15:3e:46:7f:f2:0c:f8:e5:14:eb:ea:
                    35:d4:85:bf:5f:51:64:61:a2:5c:79:22:78:67:76:
                    f7:81:a8:18:cb:5f:7c:eb:85:35:22:fe:36:a1:5e:
                    17:c6:7f:a6:33:55:02:cb:27:8a:77:df:c3:0a:d2:
                    b8:89:90:ed:90:e6:7d:c1:c3:fb:73:bd:d2:9e:b4:
                    dd:d4:40:6a:d9:d1:b1:57:e0:c0:0d:bc:71:1b:67:
                    bb:cc:fb:d3:0b:a3:0a:1f:e7:88:3b:ff:1a:0e:14:
                    6c:98:5b:e3:36:c7:4c:c7:cf:05:71:6b:85:22:90:
                    d9:65:da:c4:62:da:0b:a5:d6:d7:3f:95:7f:e0:52:
                    b4:e7:6e:24:9d:15:e1:5b:7d:0b:69:4e:43:49:c9:
                    a1:1e:a1:02:c3:af:cb:12:5c:2d:19:ee:2a:92:e1:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:F9:9C:B7:91:76:C7:2C:81:AA:8C:45:99:D1:A6:88:67:F9:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37fdd889-ff4b-4652-9daf-2cde6f995549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.218.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:b1:1d:eb:db:95:1c:db:a7:73:e6:18:57:c2:48:2e:7e:15:
         5f:45:e9:b2:04:39:4d:b0:fb:a6:61:7f:be:42:34:8b:a9:25:
         5e:e0:5e:5f:f5:ca:f0:5c:9b:3f:0a:bf:3b:fa:9d:21:34:9d:
         2a:1c:38:91:27:32:54:36:90:ac:f1:7b:cd:e7:36:f3:8b:84:
         16:6b:85:75:3f:2a:11:ab:14:80:cd:a1:3d:4a:dc:24:60:b2:
         03:4f:67:fc:db:de:f9:b3:8f:57:85:5e:87:e5:ff:13:d6:5c:
         59:27:a3:3e:a8:d0:30:30:78:5b:f0:5f:ce:25:55:c2:96:e2:
         32:45:48:3d:fa:15:24:17:49:12:1c:1d:13:ce:5d:8c:8d:85:
         5a:05:cc:4d:5c:81:af:26:c4:45:77:5f:03:d3:dc:03:e4:43:
         0d:67:63:e8:3c:5b:ea:62:71:5a:98:56:8a:e7:14:7e:e0:c9:
         f9:75:cd:76:93:de:f1:fc:17:19:1c:b9:fb:d8:be:16:92:f8:
         55:40:12:43:23:d3:03:82:eb:7c:de:12:31:3c:58:5b:5c:fa:
         6d:6f:7f:fd:7e:da:01:51:c7:d8:25:58:2f:74:f1:db:42:04:
         42:d9:5b:70:a6:fb:8e:75:d9:81:d9:dc:27:95:b0:f3:15:ae:
         b8:d2:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:28 2024 by rpki-client on console-ams.rpki-client.org