Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386bdeca-bc48-4999-9767-c693820020ca.roa
File:                     386bdeca-bc48-4999-9767-c693820020ca.roa (raw, json)
Hash identifier:          6Sv3sjv2gZvQfDPx6GEAKzNLCkT6DVsRkW8B8EwuKNQ=
Subject key identifier:   AB:D2:48:F8:54:C3:BE:2D:84:8A:A9:F9:44:EE:33:E9:80:CB:DC:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45A3EBA0709C0B4D719153B1120AED6AC147AC7D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386bdeca-bc48-4999-9767-c693820020ca.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     6167
IP address blocks:        139.56.12.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a3:eb:a0:70:9c:0b:4d:71:91:53:b1:12:0a:ed:6a:c1:47:ac:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=b2d1aad53e45b322e74d8ce6333d193d9bb48b894d5e4993794b59230d4b4ceb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:74:f6:7c:f0:2e:ec:06:f8:00:66:cf:ff:
                    b2:2a:4d:d9:35:7d:2e:be:d7:d3:f9:85:f7:64:84:
                    6d:2a:42:0d:3a:9d:b6:34:79:4c:47:1d:27:97:7d:
                    58:b3:12:bd:0d:a5:f7:9d:fd:e2:82:35:85:9e:52:
                    a7:bb:33:ce:83:42:09:a7:a2:03:5e:5b:8a:65:8e:
                    a2:d8:57:1f:7d:08:ea:ec:30:cf:ac:54:b2:4f:b5:
                    a4:52:a2:51:da:64:ec:88:6b:2b:3a:f9:15:33:24:
                    0f:d6:9b:3c:d5:e4:73:84:2b:57:0e:d6:db:58:9b:
                    b5:69:11:b2:13:b5:ed:70:91:75:21:94:a2:ce:7f:
                    1c:aa:bc:87:b0:04:ca:05:28:c3:80:b5:d2:ab:6a:
                    97:98:67:4c:b3:3b:aa:81:20:0f:cc:d2:b9:6c:6c:
                    ea:2d:f5:9c:38:2d:5f:e7:69:b4:30:a4:cc:af:63:
                    87:4b:1d:ab:e0:1e:bf:b9:0f:da:9d:ae:4d:b9:ac:
                    86:dd:22:34:d1:37:14:5d:e1:d5:d8:ed:2b:eb:56:
                    44:50:e9:a7:21:65:14:3a:46:ab:18:64:78:10:c6:
                    59:7c:f3:7b:6d:7c:3c:05:f6:f8:8f:c9:95:b4:73:
                    74:50:07:b5:ef:a1:62:5b:c2:0a:79:ac:73:80:0d:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D2:48:F8:54:C3:BE:2D:84:8A:A9:F9:44:EE:33:E9:80:CB:DC:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386bdeca-bc48-4999-9767-c693820020ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:eb:6c:fd:2f:84:70:44:e9:ea:81:b3:3d:50:00:27:f9:f1:
         8b:14:85:51:23:24:10:ec:e5:0d:97:04:6a:d5:47:da:21:89:
         1c:c6:78:b7:04:02:29:29:bb:e2:d4:53:8f:32:05:d5:1f:fe:
         44:ae:77:6f:31:49:ff:28:ab:11:77:03:22:b2:0d:c1:d9:ac:
         60:b2:bd:ab:f2:fe:58:18:5a:7d:d2:d7:7f:16:bb:50:66:7a:
         e1:4d:01:fe:50:06:5c:07:ef:42:7b:3e:f1:f6:62:9c:ff:72:
         cf:8d:6f:f6:36:db:94:71:4e:3b:4b:06:98:a2:81:3b:66:9e:
         cd:41:69:a4:71:c3:59:59:7c:8e:c0:30:0d:ff:27:b7:fa:40:
         49:37:89:bb:47:dd:c1:7c:89:cb:6e:32:af:40:fb:cc:20:aa:
         d9:34:f1:6c:75:59:00:3f:5c:9b:aa:af:9b:66:1e:b8:01:66:
         19:f0:27:a5:ac:cd:ad:84:31:bb:cb:b3:87:97:c2:44:e6:54:
         d3:b4:ff:24:f7:8c:4a:83:3b:eb:ee:8a:97:f2:91:df:ed:26:
         17:fd:1b:a1:d8:37:7e:45:b1:09:45:30:d9:1f:e1:44:70:c0:
         74:fc:cf:af:36:47:6c:59:13:ae:33:c6:d2:79:bc:a6:b6:b1:
         c0:73:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:21:51 2024 by rpki-client on console-fra.rpki-client.org