Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa
File:                     38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa (raw, json)
Hash identifier:          W+TsyrrOpNUuSKPEeB6fzWVxDBKmwL4lO4Pck2XT+YM=
Subject key identifier:   31:C1:D2:FE:63:14:1A:87:EE:B9:32:D5:10:FD:E2:27:A5:01:6A:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21D552125FD128A1DC44ECAA990DAD3CDA050A69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.35.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d5:52:12:5f:d1:28:a1:dc:44:ec:aa:99:0d:ad:3c:da:05:0a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=dc7e047b2dc85fad79a1233d8e1286ec0cb5ae3f108cfdb4c11828d2f9a875a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:db:aa:a4:ad:fb:94:cb:bb:82:00:07:88:
                    63:81:99:2a:71:13:be:f1:73:1a:cd:fe:31:4e:0b:
                    b2:ae:d7:20:cc:a0:1c:74:1d:2f:bd:1b:6a:44:25:
                    6a:36:e9:5e:a2:5b:0e:fb:b0:c6:81:b2:29:fd:00:
                    8f:85:55:6e:29:6e:90:dc:04:e4:fe:15:ea:72:1f:
                    c7:d2:0a:38:fb:cc:de:25:c5:70:51:2a:58:ae:8c:
                    af:82:88:7e:6d:01:c1:6f:bc:32:42:18:d2:c9:c9:
                    1e:aa:be:d7:2e:77:af:23:28:bd:a3:66:fd:70:c6:
                    a2:ea:eb:06:2e:8f:ec:00:f8:e0:69:9d:e8:8c:c0:
                    8a:6c:f9:20:7b:5d:9d:d2:c5:79:67:bd:77:15:b1:
                    bf:fd:5b:fd:5c:25:9c:6b:2b:8c:3d:ee:aa:86:93:
                    6b:1a:de:bf:5e:b7:9b:16:81:ca:c5:a1:f0:19:6e:
                    98:81:13:1c:48:28:74:29:f6:c0:f4:89:e0:e4:e8:
                    c8:88:e3:9e:fe:6b:d5:f1:07:fd:a4:76:46:bd:81:
                    29:c5:3e:68:f4:a5:27:fa:4f:bc:49:78:03:93:78:
                    23:83:8d:c4:98:66:a4:9e:cf:71:16:45:ee:dd:00:
                    fa:8c:d0:c1:51:fb:2e:0f:43:fe:89:f0:4d:c3:e9:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:D2:FE:63:14:1A:87:EE:B9:32:D5:10:FD:E2:27:A5:01:6A:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.35.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c6:dd:9e:2b:6a:25:8d:2e:81:f9:46:ab:02:6d:e2:d7:32:e3:
         35:23:dd:62:8e:d3:e5:49:a9:52:21:94:5f:fd:a8:6e:2f:80:
         d9:75:a0:5f:01:15:43:da:83:7e:f2:5b:f2:d7:14:60:f3:2a:
         5d:5f:ee:06:1f:59:ce:84:3d:70:89:72:3d:25:79:37:cf:fc:
         9e:2a:ee:a5:d1:6a:9c:71:01:4f:98:80:e3:f0:ff:3c:01:5a:
         86:de:9e:45:7a:4e:4c:da:21:20:5e:db:fe:e2:eb:75:9f:fc:
         49:e2:94:eb:26:2b:6a:41:a5:90:da:5e:61:82:5d:d1:56:7e:
         05:57:51:cc:c0:ac:20:36:0d:b6:e3:90:c7:2f:a6:05:6f:fb:
         08:20:13:5b:c1:36:8e:83:d2:1e:2c:4c:5e:79:08:83:62:ea:
         f3:96:0c:b2:94:76:aa:c9:b2:59:b6:8c:1c:6c:62:3c:61:a8:
         21:c8:64:d2:70:b0:ed:6d:f4:86:24:a6:dd:96:63:f9:cc:33:
         2f:f1:a3:59:62:3c:df:93:21:b0:d6:a4:30:b5:e1:71:6c:3f:
         21:20:6a:0c:4a:93:e9:a0:a5:fb:4a:ff:ce:03:22:de:da:f7:
         e3:2e:41:ed:e8:a5:92:45:5c:27:dd:9d:3a:ec:61:1f:64:76:
         b5:4d:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:25:27 2024 by rpki-client on console-ams.rpki-client.org