Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/486b9f9e-125a-4ebd-a9d9-48955891ec5f.roa
File:                     486b9f9e-125a-4ebd-a9d9-48955891ec5f.roa (raw, json)
Hash identifier:          SZD9vxMIkjtWQEMKeJX0X5G9wwyYlB3tIcFhBbPC2EU=
Subject key identifier:   F2:91:7D:D0:26:8A:8E:49:A4:FD:A0:4A:1E:F0:66:5A:08:49:B1:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47F80C839F9B7C8BF62B95F7A0F9D8A90217097C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/486b9f9e-125a-4ebd-a9d9-48955891ec5f.roa
Signing time:             Mon 06 May 2024 00:00:00 +0000
ROA not before:           Mon 06 May 2024 00:00:00 +0000
ROA not after:            Mon 10 Jun 2024 23:59:59 +0000
asID:                     22394
IP address blocks:        139.56.8.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f8:0c:83:9f:9b:7c:8b:f6:2b:95:f7:a0:f9:d8:a9:02:17:09:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:00:00 2024 GMT
            Not After : Jun 10 23:59:59 2024 GMT
        Subject: serialNumber=0754e9864848fc3edb5b5b96805a1d2d3b307c82344a31f3fb16339c1f8510f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:90:dd:40:23:49:1a:52:5b:8d:f0:17:fa:
                    03:b8:8d:62:10:9f:7a:b0:ed:d7:a6:1d:a4:14:4d:
                    56:ac:95:a4:9c:c1:12:6e:36:09:54:dc:39:e2:77:
                    9c:70:95:8f:c2:90:ad:8e:54:0b:ae:65:3b:21:97:
                    fb:60:cb:4a:e9:be:b7:c2:ec:fd:85:75:ee:93:bb:
                    58:fd:87:0c:7f:f5:28:cc:80:f4:60:d3:49:d4:8d:
                    bf:dd:6c:8a:1b:22:49:25:f4:0d:b9:13:45:0f:ba:
                    4a:cb:a3:ed:94:90:ed:e6:16:7c:90:56:df:56:e8:
                    30:51:24:ee:aa:d6:93:82:1e:ea:1f:3b:4f:8d:d3:
                    49:f3:fa:34:da:fc:1a:24:6b:9d:2d:61:32:31:21:
                    ea:f8:44:b3:ff:9e:a7:21:c7:a5:c3:96:54:97:1e:
                    2c:c1:0e:08:98:88:c9:a8:b4:a5:1f:2e:27:26:90:
                    55:16:6b:51:cf:0b:e9:2b:d3:68:93:fc:d5:c4:42:
                    8d:bc:33:bb:e4:6d:2a:b2:83:9f:16:53:df:b8:97:
                    ed:6d:b6:8a:07:89:63:7f:05:81:0d:b6:fb:26:e0:
                    2d:46:6f:35:f9:32:8d:f1:e4:37:4a:17:2e:5b:26:
                    fa:e1:69:f4:ea:5e:09:98:b1:48:2f:e7:17:7a:c7:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:91:7D:D0:26:8A:8E:49:A4:FD:A0:4A:1E:F0:66:5A:08:49:B1:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/486b9f9e-125a-4ebd-a9d9-48955891ec5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:59:56:7c:8b:b1:09:ad:35:5d:db:45:cd:a3:43:84:19:a9:
         6d:db:9f:b5:da:50:da:e6:cf:d3:f9:56:96:55:3c:5d:0c:a3:
         30:2b:a6:68:e3:8d:34:7b:7f:dd:af:cb:07:17:c0:24:8c:23:
         61:9a:19:a1:41:a1:d9:91:a8:9b:63:bf:83:f4:f3:e8:6c:a3:
         3f:13:6b:c3:69:e2:56:c1:cc:ad:92:af:6e:53:6a:a8:26:4f:
         28:4d:c2:8c:ae:7d:31:aa:10:91:b1:81:c6:ad:6b:dc:c6:89:
         2b:fd:5f:93:d5:34:b1:28:20:48:c3:b6:b6:ea:50:fc:49:85:
         a0:ae:4c:8a:c1:de:c8:34:0e:bd:be:99:2f:ac:30:35:70:ee:
         2e:fd:0a:35:96:f6:34:af:dd:f0:85:5c:6a:30:76:fd:46:b7:
         e9:99:3e:4d:dd:2c:c3:a8:37:13:e4:e1:ce:38:f6:79:3a:ad:
         a9:2f:88:27:d4:c7:5f:20:88:a4:af:21:5c:11:a9:47:a5:5f:
         bd:17:4e:6f:bc:4c:ce:f8:5d:77:87:39:a8:fa:10:44:17:10:
         73:27:e3:93:3f:a5:f0:24:4d:95:2b:0d:b3:81:d2:d1:1d:de:
         0a:98:32:e9:25:4e:88:55:6b:54:af:c2:15:15:a4:22:84:2f:
         e1:1f:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:12 2024 by rpki-client on console-ams.rpki-client.org