Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55c146ec-e951-42cc-b4ee-ce1da87eb29d.roa
File:                     55c146ec-e951-42cc-b4ee-ce1da87eb29d.roa (raw, json)
Hash identifier:          rNsMSRzoEL/z0VjipCJc3BbW0hSOv81JQTi4mKtP+aI=
Subject key identifier:   CB:15:AD:92:16:29:7E:D9:85:04:A3:29:DD:34:0E:A5:4B:75:9B:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B594322BCABC05F077651E7ABE9C5C1C0F6BC17
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55c146ec-e951-42cc-b4ee-ce1da87eb29d.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.47.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:59:43:22:bc:ab:c0:5f:07:76:51:e7:ab:e9:c5:c1:c0:f6:bc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=93ecbdf52c03f18e3bc9859aec6d4a3c38e5901e353662825a2f28c7a0b53743, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:a8:59:ed:da:72:45:7e:cf:06:e5:3f:bb:
                    c4:0e:30:63:ff:a6:13:30:1f:9f:6d:d9:59:5e:bf:
                    0b:de:81:b1:60:1a:22:1e:33:0c:f4:95:91:3f:99:
                    cc:f2:a4:d5:9c:f0:d2:5e:e8:ed:fb:c7:80:10:44:
                    bf:e0:2e:cf:a6:fa:4f:8f:33:66:ab:70:04:cd:c9:
                    be:39:16:f3:1e:b0:9c:68:ad:f3:8d:6d:59:ea:42:
                    a1:f5:4c:7f:d0:b1:dd:31:14:54:f4:b9:ca:98:62:
                    41:68:87:ed:cd:43:e3:41:85:e6:9c:6b:26:ab:f1:
                    f2:48:be:8a:d6:43:28:9e:7a:63:cb:27:2c:de:fb:
                    e7:c0:05:9f:bf:18:09:6b:f6:9f:15:97:8d:a8:06:
                    6a:9c:eb:ae:cd:04:ee:d6:47:ec:78:e4:b3:1c:ec:
                    76:4e:63:34:cf:5f:76:f6:e9:85:57:bf:cd:37:c9:
                    88:1c:f9:fe:65:58:9a:3f:7e:4d:4a:c8:62:18:1a:
                    18:16:c6:27:45:0d:92:ee:7e:37:19:d8:30:79:8d:
                    fa:3f:01:7d:9d:11:24:cd:6d:b2:0f:7b:ec:09:95:
                    34:c0:b3:36:40:6f:1c:12:3a:3c:bb:ad:0b:2c:59:
                    8e:05:16:34:e4:b4:f4:67:8a:40:13:94:ab:0e:cd:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:15:AD:92:16:29:7E:D9:85:04:A3:29:DD:34:0E:A5:4B:75:9B:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55c146ec-e951-42cc-b4ee-ce1da87eb29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ca:ac:4f:ca:fc:ac:69:58:c0:00:06:d7:66:5d:af:8b:d0:db:
         58:51:b1:2c:97:a3:ce:e9:ef:53:68:dc:de:ed:15:93:c4:e7:
         7b:17:89:c6:fb:92:05:e9:b1:5c:a0:3a:d4:43:35:8a:0d:fd:
         34:a2:44:f6:f2:77:73:91:af:6b:6c:6f:ce:14:62:db:73:53:
         f3:7e:67:06:ea:63:60:9f:93:4d:bd:70:ea:b9:cd:e1:59:8c:
         68:7e:66:ea:57:e8:05:ee:a4:e6:e2:cd:e6:a1:aa:d0:6b:3d:
         6c:30:f2:73:12:94:53:a4:4d:63:15:51:f7:3c:dd:17:a6:50:
         27:72:97:9e:1e:ec:5e:e1:27:5d:8d:f7:4a:95:3f:a4:69:e3:
         da:cc:a9:ea:f5:95:16:e1:81:07:44:67:ed:54:74:77:53:a5:
         e1:c4:50:66:07:b5:c6:8a:44:f4:d8:e7:f7:e6:73:f7:85:c3:
         e2:99:83:45:aa:ba:ac:e9:ad:17:41:eb:40:32:2b:95:c3:17:
         64:09:51:69:bb:7d:a0:ae:2e:5d:45:8d:c3:0e:2a:b5:09:9f:
         c1:25:e9:86:7f:ab:7e:ba:ea:58:fa:3d:c3:e6:01:64:6a:8b:
         0b:4b:a3:75:b2:0c:6e:4c:b1:79:d9:5c:92:4d:30:5b:2f:53:
         2c:eb:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:01:33 2024 by rpki-client on console-fra.rpki-client.org