Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa
File:                     565bd2b5-79dd-4341-a5bc-d68981cd9648.roa (raw, json)
Hash identifier:          Cxzr+6+vLBRK/4fOeleTkhXsR+p9kLgLCTA5H//DL+I=
Subject key identifier:   CC:2E:55:EE:A7:05:59:3E:D4:EC:DD:E8:62:48:9B:5C:EC:B9:AB:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2042E7435C42BB89EFC0450C5F986B7903FF2F25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.119.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:42:e7:43:5c:42:bb:89:ef:c0:45:0c:5f:98:6b:79:03:ff:2f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=0e6a86546873f1bc03dc0964938ec9345274684501bbe765e64c701a3b18316b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:8e:ea:82:b6:4a:e0:f7:32:34:35:21:00:
                    b8:99:0f:73:49:d8:df:eb:20:fe:68:18:2a:64:f4:
                    22:de:4b:be:13:2e:fd:ca:ed:09:d0:60:e8:21:d6:
                    d2:79:f5:71:81:a1:f1:97:c1:55:d6:f7:d3:f2:f6:
                    0b:ee:dd:71:5a:14:e1:b8:7a:13:4a:12:4b:43:37:
                    c5:23:a2:45:26:6d:3d:66:43:92:fd:dc:a5:77:f6:
                    4c:c8:c5:9d:09:49:ed:72:57:62:f4:aa:6b:50:ff:
                    c5:74:ef:98:c8:60:73:2d:7e:72:52:49:df:fa:7b:
                    d6:ea:80:cf:a7:dc:a1:13:77:e0:90:4f:0e:96:78:
                    cd:54:53:ad:d7:36:de:4d:c9:06:fc:b1:0d:c6:5c:
                    4f:ef:1a:de:e6:60:8c:22:83:bd:85:b6:af:b1:cd:
                    7c:53:0a:eb:7b:4c:4f:88:e7:68:b3:ee:4e:df:95:
                    70:cb:a4:65:9a:20:1c:49:53:75:93:ae:09:38:32:
                    bf:0d:4d:9e:3e:c7:5d:d3:43:56:78:6b:de:7c:88:
                    9e:5b:c1:4f:4a:0e:60:88:94:ea:8f:f0:7a:fe:d5:
                    51:c0:e4:bf:8e:b0:b2:4d:9a:71:10:40:9c:48:d5:
                    a0:f5:35:41:60:52:f0:fa:89:87:2c:06:99:33:2a:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2E:55:EE:A7:05:59:3E:D4:EC:DD:E8:62:48:9B:5C:EC:B9:AB:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565bd2b5-79dd-4341-a5bc-d68981cd9648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.119.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:d7:0a:10:5c:7d:b5:10:a7:f6:82:89:64:89:a0:13:b5:
         31:c1:09:4a:cf:b1:a4:1f:42:dd:ed:b2:b2:45:e9:22:db:26:
         f2:f1:06:e3:f2:0a:2b:fe:b1:6d:5a:c4:46:f2:c7:81:f7:14:
         d4:ff:03:49:bb:b5:02:bc:0c:8e:9c:8a:77:17:06:c4:7e:c1:
         31:98:ce:dd:66:d1:57:03:db:77:ee:ec:4e:90:2f:af:97:d6:
         4a:25:c9:37:09:ee:a5:a0:1e:e0:73:7a:60:41:a1:18:ea:5f:
         72:1a:18:89:61:0c:00:c5:22:45:36:be:12:17:90:3c:c0:83:
         27:e6:29:55:ce:9b:e8:80:3d:50:03:ca:6b:12:bd:a6:61:da:
         90:eb:fd:0a:be:b7:8b:56:0a:87:22:71:35:31:11:6d:d9:b2:
         e5:6e:0f:74:31:7c:01:71:66:f9:8b:6b:3c:6c:1c:11:67:28:
         3f:7c:b0:1a:65:b5:99:2f:36:a1:d7:6b:fd:0c:bc:40:94:97:
         ff:16:8d:ed:30:1e:f5:ea:0e:86:76:61:a8:83:af:68:4e:4b:
         64:2a:c1:c1:aa:57:06:e8:91:14:ed:f1:63:0a:d9:d1:59:ed:
         75:a9:eb:9e:33:60:b5:0f:21:fa:8f:0a:1e:90:0e:b7:c9:1c:
         e4:aa:e2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:10 2024 by rpki-client on console-ams.rpki-client.org