Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d484a06-5c86-4f33-a91d-70e2aa3e89a5.roa
File:                     5d484a06-5c86-4f33-a91d-70e2aa3e89a5.roa (raw, json)
Hash identifier:          Zomd+kLMidIVIwi7hLQ5V3vuYu4tf9ZPouPqeH9nZrU=
Subject key identifier:   B7:13:C5:D2:A8:98:E6:7C:30:30:FD:0E:B2:B6:3B:EF:74:84:83:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1888D6E22EDF4E534C99D34975C498A2146FEFD8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d484a06-5c86-4f33-a91d-70e2aa3e89a5.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.233.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:88:d6:e2:2e:df:4e:53:4c:99:d3:49:75:c4:98:a2:14:6f:ef:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=7792352218fe2237e21d26874868802ffb8b3544fc7f0917886d739b04f42918, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:bc:52:c7:8e:c0:99:df:97:3b:1d:bf:f5:
                    89:21:91:70:5b:41:97:fc:3b:72:22:6b:2f:b7:64:
                    f1:69:b0:5c:cc:0e:98:0a:4f:b0:94:ef:c6:c0:25:
                    d0:92:85:29:67:e0:d3:1f:f8:a3:43:fc:94:60:cd:
                    18:0d:93:bf:da:eb:2c:d3:08:0d:fd:e9:0a:24:c6:
                    30:91:60:d2:e5:e9:a3:f2:8a:4a:c9:03:23:63:2b:
                    27:81:00:af:c9:00:e5:bb:43:fa:1c:1d:17:ec:c3:
                    92:68:be:3a:a7:fe:3b:b6:ad:63:58:b4:94:0c:57:
                    90:b2:31:65:77:3b:ef:75:7b:e2:be:39:62:d3:28:
                    22:4e:da:3e:4b:82:28:ee:cb:f7:84:d7:d3:c7:fd:
                    d7:2b:af:d1:6e:51:c1:f1:b2:a4:d8:6b:bd:a1:45:
                    31:00:a2:b7:f9:bc:82:2e:ed:5d:12:f7:24:e8:2d:
                    ff:34:3f:d9:8a:e7:0d:a9:1e:8a:cf:a0:df:d1:22:
                    74:aa:d5:08:72:2c:b2:85:50:5c:d4:ea:64:63:ff:
                    7f:fb:69:61:dc:1a:dc:82:26:6b:a8:87:b2:b0:d5:
                    18:f6:a1:9c:4d:2e:c7:33:62:8c:ac:c1:bd:80:67:
                    c3:ca:9b:90:0c:f7:ab:ec:ed:d4:52:17:88:c3:cd:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:13:C5:D2:A8:98:E6:7C:30:30:FD:0E:B2:B6:3B:EF:74:84:83:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d484a06-5c86-4f33-a91d-70e2aa3e89a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:be:1c:68:55:54:18:2d:9b:af:d2:d9:51:7d:d8:01:3a:
         f0:38:13:aa:d7:29:db:59:01:d9:4d:12:7f:ea:14:28:0e:0f:
         f0:ad:b0:22:54:16:6d:ed:81:fc:60:2e:2b:8c:b3:3f:e8:ca:
         e1:60:a2:60:ad:27:15:a9:ae:aa:8c:95:11:65:b3:8d:75:8f:
         27:67:df:aa:b4:15:87:33:63:e9:a1:03:06:17:47:ac:63:3b:
         53:f9:0b:97:90:48:27:49:0e:74:0f:c7:2b:82:4c:37:aa:1b:
         6c:1f:c9:f3:4e:bb:3e:05:03:bd:1e:3b:6e:b0:ae:fd:7b:c2:
         7b:04:22:b9:b6:46:fa:9b:5b:54:49:e5:ff:cf:a0:66:22:2c:
         b5:af:c9:25:4a:11:39:72:46:27:ef:a0:cf:5d:ef:2b:1e:11:
         20:3e:ad:7f:04:b2:9f:e6:77:85:a8:d8:6e:fe:fb:90:39:6b:
         87:2e:db:87:8a:eb:5e:c6:2a:29:31:fd:be:70:78:63:e5:76:
         cc:4c:2b:b9:f7:cf:2e:6f:e3:d2:e7:58:3e:8b:f0:ef:91:0f:
         86:fc:57:98:05:cc:8b:c7:82:56:72:c9:c1:ce:01:c0:02:94:
         40:62:95:c3:43:f0:18:c8:a0:b5:67:bb:7c:40:a7:df:92:35:
         2e:09:bb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:49:00 2024 by rpki-client on console-ams.rpki-client.org