Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/680d7dd1-830d-4721-a5c1-49c6d92e7bf7.roa
File:                     680d7dd1-830d-4721-a5c1-49c6d92e7bf7.roa (raw, json)
Hash identifier:          vc7XT7IKfpoBtEHaPZUeNwSjD0iDEuq2m4XWRlnneOM=
Subject key identifier:   0A:F0:09:19:A4:85:96:3D:DF:D4:D2:86:82:1A:96:34:49:5C:49:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5401F46959C268F3971FAB6B17701A7FCD6EFA43
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/680d7dd1-830d-4721-a5c1-49c6d92e7bf7.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.49.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:01:f4:69:59:c2:68:f3:97:1f:ab:6b:17:70:1a:7f:cd:6e:fa:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=0a5babd8ba4cf5f21623d097137e3774b59a5e5c3f8ad61050c960e6749366ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:8a:cb:3f:91:d2:8b:20:7e:ea:eb:01:26:
                    8b:02:0e:60:3e:3c:f9:5b:c1:7a:56:d1:56:9c:38:
                    cc:bf:81:38:4c:81:bf:11:87:f9:df:d9:fb:65:d8:
                    b9:59:59:d7:89:21:38:d2:d8:44:ea:68:04:d8:50:
                    e4:ce:5b:1d:37:69:9c:1c:aa:0e:e7:ef:3d:cf:9d:
                    ee:13:ff:dc:3b:ae:80:10:a7:33:11:c9:fa:35:61:
                    40:df:53:3b:99:2c:ee:6d:4a:a1:1d:25:7c:e1:2f:
                    9f:99:31:50:ab:a1:de:a7:59:ea:1f:79:18:61:46:
                    0a:fb:ed:56:0d:e7:fb:ae:48:7b:1a:95:3d:f1:a0:
                    d5:85:dc:02:f2:95:b7:a0:26:94:26:ec:8b:5a:f1:
                    68:ad:f9:b6:db:55:86:a0:c9:77:53:42:1e:66:f4:
                    05:c0:54:fd:a6:f4:4e:37:31:f7:b7:a7:bb:ae:00:
                    97:56:45:fb:21:57:fd:a9:c1:e1:70:0e:7e:29:67:
                    b8:1e:61:f2:20:ba:22:f3:c1:83:e3:29:30:97:68:
                    5e:54:24:1e:be:c4:e3:4c:8c:20:82:3a:21:52:b4:
                    2e:f1:49:ce:43:de:2c:53:e5:b9:b7:73:70:27:2f:
                    06:b9:e3:e0:21:20:38:f0:de:62:56:75:a8:72:94:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F0:09:19:A4:85:96:3D:DF:D4:D2:86:82:1A:96:34:49:5C:49:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/680d7dd1-830d-4721-a5c1-49c6d92e7bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.49.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:9d:25:7e:d8:0f:f8:e0:4f:5e:33:38:ca:53:3d:b9:d2:bf:
         09:1e:d9:d7:e0:a0:a1:a3:e3:9e:3b:12:38:d4:26:89:07:a1:
         52:21:4e:76:37:df:77:d8:c2:81:35:0a:71:b0:74:d8:5e:19:
         bb:41:a4:78:37:6c:a6:26:f7:5a:bc:d6:45:0d:0d:e0:dc:6d:
         b1:17:e4:d4:6a:90:e2:1b:75:2c:a0:e5:c2:4c:aa:97:c4:87:
         2b:7d:91:b7:57:bd:b7:8e:48:d7:64:c2:3d:16:44:96:69:27:
         a7:e4:19:7f:1a:a6:10:15:25:05:2b:ee:f1:cb:24:f0:44:97:
         1f:ab:61:03:59:8b:78:82:f3:c3:e7:dd:4d:44:9b:72:c3:3c:
         56:16:d2:21:96:35:21:ff:a6:81:2d:56:25:87:20:f8:71:6f:
         44:f5:d3:69:c4:6f:2e:fd:68:1f:56:69:4e:c3:09:0c:3d:17:
         a2:6b:7b:9c:b0:bc:3f:3a:21:e7:7e:82:a4:e6:07:a4:3d:f4:
         21:93:58:cb:c5:c6:93:66:ff:ab:24:9e:5e:1c:35:fb:a3:a7:
         65:a8:40:0a:e8:04:6e:92:e0:81:02:ba:2d:7d:d3:c9:df:a5:
         a6:49:d9:2e:5b:bc:91:0b:26:92:cb:28:6a:7e:7c:3c:7d:14:
         60:de:17:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:15 2024 by rpki-client on console-ams.rpki-client.org