Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e0fe6e0-4575-477f-b3dd-cba21c445578.roa
File:                     6e0fe6e0-4575-477f-b3dd-cba21c445578.roa (raw, json)
Hash identifier:          SRERtVsfm4RDBXEpxwxQejNtXAAPbnbzeGq6OOYPOHA=
Subject key identifier:   9B:91:3F:03:D5:80:2E:E4:6B:6B:F4:71:33:D4:09:AF:4C:63:1D:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4EBEC478A3FC396C8728052C514A5D2B76CBE050
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e0fe6e0-4575-477f-b3dd-cba21c445578.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.147.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:be:c4:78:a3:fc:39:6c:87:28:05:2c:51:4a:5d:2b:76:cb:e0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=f49cba19eddbd738347e22508443f9521c1a9972db857a69f0dbc6e2513af6d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fe:ea:b7:38:72:9e:83:40:c4:f3:67:d6:f1:
                    be:ec:51:b8:51:0f:be:1e:2c:3b:d2:85:ca:d8:ec:
                    f9:fc:0f:a5:80:46:31:99:8e:00:59:b1:65:54:35:
                    2f:99:99:c5:fd:e4:ed:9a:c9:62:c2:50:04:e4:a4:
                    6f:11:9f:bd:36:a7:6d:c9:51:03:f9:9e:ad:02:69:
                    53:52:af:60:11:50:43:45:40:80:1a:71:eb:47:df:
                    47:71:07:89:05:1a:e6:1c:9b:b9:7e:5f:e0:3e:12:
                    d2:92:18:f7:5c:fa:4f:69:f9:49:33:17:e1:e3:b8:
                    f0:7f:e2:bc:5b:6a:3b:e5:f0:9a:2d:48:9a:fa:81:
                    87:f7:a0:21:aa:0f:d1:c2:02:3a:e1:84:b5:ed:3e:
                    97:fa:a7:94:54:ed:b5:a7:30:16:3d:45:1e:5c:18:
                    d8:dc:98:b5:48:a5:1a:3c:77:84:36:79:58:8c:75:
                    d3:d6:26:5c:e0:e0:fc:85:4c:a8:10:18:d3:b1:6f:
                    c7:bd:93:b9:0c:4a:f7:43:08:4d:0f:e7:46:22:7d:
                    df:2b:c5:df:aa:89:97:53:c9:41:f9:6e:aa:95:da:
                    b5:2b:8f:2a:55:c0:d4:a3:e5:7a:5c:13:bb:60:90:
                    09:60:f7:18:9b:fc:48:52:87:26:b4:65:21:42:12:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:91:3F:03:D5:80:2E:E4:6B:6B:F4:71:33:D4:09:AF:4C:63:1D:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e0fe6e0-4575-477f-b3dd-cba21c445578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:9e:59:fb:09:1c:e5:5d:e0:08:67:e2:7e:65:13:9e:73:
         40:d9:5d:93:db:2c:0a:50:f1:e0:fb:49:8e:a0:ae:f3:29:cc:
         2e:94:8e:0b:e2:24:97:55:42:9b:b9:cf:00:90:55:af:3e:0b:
         db:a8:53:58:60:34:42:72:34:2e:68:ef:a7:6e:98:1d:00:da:
         96:64:60:bf:a2:53:eb:cb:64:c1:21:77:31:3b:e2:87:de:7e:
         eb:22:c5:51:18:a3:be:56:2e:e6:70:1b:7e:22:f8:db:8f:e5:
         5d:78:74:da:66:5c:71:3f:e3:0e:ff:27:9d:7e:66:97:89:c8:
         97:1f:4c:26:fa:60:47:b8:d4:0c:38:28:fe:da:81:3f:9d:92:
         c3:0a:cd:a3:56:1b:2d:db:39:1c:fa:61:ec:e0:5d:c9:4e:5f:
         33:80:c1:f9:3c:74:e3:67:76:9c:56:a3:79:07:a8:79:6b:be:
         41:00:cc:b4:00:4f:2d:f8:13:8b:56:5a:01:4a:5f:ec:93:ca:
         07:b8:93:9c:af:39:ff:c0:93:74:10:8a:1a:a8:fa:92:bc:8a:
         df:bc:0a:95:16:51:97:b8:be:18:9e:c1:f9:8b:66:be:26:c4:
         7b:ab:5d:0f:f2:29:7e:8b:1b:b1:41:a1:0c:5c:0d:d9:64:5b:
         8a:b9:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:32 2024 by rpki-client on console-ams.rpki-client.org