Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7803a2a0-363a-49b4-8df1-4c0f872f565c.roa
File:                     7803a2a0-363a-49b4-8df1-4c0f872f565c.roa (raw, json)
Hash identifier:          fExLS86AITidbRy6gI56mDzooVY3l2eMVY8lV126YeQ=
Subject key identifier:   E4:6F:2D:C0:BA:DF:87:43:4B:7B:1C:4C:A9:4E:8A:6A:EE:5A:6E:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61A29349CDC65CD0198A0C8A6F52183136BB8AC0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7803a2a0-363a-49b4-8df1-4c0f872f565c.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.187.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a2:93:49:cd:c6:5c:d0:19:8a:0c:8a:6f:52:18:31:36:bb:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=d0aa4051c78a68a2475d5bf57ac578fa42416f1b9dabadda7f188a2f0bd3863c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:8f:0b:4d:1a:1a:71:f9:5b:60:f0:f9:d7:
                    1a:b1:10:39:55:2a:1b:71:28:ae:4d:9d:db:40:43:
                    27:0d:b8:c2:10:26:4d:00:b6:81:e6:26:5d:88:6c:
                    15:3b:fa:46:29:77:ef:c0:d8:97:e4:12:c5:3d:f7:
                    20:e8:5c:93:f2:dd:6b:e8:e8:ff:02:d7:10:53:e3:
                    06:6f:c6:e2:ae:99:96:f9:ea:36:d4:3a:4a:0a:e2:
                    22:c0:de:65:50:8b:5d:8d:52:12:68:b7:19:ea:3b:
                    0b:ea:c7:76:34:8c:c2:f0:a4:21:51:1c:ca:9f:b9:
                    61:49:79:c9:5d:f2:bb:4c:70:6e:9f:e3:ca:cd:92:
                    bc:d9:50:1f:f2:b5:78:c6:7b:b7:b1:5c:4c:b9:51:
                    17:a2:50:f0:5d:47:d4:e7:59:12:8d:95:c2:ec:84:
                    a8:5e:ec:de:17:61:9e:a9:41:27:49:d1:95:13:1d:
                    f4:b9:e6:ca:9f:ee:0b:f6:5a:4a:19:4a:d5:25:d7:
                    b7:e6:0a:15:31:b2:b1:2d:dc:d9:e8:b6:ee:3e:a9:
                    29:8d:23:26:bb:85:e9:9a:72:75:0b:82:9c:87:e4:
                    f4:a3:88:d0:f7:9e:31:39:10:60:de:7c:60:9b:d3:
                    76:9d:cc:a7:f9:ea:ba:fa:95:6a:fb:3b:b3:fe:72:
                    ab:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6F:2D:C0:BA:DF:87:43:4B:7B:1C:4C:A9:4E:8A:6A:EE:5A:6E:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7803a2a0-363a-49b4-8df1-4c0f872f565c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:b2:2f:88:59:7b:19:f2:1a:57:57:1c:55:2f:3e:42:4b:84:
         76:f6:30:3f:70:9d:a9:f8:6c:75:d7:c8:8d:0d:de:10:65:ac:
         97:34:2b:72:28:40:0d:37:3f:2f:24:64:8a:cf:de:0c:76:9e:
         9d:fc:e5:12:05:d6:bd:c3:f7:4b:2b:cc:a0:29:24:78:e9:77:
         2d:f5:94:cd:10:27:0f:aa:29:fd:a1:56:2a:92:89:5b:fc:aa:
         3a:ae:4f:b4:3e:77:1a:a0:ca:c3:6f:18:38:a2:fc:86:85:54:
         d0:20:41:e6:bd:ab:17:cb:a1:23:a8:b5:08:47:b8:32:20:0f:
         52:3f:0f:04:46:64:15:17:45:39:f1:66:f2:6f:93:c5:5b:37:
         d1:98:2d:53:2f:be:43:d7:ec:09:a6:1e:9a:7f:57:9e:53:13:
         a3:52:46:43:60:4e:06:4b:c0:da:bc:71:a9:4e:57:23:d4:7c:
         87:a7:f9:18:ba:68:71:9f:e1:47:c8:1c:33:c5:11:ef:11:dc:
         f0:88:7b:77:cf:e5:5a:8f:1d:6a:be:b1:c4:7c:d6:c8:70:a6:
         81:cc:2f:29:bd:65:3f:e9:25:cf:c0:41:b3:ad:d8:2a:f7:db:
         1a:c6:da:da:93:a9:75:91:b8:81:e2:d3:cc:d5:a0:3c:05:59:
         59:bb:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:35 2024 by rpki-client on console-fra.rpki-client.org