Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79641517-e391-45b7-95a2-53f8fb56d4b6.roa
File:                     79641517-e391-45b7-95a2-53f8fb56d4b6.roa (raw, json)
Hash identifier:          agLqikcSUiCfdIIZZxa5rNdPVqdP/ES5lTwL3spZWmM=
Subject key identifier:   09:34:CC:94:95:C1:45:08:DB:5C:48:E1:4D:AB:A7:33:3C:48:A9:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       295CA0A9833BE27AF37A39F772D2FE0B96BACAD9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79641517-e391-45b7-95a2-53f8fb56d4b6.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.103.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5c:a0:a9:83:3b:e2:7a:f3:7a:39:f7:72:d2:fe:0b:96:ba:ca:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=e28b497a3eb011dfdd139f9bc6de1463aa1ad976ac33ecd3b2936b28c4b4fc1e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:35:27:dc:ae:d0:bf:6b:f1:03:24:dd:1d:
                    af:58:26:e7:f8:57:3d:11:53:12:69:30:4a:bc:53:
                    79:4b:5e:8d:bb:62:53:89:dc:f6:85:53:30:bb:75:
                    1a:f7:17:ff:46:f8:3d:91:9e:89:72:1e:e8:f8:c0:
                    21:11:24:2a:07:50:2c:fa:d7:89:83:04:86:ed:69:
                    3e:e9:a9:73:b4:be:12:80:8c:a0:58:a6:11:9f:d2:
                    b2:44:4f:60:ec:01:e8:df:3a:e1:44:68:3c:82:d7:
                    c6:6f:bf:e3:56:68:cf:20:25:25:1c:a6:ba:05:43:
                    dd:2e:1a:4d:b2:3e:e3:bf:1d:f4:e9:1b:33:ad:31:
                    ea:c1:54:f1:2b:08:e8:79:60:4f:8d:7d:8a:35:ed:
                    ec:63:d8:bc:a4:c4:8e:cd:08:38:12:c8:49:b7:c3:
                    ac:5e:18:c9:94:56:b3:78:9b:92:c6:c8:10:64:21:
                    7c:61:66:6c:06:1e:bc:f0:2e:2e:6d:ed:cc:76:d7:
                    a3:9d:b1:ac:b8:e1:b1:80:03:68:ca:82:34:bc:8e:
                    1a:d3:3d:74:bd:c0:fb:13:f9:18:8d:56:ab:15:b3:
                    16:9d:34:40:55:8a:70:93:1b:11:7d:f9:5b:ff:13:
                    12:1d:51:aa:e5:9f:c3:a6:77:c5:3b:ff:66:da:1e:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:34:CC:94:95:C1:45:08:DB:5C:48:E1:4D:AB:A7:33:3C:48:A9:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79641517-e391-45b7-95a2-53f8fb56d4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d1:40:6d:70:47:74:27:83:aa:42:55:66:79:49:fd:54:a9:e5:
         40:10:f7:1a:d1:52:68:0b:91:7a:b8:b7:85:14:39:53:e1:0f:
         b6:f9:15:1b:59:4f:f5:0c:d6:54:13:cb:85:c6:70:1a:74:ff:
         9b:60:7e:41:aa:d4:54:2f:b8:bb:db:82:fe:69:af:be:43:36:
         bb:8d:c9:af:30:77:40:e0:9d:2e:1e:ba:19:72:c5:0a:04:de:
         d8:24:43:4b:6c:6a:55:b5:7f:2e:db:d3:5b:60:f5:e8:e4:fa:
         5b:47:98:28:4c:13:4e:bd:cf:eb:72:6a:10:09:41:69:cb:bc:
         24:c5:68:c5:9f:a7:81:e3:72:87:1d:b3:e3:4e:79:84:9d:fe:
         d5:56:9a:9f:6a:39:b9:ed:36:ee:2e:f0:a8:e4:f6:4a:60:46:
         91:85:1d:53:9f:b4:f5:9f:18:00:b0:ad:4d:e2:b1:1e:32:9e:
         17:4d:fc:a1:d7:66:d7:f1:2b:8c:c8:71:d8:9a:3e:d0:83:e9:
         b9:9c:30:38:d3:fe:36:d5:82:5f:7f:c1:25:17:73:55:46:bf:
         a0:90:c8:22:d4:78:46:a2:04:f8:6f:d4:53:dc:04:9a:e6:52:
         35:1d:b0:6f:60:3e:3e:c6:3f:68:3e:ea:c4:bb:47:6a:7a:37:
         c3:f7:50:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:23:08 2024 by rpki-client on console-ams.rpki-client.org