Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a29c11-3b61-4ea1-a02e-b71c4bf5c41c.roa
File:                     90a29c11-3b61-4ea1-a02e-b71c4bf5c41c.roa (raw, json)
Hash identifier:          f5V0r6GXlFbAmnr86mxxzmJ6I4Bef8FV3GLGyyqFQUs=
Subject key identifier:   8A:0A:BB:3E:05:37:86:C2:24:86:AF:1E:6D:14:0F:2B:09:F5:11:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30A8DE88C2CA92F4A6991F7005249021722EDAF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a29c11-3b61-4ea1-a02e-b71c4bf5c41c.roa
Signing time:             Wed 08 May 2024 00:00:00 +0000
ROA not before:           Wed 08 May 2024 00:00:00 +0000
ROA not after:            Wed 12 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.109.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a8:de:88:c2:ca:92:f4:a6:99:1f:70:05:24:90:21:72:2e:da:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 00:00:00 2024 GMT
            Not After : Jun 12 23:59:59 2024 GMT
        Subject: serialNumber=f4732fdc50d2c0dcac50da833555f3780ba2a3a9cb84b04a85f044caeafa0ea1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:65:e5:1a:d7:d6:11:81:e3:ca:23:54:b4:
                    c7:6b:0c:95:d2:46:21:87:62:06:54:00:fe:37:27:
                    45:48:8a:d6:c1:19:be:90:76:35:3d:be:59:43:e7:
                    8a:d9:f9:f7:93:7c:50:f6:a8:2b:ec:fb:a8:43:14:
                    68:de:cc:79:20:45:64:32:c0:1f:25:38:26:60:91:
                    37:cd:54:f2:6a:04:cc:99:8c:27:36:f6:34:79:13:
                    33:7f:e1:dd:3e:ab:42:c2:7e:77:77:8e:b3:30:9b:
                    c0:9f:7a:b4:37:6f:5f:bc:c4:f1:65:d5:ab:f6:34:
                    6a:9e:b8:ac:8c:ac:b1:c0:23:50:85:e6:4d:f7:94:
                    de:0a:96:e1:e8:65:7d:26:52:5a:06:66:5f:18:31:
                    3d:cc:92:6d:9b:0c:ce:41:fa:2c:f9:87:09:58:4f:
                    33:4a:8b:8e:ce:ea:22:75:db:98:72:ac:b0:46:82:
                    26:b9:ef:91:e5:c3:63:3f:6e:1a:d4:a6:fd:0d:c2:
                    7c:5e:7a:9a:1e:0d:d1:ce:d5:26:97:f7:c6:8d:80:
                    67:7d:2c:ce:c3:96:28:3b:2f:e4:0d:6f:78:12:39:
                    0a:cb:8b:fb:6d:12:ac:53:ef:31:a6:d1:89:be:5d:
                    b7:38:6c:bc:a3:10:31:cf:05:a2:07:13:b0:9d:df:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0A:BB:3E:05:37:86:C2:24:86:AF:1E:6D:14:0F:2B:09:F5:11:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a29c11-3b61-4ea1-a02e-b71c4bf5c41c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:ed:7b:34:24:cf:9c:fa:0a:5d:41:a0:0d:fb:56:ab:bd:7e:
         21:2d:b2:18:d1:f6:80:f5:31:37:3c:69:24:14:e8:b0:87:04:
         23:bf:f3:b8:9a:b8:57:bd:2d:b7:55:5a:bb:8d:df:59:23:1c:
         2a:b0:d8:a6:53:b6:59:3b:15:37:96:28:a1:68:ff:ce:e3:92:
         19:96:28:c1:c0:4a:12:ad:de:c3:ef:80:01:9c:c4:d6:b5:94:
         9a:78:16:77:0d:03:28:28:a4:2c:5e:1c:9a:53:33:aa:b2:e2:
         27:ef:ed:d3:62:9d:b5:80:e8:da:54:79:c5:cd:14:28:a4:db:
         7a:d2:f1:08:fd:79:39:2f:36:ef:b4:3e:f9:07:bf:42:65:b3:
         12:fc:3f:08:d7:67:1f:a1:27:33:7c:d8:fc:6e:70:e3:0d:9f:
         a6:51:1a:30:61:06:5a:a6:37:7c:e0:d4:d8:24:d1:6e:25:1f:
         94:bd:db:b0:b9:1b:e0:39:cd:69:26:58:9c:d3:40:f9:2d:b6:
         91:87:cb:71:a6:b9:d3:a5:5e:91:07:d8:c3:5c:92:c4:b5:6f:
         fb:39:46:d3:bc:09:b6:21:e3:77:5e:46:e1:db:72:7a:ed:29:
         1e:dc:ba:e4:cf:44:90:56:cf:b1:4c:36:59:ef:02:18:26:34:
         79:55:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:38 2024 by rpki-client on console-fra.rpki-client.org