Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa293904-540f-4c19-86ff-5dcfb3f724ad.roa
File:                     aa293904-540f-4c19-86ff-5dcfb3f724ad.roa (raw, json)
Hash identifier:          B92l8C47Y3p6gMp7afVsgviUhFFbncu2M54Saw8nOek=
Subject key identifier:   9A:29:39:B9:5B:A8:D7:FA:DB:7F:5E:A5:D8:6B:A5:66:5A:E2:FF:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63E74CDEE92F91511C7A0909608D45775C1CED58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa293904-540f-4c19-86ff-5dcfb3f724ad.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.236.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e7:4c:de:e9:2f:91:51:1c:7a:09:09:60:8d:45:77:5c:1c:ed:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=eef1cf4bb13c3f9cb789a759ac59fb6381618bb82b063d219b027f80023bec5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:34:c3:f1:34:a5:d3:11:94:bb:22:17:c6:
                    ea:c4:ad:3d:09:82:d5:81:16:96:86:95:2b:dc:28:
                    e4:61:7d:02:22:2e:a6:38:fa:c7:67:3a:67:c5:24:
                    67:57:ce:70:99:85:53:77:5e:43:2c:8b:ce:2c:d4:
                    f9:32:ec:e6:76:de:18:fd:cd:cb:4f:c7:b0:a2:e0:
                    32:e4:ef:21:a2:a1:5f:82:3b:a1:2f:ef:0a:4b:f7:
                    14:d6:eb:68:0f:47:e1:75:d0:82:0a:95:7e:42:a3:
                    ae:03:4e:57:b4:f6:2f:f2:9c:c6:b4:cc:a7:36:3f:
                    07:9a:4c:a1:da:3a:b7:0b:59:a1:99:20:64:ab:b9:
                    c1:e5:c1:72:76:74:a2:9b:9c:ae:79:23:53:d7:12:
                    b2:bf:4d:d7:a5:5d:0b:85:a7:76:53:37:17:f7:fe:
                    68:fe:61:90:54:29:e4:08:83:a2:98:6a:35:9a:54:
                    c3:b8:6e:aa:24:a4:7d:78:ee:85:30:f6:ae:ca:5c:
                    95:86:20:0e:f0:8c:48:3a:ab:9a:d6:64:c0:8a:d0:
                    a7:5c:56:d6:71:9d:e3:d3:66:43:9f:08:55:b2:c3:
                    a8:89:31:77:b9:2e:16:dc:bb:0e:e4:4c:75:6a:b0:
                    8c:7c:5e:4b:86:c6:3d:2a:16:73:ca:be:63:9e:13:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:29:39:B9:5B:A8:D7:FA:DB:7F:5E:A5:D8:6B:A5:66:5A:E2:FF:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa293904-540f-4c19-86ff-5dcfb3f724ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.236.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:46:79:84:3d:29:f9:40:52:6b:c9:ec:71:16:9b:fe:08:b2:
         a2:1d:84:3f:54:de:7d:02:1d:7c:88:ec:69:bf:a2:82:69:20:
         01:22:88:b2:ad:11:8d:90:d9:a0:1b:2d:9d:49:a0:b0:f6:31:
         11:24:ac:be:18:8d:14:a5:83:e0:b1:3e:cc:80:04:e9:cd:3e:
         d8:a7:6e:13:f7:0e:c2:fe:c3:d2:ba:aa:8d:df:0f:f2:d3:5d:
         e5:26:bf:e4:06:59:94:15:f4:c5:dc:c6:e8:6c:00:b2:08:b9:
         f9:70:88:f0:c0:ad:63:b1:c6:a8:e7:61:01:5c:06:ad:1a:cf:
         47:01:01:86:83:a0:0e:b5:3e:01:21:64:61:8f:40:45:f5:ce:
         10:98:a1:86:50:25:2e:cf:7c:77:d8:95:c9:cc:30:59:44:e2:
         2b:b6:99:07:68:45:1f:f9:ab:00:2e:de:1a:d4:37:a9:ab:e5:
         45:0a:9c:71:66:82:e4:20:6d:9f:14:02:32:fd:90:18:e7:8f:
         5f:4b:91:cf:7c:03:e9:d8:ac:d5:0e:f6:6c:83:fe:06:36:b6:
         67:3e:80:f3:9b:70:31:46:90:05:30:22:2f:85:c8:30:ec:9a:
         bf:cc:ae:5c:50:6b:39:9a:fd:d3:4d:98:7b:6f:9b:8e:64:ff:
         96:21:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:21 2024 by rpki-client on console-ams.rpki-client.org