Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeadfa43-f291-477f-a14c-d4deef32e546.roa
File:                     aeadfa43-f291-477f-a14c-d4deef32e546.roa (raw, json)
Hash identifier:          WPQMG2qUuSKldJ0XSQ8av1ztV8UJUFkE8UkWuJHdKCE=
Subject key identifier:   DC:C7:09:FA:B9:59:D1:C3:3F:90:65:A2:05:6E:71:B8:83:B8:F4:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       32357D11B2A4D56AA03116BF8E71C2C486AB1559
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeadfa43-f291-477f-a14c-d4deef32e546.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.113.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:35:7d:11:b2:a4:d5:6a:a0:31:16:bf:8e:71:c2:c4:86:ab:15:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=95861dc0d19f61c34de09551a1316b3187a82e5320c8b8b94d5e6fea96720e6c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:3e:66:62:ce:5d:d1:e9:d1:b7:bb:54:d9:
                    ae:86:03:de:9c:62:c0:e2:c9:91:1f:49:4d:b5:16:
                    43:29:16:0f:38:60:7b:99:10:4d:70:2c:40:5d:dd:
                    3a:ca:1f:27:0f:ec:59:03:c2:1d:d8:d6:64:3c:12:
                    d0:59:9f:2a:f4:7b:66:06:4c:30:7c:03:e7:fc:7d:
                    a9:59:15:21:8e:7d:c8:73:c7:17:62:d6:59:5e:f2:
                    a6:5e:29:86:d2:5c:14:bb:a2:bd:10:82:bc:aa:37:
                    74:cc:49:04:34:4e:7c:38:0e:3d:4b:9d:17:0f:bb:
                    14:cd:a7:97:be:56:df:7a:b3:b7:58:bb:ee:93:da:
                    6a:51:cf:69:d2:85:4a:ae:2b:73:b1:f8:27:27:dd:
                    5c:23:c2:da:f6:f9:53:8b:f3:50:1a:ed:dd:dc:64:
                    c2:8d:bb:6f:34:e7:5a:47:54:42:a9:28:ef:1a:18:
                    c6:41:4c:7c:46:5d:30:23:63:93:5d:8b:79:e9:22:
                    86:6f:5b:24:4b:1c:b6:53:f2:ac:eb:ee:8f:78:74:
                    07:d3:9c:08:90:1c:9c:7f:ed:20:bb:46:26:37:a1:
                    00:73:de:07:67:8a:51:26:03:eb:87:1c:af:68:d3:
                    88:74:3b:a4:0b:a6:de:c0:a4:8b:86:3b:34:6f:99:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C7:09:FA:B9:59:D1:C3:3F:90:65:A2:05:6E:71:B8:83:B8:F4:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeadfa43-f291-477f-a14c-d4deef32e546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:7b:3b:0e:5c:1b:20:1c:2c:83:5d:dc:56:91:17:1a:f7:3f:
         80:5f:6f:75:10:13:d7:dd:27:ec:d9:e4:31:23:93:6f:89:6b:
         94:3a:06:22:83:7c:47:4d:34:28:a1:2c:e7:95:16:03:34:c3:
         38:34:2c:b4:58:38:e9:bb:ec:d6:87:73:2f:66:96:09:c2:bc:
         1b:dd:c3:24:4f:32:d4:a3:b5:6f:3a:eb:27:60:d8:71:24:c0:
         42:9b:6a:2e:8a:fd:3b:53:e0:b6:0e:2d:1f:9c:b1:53:da:c6:
         4c:7d:6f:3d:e5:d1:c3:1c:f5:cd:e9:9e:57:f2:38:1a:86:34:
         f6:06:2d:f3:e6:e5:40:aa:53:76:49:86:c7:d7:e6:40:9c:79:
         d2:5b:04:32:e8:43:cd:95:4e:5c:95:21:34:20:5e:ba:37:b5:
         ec:27:28:35:83:9c:d6:5f:8f:4a:cc:a1:db:09:64:c4:d4:9a:
         9b:52:7b:a6:2c:75:6b:35:86:e6:cb:6c:7c:22:67:6b:01:f8:
         c1:d6:ff:ae:22:25:7e:46:ac:6b:b4:98:de:45:eb:51:63:71:
         d3:cf:9a:88:27:f4:2b:5b:13:8c:cb:7e:a9:f5:e3:48:c1:7c:
         72:96:49:2c:26:91:24:15:98:b7:e9:45:e2:fa:47:42:26:e9:
         a6:a1:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:05:39 2024 by rpki-client on console-fra.rpki-client.org