Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0c24b63-c55c-4b90-99dc-6e57aaf114c2.roa
File:                     b0c24b63-c55c-4b90-99dc-6e57aaf114c2.roa (raw, json)
Hash identifier:          ZdDdxI4B9u8NjLeIcIVMTElBtcnknoGWixf/Xe4Im4E=
Subject key identifier:   5D:81:0C:D3:36:12:0A:00:76:D1:ED:2A:58:06:61:53:05:0A:6E:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33F445A882D7D949AE646C91E063EB9999E01FE9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0c24b63-c55c-4b90-99dc-6e57aaf114c2.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        104.255.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f4:45:a8:82:d7:d9:49:ae:64:6c:91:e0:63:eb:99:99:e0:1f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=61913683940e4f39747616974cdf4e3c4580f7e220ca01cc838bad6416525371, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:5a:de:62:30:88:49:97:4f:4e:03:ff:df:
                    66:a3:70:42:b3:62:9e:5c:02:c9:eb:cd:40:d9:0d:
                    c4:21:b7:8e:5b:ec:08:f6:30:dd:d8:75:67:af:bc:
                    4c:13:70:57:d0:91:f0:d1:27:f9:1e:03:31:dc:5b:
                    40:dc:4b:d0:3a:66:0f:08:1b:29:32:ad:07:d9:02:
                    0b:32:8a:c7:4b:27:66:85:76:62:07:8e:5e:e5:59:
                    57:f4:bb:27:8c:fa:5f:e9:d3:d6:cf:d4:39:ca:28:
                    f9:2d:ae:4a:8f:e9:6b:de:8d:96:6b:0a:0b:6f:54:
                    3f:ad:07:36:12:38:ce:62:77:39:3f:4f:e4:fc:07:
                    97:18:27:60:69:9e:28:7a:2c:a1:d4:51:18:9a:80:
                    14:b1:2c:4c:b0:26:5f:bf:b5:14:1b:36:6c:8f:82:
                    ae:95:6c:78:48:e8:43:05:9a:dc:1d:81:f7:a5:96:
                    0c:34:af:9f:e2:b6:6c:f0:3f:e2:7d:a6:a7:fd:88:
                    9f:ae:75:bb:8a:81:f7:85:34:d0:00:d0:a6:b2:de:
                    f3:45:0a:2d:63:43:e7:b8:aa:da:ef:2e:aa:5a:e9:
                    3a:83:c3:24:3b:34:81:d5:8c:9e:25:b7:56:db:95:
                    e2:4b:c4:99:fc:86:d2:52:10:d3:f9:64:e2:15:ed:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:0C:D3:36:12:0A:00:76:D1:ED:2A:58:06:61:53:05:0A:6E:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0c24b63-c55c-4b90-99dc-6e57aaf114c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d7:8d:91:9e:e6:70:27:49:93:1d:a3:ea:59:53:c4:23:66:2a:
         88:04:11:41:6c:cc:c5:5f:c6:c5:4c:21:60:f0:b9:04:e5:2f:
         d3:7d:3b:80:5c:ef:57:93:af:a2:7c:42:ac:ff:5c:ee:14:5f:
         ba:a5:65:20:f6:a6:84:8c:19:f6:a4:0c:ee:8f:12:52:3c:3a:
         f2:80:da:48:33:80:67:f0:f6:4c:f1:0d:eb:1d:34:11:4e:d7:
         de:fe:a6:7b:a7:89:75:26:aa:b3:8a:f0:24:2b:09:2d:73:ee:
         db:c0:b9:92:42:d1:67:7b:1a:d6:ea:4a:ba:27:42:4b:d1:00:
         31:06:90:8c:b1:46:be:54:25:42:df:8b:04:82:94:f4:59:86:
         f2:5f:bb:f9:36:02:59:bc:35:58:4c:5c:33:7d:50:fc:80:d9:
         b1:e7:35:1a:86:00:49:00:78:76:eb:6d:c5:f2:38:f5:3e:9a:
         46:12:43:ca:85:1c:97:0b:cb:6b:a9:7f:72:88:54:bb:00:a2:
         0a:35:8d:d5:90:88:e1:5e:66:b1:fc:a4:d7:97:e0:31:f1:f8:
         db:95:08:12:49:92:a4:3d:e4:55:a7:6b:7a:40:bd:da:30:49:
         1c:53:51:64:db:a4:56:0b:65:8d:5d:37:35:cf:c3:6c:99:08:
         0e:41:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:22 2024 by rpki-client on console-ams.rpki-client.org