Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d97648-637c-4d1f-8a82-5864ed8ffe56.roa
File:                     b1d97648-637c-4d1f-8a82-5864ed8ffe56.roa (raw, json)
Hash identifier:          CuDDuCW7H84BWbHnQXPxdBJ+JSkeudFXtlhkyLWU4L0=
Subject key identifier:   98:16:2C:B4:57:8A:59:61:FB:38:68:AC:4B:6B:67:A7:D4:D5:60:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       560D6AAC7EDB6563B5530AD238D6B518BE4234F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d97648-637c-4d1f-8a82-5864ed8ffe56.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     701
IP address blocks:        139.56.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0d:6a:ac:7e:db:65:63:b5:53:0a:d2:38:d6:b5:18:be:42:34:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=a6abe1da43654ce19896393915d568f944a20cbe096a75aba059bcb33c9e27e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:73:ef:80:ce:73:02:52:e2:c6:6e:42:09:
                    05:a7:1a:21:1b:95:c5:fa:02:b3:18:12:22:7b:9e:
                    f9:c3:0f:5c:c3:29:2b:ec:04:2c:50:65:0c:f1:90:
                    6a:56:98:d2:cc:ff:b2:53:d6:ce:ec:47:25:ed:05:
                    b0:b4:5b:3e:d1:a7:22:a1:4b:52:a4:54:f9:5f:f2:
                    ff:2b:e1:1d:3b:3b:84:ca:36:97:96:e4:20:6e:d0:
                    ed:82:5e:42:bf:7a:f4:fd:1b:65:6f:75:df:91:3d:
                    d8:1d:5e:00:91:7b:0a:38:a1:58:8f:19:6f:ef:be:
                    35:34:93:8a:08:2f:e1:ca:52:be:6a:1c:6b:f4:d2:
                    63:5d:47:ce:2c:b2:a3:64:ad:ea:ed:1d:50:1b:f9:
                    0d:14:49:ad:56:27:a8:6f:90:23:c3:a9:4d:14:b4:
                    d6:7a:55:55:1d:10:e5:26:d7:f9:d0:f6:1c:fa:6a:
                    5e:f9:6c:a4:94:89:6c:59:4b:55:24:29:77:ba:71:
                    15:33:f2:54:87:dd:c8:d7:7d:4e:60:3c:5c:9b:45:
                    ce:89:15:77:58:28:30:f3:34:55:36:98:13:5a:87:
                    53:b9:67:1c:f3:ac:b1:40:76:e2:f9:32:e0:2e:fc:
                    0b:6e:b4:1a:61:43:11:1d:79:43:2b:42:a4:c2:37:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:2C:B4:57:8A:59:61:FB:38:68:AC:4B:6B:67:A7:D4:D5:60:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d97648-637c-4d1f-8a82-5864ed8ffe56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1e:72:d5:ca:76:29:8c:71:24:f6:10:c6:5e:29:e3:2a:32:
         f5:b9:e8:1b:9e:99:29:9f:58:48:fb:ba:8f:43:f8:a1:ea:48:
         98:2b:44:e8:d4:00:22:5e:a1:53:eb:00:04:02:11:26:8d:fc:
         27:28:ec:23:46:a6:87:93:56:13:29:74:9a:a9:42:04:97:31:
         6b:7b:48:6e:70:df:eb:f7:27:9a:bb:3b:3c:f8:b4:46:30:4d:
         0b:07:af:48:f8:75:ce:8c:29:25:a7:58:da:9d:29:75:b3:00:
         54:6d:2f:53:1f:45:9b:13:82:dc:b5:a1:5c:f5:bb:c2:46:d0:
         76:ad:a3:7a:5b:73:65:a6:ee:18:5e:68:5c:1b:e6:0c:47:48:
         14:d8:85:ed:b1:b7:e1:2b:a4:a3:d5:f2:78:e0:29:4c:23:94:
         3f:39:ce:78:f7:62:b3:c8:31:94:7d:c2:a0:45:3f:70:48:a3:
         95:12:cf:26:84:9b:23:d7:da:32:62:f4:5a:c2:53:2f:a0:2c:
         b8:94:92:56:d1:85:cd:c7:2b:a7:e4:c2:a1:a8:01:e6:91:6c:
         b0:ea:22:b6:38:b4:d3:4e:01:fe:03:96:98:ab:fc:fb:d1:d8:
         ee:3d:ea:1c:92:4a:2f:22:f6:4d:b3:d0:e7:0c:49:33:42:48:
         35:a4:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:43 2024 by rpki-client on console-fra.rpki-client.org