Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b83bab0f-3fbc-4c47-b1db-2ffdbc094e4e.roa
File:                     b83bab0f-3fbc-4c47-b1db-2ffdbc094e4e.roa (raw, json)
Hash identifier:          /LsZ21qbjor4K5HGk0PdTv4sNjYuyJWDSBkrEx9MIfQ=
Subject key identifier:   9E:05:2D:E9:41:C4:25:49:27:8E:E9:30:9F:80:B2:77:00:03:A8:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F2271341F1EA939C98E6A5459CE86F4D78A4A31
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b83bab0f-3fbc-4c47-b1db-2ffdbc094e4e.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.112.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:22:71:34:1f:1e:a9:39:c9:8e:6a:54:59:ce:86:f4:d7:8a:4a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=40b90a8b44b45616525e3a5515f9fc94f366b4361354c54230d9216b70ff47e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:2d:a4:b3:7b:cc:07:3d:52:54:62:c0:87:
                    c7:30:4c:1b:23:59:da:57:65:c5:fd:66:84:ca:8d:
                    fa:61:e9:cf:5b:c0:6f:2f:c9:8d:c0:fa:4c:98:ea:
                    8f:41:7a:7f:63:64:90:e7:24:a7:96:11:cc:b7:b2:
                    39:68:0b:dd:2d:de:9a:90:36:1e:0d:20:57:5e:28:
                    36:0f:22:52:99:b3:25:7f:ee:31:30:a6:96:a5:0e:
                    54:8f:67:1b:1c:e8:06:d0:c0:f0:52:f8:83:62:01:
                    be:48:3f:20:91:13:f6:71:e9:04:ac:d6:62:3c:8b:
                    73:d7:e5:b4:44:6f:10:2c:8c:99:37:07:c5:e7:3e:
                    b7:2f:62:bf:71:b9:b2:37:3f:ac:92:90:93:a3:63:
                    10:14:2a:b6:a8:f8:42:fd:9a:46:2a:98:e8:75:05:
                    3a:bb:26:a0:ff:e9:c5:9e:5d:47:eb:74:2f:3d:36:
                    55:b1:9c:84:37:90:6d:c3:6b:59:91:f5:63:8e:5c:
                    ee:f2:a4:ee:46:db:74:35:0f:4e:dd:d0:9f:af:e9:
                    98:0a:b6:db:e5:27:61:75:28:23:19:b0:80:88:44:
                    fc:65:8a:df:7b:f3:ca:e5:ce:56:a5:21:cd:81:b9:
                    83:92:4e:0e:79:43:10:4c:69:74:ca:18:98:d9:95:
                    24:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:2D:E9:41:C4:25:49:27:8E:E9:30:9F:80:B2:77:00:03:A8:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b83bab0f-3fbc-4c47-b1db-2ffdbc094e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.112.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:ff:47:b9:7b:4d:49:3d:69:f1:fa:4f:62:6e:db:3a:81:f2:
         08:69:9e:e7:68:18:89:7e:7b:85:54:e0:e9:ce:95:fc:0e:e4:
         35:1a:52:26:bc:32:da:65:61:6b:b2:d3:ec:a3:64:98:d6:c2:
         2f:65:2a:15:65:f6:03:85:c7:ae:21:c2:52:d0:68:4f:78:b3:
         ff:30:4e:e7:bf:09:be:a5:99:87:72:48:54:0b:96:d3:5b:8c:
         05:76:a9:e9:ff:9b:ee:4c:56:61:58:82:c9:f6:d5:bb:2a:29:
         78:f3:82:cb:28:81:d6:0d:9c:5d:e2:14:27:a3:c9:33:e1:85:
         89:73:72:53:06:b6:af:8f:58:e7:4d:1e:ee:19:bc:1e:4d:1f:
         b5:c7:51:c3:95:16:96:0d:a7:df:de:07:a4:4a:8a:67:8a:99:
         4a:9c:5f:46:b8:85:57:2c:cd:d3:73:6c:61:f2:dc:b4:27:75:
         2a:2b:87:c2:db:1d:be:89:67:08:8b:14:63:25:16:6f:a2:14:
         0c:cb:d0:ef:44:60:8a:e4:e2:ee:78:34:61:c2:ba:54:76:06:
         19:58:67:60:a2:7f:71:e8:d5:a2:9b:07:75:68:f9:ee:e3:58:
         b7:ec:f8:06:62:5f:05:63:bd:27:7e:7f:61:56:9b:03:35:bc:
         f1:9f:cb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:38 2024 by rpki-client on console-ams.rpki-client.org