Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bda1b296-6eb5-4c58-8cbb-fad5e0d13f04.roa
File:                     bda1b296-6eb5-4c58-8cbb-fad5e0d13f04.roa (raw, json)
Hash identifier:          Ke2+n7CU/ecO0y9TrHHyppondwjMe4k+CFE89chX2NQ=
Subject key identifier:   09:35:F9:B9:F7:CC:D2:C3:79:82:C9:B0:43:B6:58:A7:54:44:95:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D77D6E6E9B41754DA1C852748A7FFD37E22A167
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bda1b296-6eb5-4c58-8cbb-fad5e0d13f04.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        57.139.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:77:d6:e6:e9:b4:17:54:da:1c:85:27:48:a7:ff:d3:7e:22:a1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=b49d5273a5ae6cdf9f44e7889fa79c9edf7d240de1e3b9cd1858a79c1ca3bcfc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:f6:2f:a4:ef:35:bf:6c:12:96:b9:d3:ba:
                    2d:4e:61:3b:69:11:7d:98:71:9b:23:3f:63:17:c5:
                    3e:46:c4:7f:09:f5:1b:1b:b7:65:f5:69:65:db:8b:
                    a9:79:2a:7d:ba:da:0a:b1:a2:2c:cb:c6:dc:af:19:
                    75:40:99:df:22:73:16:55:8b:c4:b8:51:88:25:4e:
                    11:37:b6:11:73:87:b7:b1:11:83:35:f0:a4:72:31:
                    21:4a:d6:fa:f0:d9:67:14:c3:fd:61:31:a9:1c:15:
                    74:ad:83:6b:54:8a:4d:f4:17:e2:ca:5a:fe:b2:ee:
                    1c:5b:1f:8d:8d:09:67:6f:d1:07:87:5f:2b:e9:1c:
                    54:24:7b:1b:d2:66:9e:07:e9:38:4c:24:34:34:85:
                    da:66:36:a4:de:aa:c8:16:f2:b0:7e:57:13:16:5d:
                    e1:5d:d0:59:f7:2b:f0:3e:ef:af:1e:6e:d7:0d:d1:
                    8b:13:47:1a:a2:20:96:5a:fa:0b:28:c6:9e:30:af:
                    87:64:e4:f8:d3:7c:7b:f3:4b:e7:30:aa:3f:86:65:
                    37:cd:3e:fc:26:a6:fc:04:20:33:9b:a8:47:a8:5c:
                    8d:93:00:8b:26:b2:59:58:e6:49:95:87:e1:56:68:
                    91:5a:d7:b1:25:14:53:d3:94:85:ee:a9:26:a3:4a:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:35:F9:B9:F7:CC:D2:C3:79:82:C9:B0:43:B6:58:A7:54:44:95:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bda1b296-6eb5-4c58-8cbb-fad5e0d13f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.139.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:24:f1:cc:44:a5:3d:6c:fb:da:5b:17:35:82:62:65:e0:4f:
         47:be:c1:35:0e:98:88:76:b2:08:7f:a2:a5:d8:14:9c:2e:3f:
         7a:b0:9b:f8:3d:c3:0a:10:5a:7d:46:d7:5e:1d:9b:7e:18:16:
         74:82:b7:37:be:a4:c1:d1:e8:1d:f6:b9:5c:06:82:ff:08:37:
         a4:78:3d:21:cc:d3:58:35:ac:53:09:53:52:0c:99:2a:7f:4f:
         c4:f5:03:3e:74:b1:f6:01:5a:1b:34:2f:0d:72:80:48:5b:c7:
         ed:e4:9e:6d:01:ca:ad:ca:ba:0a:db:46:bf:6b:5d:c9:ca:f3:
         2c:b9:3f:20:0f:9d:14:7e:92:61:f0:09:d8:34:b4:c5:8f:bd:
         b8:7a:7f:cf:16:cd:43:bd:0d:1f:c8:8f:e2:91:46:20:49:be:
         bf:7a:a3:38:58:06:71:ea:36:e2:0a:b3:40:0d:5a:dd:7d:12:
         ba:ac:54:84:b0:81:1f:e5:17:49:f7:b5:02:b0:03:22:62:e8:
         d9:d0:f0:c2:6a:ff:30:5f:09:8f:7c:c9:95:ad:36:87:0d:c5:
         fe:12:6f:61:5a:e9:b1:28:12:88:c4:00:f6:8c:ef:36:90:a6:
         7a:72:81:99:7b:48:a9:ed:5e:af:89:31:f7:2b:96:36:22:90:
         13:44:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:47:02 2024 by rpki-client on console-ams.rpki-client.org