Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf01fc62-e245-4777-9199-e7322afe5fb6.roa
File:                     bf01fc62-e245-4777-9199-e7322afe5fb6.roa (raw, json)
Hash identifier:          pYgvR15iKwMShw+vMdINVyDohRZ84XhMv8SQU2gpLTk=
Subject key identifier:   94:93:33:BF:BF:CD:05:0D:E4:73:1B:DE:54:9F:5B:33:8A:3F:F7:60
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4EE552F813EE8C2A64D2D83D93E5719ACD062C31
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf01fc62-e245-4777-9199-e7322afe5fb6.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.215.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e5:52:f8:13:ee:8c:2a:64:d2:d8:3d:93:e5:71:9a:cd:06:2c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=8e73e7efc3a3d6e484e7341eb8a7d8a712f0fa5fffaf1fc7f9622e156c605c9a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:2b:1a:7e:49:63:e8:14:d6:c4:a7:ea:ef:
                    c5:ab:80:b6:73:7b:5a:5c:73:fc:72:64:57:c3:d0:
                    d2:3d:49:96:e0:38:de:be:47:ac:fd:60:56:8e:f4:
                    92:6a:d8:e4:80:b8:de:04:12:99:dd:09:23:58:4f:
                    e4:5e:18:05:1d:29:de:62:34:1e:1a:9b:0b:b2:c5:
                    d3:e7:fb:35:53:da:88:cc:98:0e:c9:10:fd:b8:9d:
                    1a:95:fe:6b:7f:aa:60:c4:4b:e2:8b:ec:a1:15:65:
                    06:c2:7e:54:9c:cb:7b:82:23:39:d7:33:f8:0e:8f:
                    e7:6f:c5:da:8e:2b:e2:ac:f7:29:cf:bb:93:16:68:
                    1e:7b:24:a1:20:23:91:db:61:ca:54:d5:ce:bf:f7:
                    7a:ef:f9:6d:4a:b4:de:6f:ad:00:45:ec:33:1a:df:
                    42:44:39:b9:18:98:47:93:ac:9d:54:88:47:4e:b6:
                    1b:36:cd:90:89:05:11:3c:bf:12:2b:f6:46:31:19:
                    5e:0e:20:c6:39:85:57:ee:2e:63:dd:29:9d:04:28:
                    82:df:5c:fa:12:67:af:70:8c:cb:e9:64:b3:0e:bb:
                    54:79:60:0e:3a:74:3c:fd:b8:cd:a9:b6:0b:9f:74:
                    d2:86:2f:04:17:b3:ce:6a:82:e2:66:af:da:87:99:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:33:BF:BF:CD:05:0D:E4:73:1B:DE:54:9F:5B:33:8A:3F:F7:60
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf01fc62-e245-4777-9199-e7322afe5fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.215.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:c1:72:9c:ac:33:3a:2c:c6:60:0b:00:a6:13:2d:53:2c:8a:
         50:d5:c9:07:38:a0:f9:ca:c0:81:a0:c0:d0:67:63:32:be:f5:
         fd:d8:ce:d8:35:66:ff:61:23:25:bf:a6:56:5b:d3:33:ad:5c:
         d7:42:8f:67:6e:89:c7:65:d1:78:89:b2:14:63:bb:11:9c:0d:
         d6:53:3f:04:4b:90:90:12:fc:9a:ab:2d:71:30:2a:76:41:23:
         0d:b0:9a:7b:da:ab:c0:28:b7:86:18:7a:42:7b:57:46:ac:c3:
         35:c8:c1:97:04:8d:5d:4c:ec:75:62:ce:98:94:4e:8e:b1:fd:
         6a:74:a1:99:da:75:e2:67:b9:0f:66:06:be:a1:99:45:5a:cd:
         5e:f6:fc:f3:e1:75:35:2b:28:85:9a:e6:eb:2a:9c:d8:37:eb:
         11:32:64:12:38:58:db:56:b5:3a:23:92:ec:b1:d2:1e:eb:48:
         1a:1a:5b:dd:b2:00:10:11:5e:c9:99:17:06:15:d7:0e:79:6b:
         0a:33:5f:b1:85:50:b7:9b:30:8f:3a:42:39:44:de:a3:18:dd:
         01:65:32:73:ef:fb:df:68:fc:be:b6:ca:fc:0e:42:17:43:df:
         ee:d0:28:f8:64:d0:f4:ea:d3:2f:f1:bf:75:c2:2a:77:3d:c3:
         69:ab:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:26:31 2024 by rpki-client on console-fra.rpki-client.org