Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa
File:                     c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa (raw, json)
Hash identifier:          c65Y/bUnl2dd0bwDZyaJAGX8NWPT7l8VzAFb9W1jdm0=
Subject key identifier:   08:8D:D1:EB:0E:9F:44:F1:41:05:10:7D:06:EC:CF:69:8F:AC:94:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       151B790E323F110950F03E67B313806E7B5AD790
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.46.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1b:79:0e:32:3f:11:09:50:f0:3e:67:b3:13:80:6e:7b:5a:d7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=9825b9ff7a9e1b9324b80b33dbca2315ff6e34d2705d8bbaa5772ffbdaa43460, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:51:35:7c:c1:b0:e4:30:3d:ab:ff:79:4a:
                    88:3f:04:ba:5b:41:02:e8:19:ca:f7:20:61:41:d6:
                    5f:d7:51:a6:77:39:e0:87:1b:e1:f0:85:ed:81:39:
                    17:55:e0:fb:ea:7d:e5:9f:b9:16:47:a1:82:9d:18:
                    ee:e8:e7:10:ea:f3:34:99:39:66:ca:15:92:b9:33:
                    a7:6a:b8:22:88:46:a1:d6:44:9e:9f:37:23:45:1e:
                    d9:b8:b3:98:bf:38:e0:25:4a:c6:17:a0:76:36:c5:
                    ed:41:71:f6:97:39:26:30:ed:00:ac:d5:48:7e:e6:
                    c4:a7:15:e1:9d:ae:3a:1c:2a:da:8c:49:7d:bb:be:
                    fb:72:38:a2:2d:14:a0:0c:fc:61:fd:5b:d6:9f:91:
                    8c:66:70:1d:a9:86:b1:18:5a:d6:03:5c:e5:32:83:
                    23:00:c0:f8:48:e4:c9:68:e6:6e:cc:04:13:77:f8:
                    e0:b1:98:c8:fc:11:69:a5:73:e9:04:af:91:e6:68:
                    21:0b:b5:a4:31:0d:72:22:c0:a5:2b:1e:90:9d:97:
                    8d:26:5c:57:5e:59:c4:1b:91:d2:2c:3d:94:64:78:
                    3e:22:65:69:0f:f5:18:68:11:18:06:5d:0b:cb:44:
                    35:54:a9:eb:24:45:16:f9:a0:f4:d4:53:52:80:85:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8D:D1:EB:0E:9F:44:F1:41:05:10:7D:06:EC:CF:69:8F:AC:94:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01c2b62-1c13-46dc-be0b-e1f5d82afa02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:a1:9b:a8:24:e4:cd:75:ef:07:10:01:fb:81:c2:61:6b:47:
         f7:24:d3:02:c3:dd:b2:63:eb:64:31:41:c3:7b:b5:e4:73:16:
         77:c4:7a:9c:f9:97:59:ca:ec:eb:5b:d8:80:04:5e:5d:5e:f8:
         a3:ce:9e:a2:bc:47:08:a5:4c:f0:2b:b6:95:41:ac:36:ae:75:
         7c:da:b1:47:0e:88:e2:f5:6b:18:35:d5:67:d0:55:40:13:c7:
         17:1b:4e:08:51:b1:8b:a2:8e:b9:2f:64:25:58:0a:84:69:20:
         b5:de:19:60:51:21:78:55:64:a9:93:96:0e:fd:43:fc:8b:fa:
         5c:05:f7:c7:b1:32:08:8b:59:05:20:57:c1:75:e3:5f:9e:9a:
         30:37:40:3b:4e:75:20:d0:b0:9d:26:02:a6:4b:c2:4c:b6:37:
         6a:91:11:98:d1:bb:20:e3:bf:3f:9b:c3:22:47:97:2b:ef:dd:
         33:43:7f:35:18:1d:00:23:cf:ae:ac:bf:ba:fe:7e:4b:40:53:
         0a:8a:05:c1:b8:ff:fa:a5:9b:27:e7:cb:36:6e:b7:43:4d:a3:
         27:99:11:2e:98:1a:2f:90:63:22:42:4a:35:95:96:a5:b1:71:
         ea:d9:a6:f6:28:f0:e3:53:5e:6d:30:0a:5e:a5:f0:78:78:9f:
         78:d1:0d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:48:47 2024 by rpki-client on console-fra.rpki-client.org