Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa
File:                     cc204192-f54a-4a24-b693-905fbf433b73.roa (raw, json)
Hash identifier:          jEWQz+GikiZn3w8DV3vtFHfLvAwaOcRvOk3vASDKkOM=
Subject key identifier:   43:46:31:F1:7C:38:AC:BD:CA:5D:90:58:D4:E4:D8:8C:3A:59:8F:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D72A7DA0E7E5343D642C6438F8645BB76B982D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.81.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:72:a7:da:0e:7e:53:43:d6:42:c6:43:8f:86:45:bb:76:b9:82:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=62d020181f206a50d4f0c7e2ed0249d74f318954f35e843a8c60c4ac8bc9a67e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:7d:cf:57:02:30:95:de:4b:20:4b:eb:d4:
                    13:7e:39:bc:0a:46:49:46:98:a0:8d:68:97:01:bf:
                    45:3c:0b:10:b8:ca:78:90:f9:c0:93:1d:74:12:40:
                    55:a7:2d:f4:12:45:9d:c9:ba:67:a0:51:65:12:a0:
                    1d:0f:d1:c0:6a:22:7b:17:22:3c:7f:41:9c:ae:29:
                    21:c0:28:6e:ab:6e:8e:13:8e:97:ce:0a:be:0b:e3:
                    cf:9e:eb:7b:24:84:f8:ed:7a:25:38:a4:00:5e:e8:
                    4f:5e:74:c4:84:a8:c0:ef:16:db:0a:ee:3d:9d:9d:
                    35:ef:da:52:58:ea:b1:af:25:43:a1:62:30:e2:d0:
                    7f:eb:75:3a:07:8e:5f:01:e2:21:a7:c4:ad:65:e7:
                    24:17:da:2e:f6:ef:a7:40:ef:3a:fa:51:d2:fa:d3:
                    44:67:16:8e:fb:70:76:9f:b8:a6:29:cd:6b:33:e3:
                    10:4d:d5:24:7d:05:3f:0c:72:b1:34:b9:67:16:cd:
                    92:fb:39:43:fe:8e:82:10:7a:cc:fd:9d:43:6b:1f:
                    b1:d1:cb:3c:a9:ca:e3:de:2e:a6:54:15:65:8b:14:
                    16:39:4f:d7:04:2d:e4:cb:a1:f0:04:6d:41:79:1b:
                    9b:56:2b:31:91:f7:86:a0:25:72:b4:62:01:d9:48:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:46:31:F1:7C:38:AC:BD:CA:5D:90:58:D4:E4:D8:8C:3A:59:8F:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.81.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:38:36:cf:e8:94:e8:9b:ef:38:aa:cf:88:bf:42:db:5e:fa:
         24:69:52:49:f7:30:88:2a:5f:5d:ef:94:40:c6:84:e6:76:f3:
         cd:9a:33:09:79:ca:68:a7:41:d7:ed:86:35:e6:f7:c1:2c:f5:
         76:b1:e0:8f:95:7d:76:34:86:ac:20:0c:f1:55:2d:9c:ef:dc:
         36:72:9a:fa:dd:c0:60:48:5c:69:e2:2e:64:4f:60:2a:e8:10:
         4c:0d:19:23:19:4c:0c:76:cc:36:f8:df:40:29:e8:8f:93:8f:
         a1:c0:ca:45:f5:32:a5:31:26:bb:8b:e1:fe:69:d2:21:2a:8b:
         47:31:e1:97:38:7f:ee:3f:de:3f:6e:29:f0:3f:de:3b:71:13:
         07:5a:ee:d0:b4:ee:a9:24:d6:55:d7:cd:07:aa:a0:bc:9f:77:
         cc:39:29:4a:f2:a2:7a:dc:04:be:cf:18:73:13:3d:40:b5:da:
         a5:b7:27:0d:0f:2a:d8:ee:0e:81:7b:46:38:da:94:a0:a0:23:
         a2:d1:da:5e:0a:aa:45:6b:de:80:47:8b:8e:8a:d5:a2:5b:37:
         15:07:bc:ec:bb:0f:8f:db:73:4c:72:79:95:a4:a6:1c:c8:8d:
         2d:55:04:ed:8f:84:9d:5d:61:82:d1:d6:e7:8d:4a:90:2f:c7:
         e1:a5:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:47:31 2024 by rpki-client on console-ams.rpki-client.org