Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6b695ae-5cd0-4274-b165-7adcd31a5ff8.roa
File:                     d6b695ae-5cd0-4274-b165-7adcd31a5ff8.roa (raw, json)
Hash identifier:          PzCPjQCqnU9TGhH8jNIBM1xwm+yNvYeGWYNYy6aF7Ls=
Subject key identifier:   39:70:B7:02:90:4A:D1:B1:94:18:0F:B4:A8:6F:32:E4:12:3B:7C:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55E2BB7360128120E8767AD76D9F22F6F650F82F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6b695ae-5cd0-4274-b165-7adcd31a5ff8.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.91.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e2:bb:73:60:12:81:20:e8:76:7a:d7:6d:9f:22:f6:f6:50:f8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=5d270073da78db74aa1b96c433822bf4e93168e5aed956de765e22cb9f1da7b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:3f:81:4c:8d:33:c9:e5:6e:50:3b:29:23:
                    ab:f4:15:db:1f:00:c7:3a:f0:ac:77:38:88:a4:df:
                    ee:3f:41:5d:78:8b:61:3b:d1:27:9a:6f:b9:24:92:
                    8d:65:fc:d6:fa:a8:7e:3f:60:7d:16:48:bc:68:49:
                    a5:80:d2:2f:2b:b0:a4:f4:07:ab:92:78:1d:e6:4a:
                    fb:bc:3f:b6:2c:62:19:14:2e:97:2e:7d:12:c7:8c:
                    d6:8c:9c:df:6a:f1:58:99:94:35:b8:9b:8f:75:ae:
                    2d:23:19:47:24:41:55:47:4e:58:d2:d7:fc:69:1a:
                    01:81:eb:d1:ef:01:a5:1a:97:38:94:b6:47:9f:41:
                    c9:df:d3:ab:6b:c9:e4:17:d1:77:c7:2d:0d:db:8c:
                    c1:a0:63:26:d1:00:e6:0a:4e:96:10:fa:28:f8:70:
                    97:d5:f3:74:3d:7b:64:5f:37:fe:8d:49:a3:37:49:
                    b5:eb:df:f5:a7:87:b7:00:9a:02:c1:61:5a:b8:3f:
                    7d:b1:53:77:af:b8:c6:43:bc:e9:c2:a2:cf:77:8e:
                    e2:db:a2:cf:28:cd:de:2c:94:aa:a1:5c:01:d5:28:
                    58:3a:1e:11:dd:89:5f:bc:84:d5:e5:43:5d:d3:51:
                    41:73:3c:56:d6:cf:03:59:8f:7c:dc:e1:f7:10:c8:
                    26:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:70:B7:02:90:4A:D1:B1:94:18:0F:B4:A8:6F:32:E4:12:3B:7C:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6b695ae-5cd0-4274-b165-7adcd31a5ff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c5:67:6f:f4:3c:66:4b:9c:76:6e:01:ad:63:39:80:85:45:d3:
         74:db:08:be:20:3e:97:8d:12:27:43:08:e4:42:b0:0e:38:d6:
         77:fa:b9:f2:c9:4f:ed:47:43:6a:e4:8d:53:7a:2a:c3:63:1d:
         13:56:76:96:0b:0e:30:46:f1:27:04:d3:c9:83:35:b0:86:3d:
         d0:91:93:4c:ec:76:1e:90:24:1f:f3:c5:46:9d:40:b0:74:d4:
         26:a5:b5:cf:a9:64:ff:fa:34:11:3e:b2:6a:e4:51:2c:b0:3b:
         00:76:1a:8e:37:fc:ea:ac:cb:93:f9:0b:09:6f:ce:e0:4b:93:
         30:35:1c:07:8e:98:d5:ea:3b:4c:43:b4:c5:1d:a3:2b:10:cb:
         8f:4c:b0:5c:44:bb:e4:46:af:05:30:8e:c2:20:bd:48:c4:28:
         15:78:5d:62:89:67:52:cc:cc:34:38:e3:f0:ec:99:77:36:15:
         6b:51:5b:cc:8f:f0:e9:b9:3b:42:bd:a3:55:a2:75:50:c6:d7:
         1c:7b:dc:8f:1d:0c:c7:e5:42:ef:ed:ca:56:6a:0a:08:39:60:
         77:f2:73:62:de:9a:a4:62:4a:55:cc:7c:a4:b3:a7:00:b9:f3:
         cd:f5:50:79:c9:42:f4:27:4d:86:27:5f:c2:5b:f5:1b:88:f6:
         8f:b9:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:23:13 2024 by rpki-client on console-ams.rpki-client.org