Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc23231-c1b0-40d8-b316-5c2afc8ead56.roa
File:                     ddc23231-c1b0-40d8-b316-5c2afc8ead56.roa (raw, json)
Hash identifier:          zsoF35on7gu9yxN/xXQ1KGSgkvtqqKvPWlLB7C71xq8=
Subject key identifier:   CD:8E:0D:22:6E:1D:BC:82:F3:CA:0B:63:31:FE:A8:5A:4D:28:86:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7ED68B5D31FCA2E27F822EC790C6399436C88190
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc23231-c1b0-40d8-b316-5c2afc8ead56.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        57.94.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d6:8b:5d:31:fc:a2:e2:7f:82:2e:c7:90:c6:39:94:36:c8:81:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=e272ebe586ac737abf1efd944615a226d396439ffb243c53693605a48c952106, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:74:36:34:38:ae:a4:3d:b1:8d:e0:fe:e1:00:
                    b0:1f:fa:5b:f4:35:54:8b:40:ee:67:3e:eb:54:62:
                    0f:99:90:94:cb:8b:ee:f7:96:92:35:c6:dd:9c:24:
                    f2:14:39:fb:da:1e:e5:24:c0:a0:d2:22:58:d6:35:
                    e0:f0:ac:ef:e7:cb:03:8a:2d:7d:31:95:74:f4:12:
                    48:8a:f2:0e:94:c1:c9:04:e1:aa:a9:4c:c3:ed:a0:
                    97:44:c2:6f:3a:f0:96:ef:04:70:a8:c5:b4:5d:3d:
                    a3:03:fa:d6:cc:82:1b:ac:6b:e3:80:30:3e:df:9e:
                    96:b2:b7:95:23:ca:24:3e:75:33:6e:99:c0:5d:ea:
                    04:de:65:b1:9c:f7:f5:26:8d:c9:a1:f6:45:5b:59:
                    68:64:58:01:b1:d2:3b:36:21:4f:93:5e:59:1e:9b:
                    7c:3d:24:ac:c1:89:66:84:9f:9c:07:c4:c7:09:e1:
                    10:f4:54:ef:57:fb:6a:68:ac:17:64:55:27:7a:1e:
                    83:aa:bc:91:2d:9d:93:3a:c5:77:99:0d:1d:63:1f:
                    0f:a9:b9:71:fd:7a:c6:7f:4a:03:95:7b:af:61:dc:
                    1e:d2:c9:e2:73:15:aa:33:f0:54:cb:c5:25:7b:1b:
                    52:9b:9f:51:72:df:7b:76:a6:c3:e7:47:4c:eb:44:
                    1b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8E:0D:22:6E:1D:BC:82:F3:CA:0B:63:31:FE:A8:5A:4D:28:86:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc23231-c1b0-40d8-b316-5c2afc8ead56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.94.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bf:f6:56:b6:15:5b:ed:65:02:f6:92:78:7c:72:97:d0:7b:54:
         e4:ba:a3:ce:ac:46:f6:53:59:2d:6a:85:f2:e2:be:a1:fd:c7:
         ed:3f:ae:ac:e5:ad:b1:b2:ee:8a:95:bd:0f:1a:6e:09:28:34:
         25:7a:ab:ea:0b:7e:ec:39:70:43:63:79:0c:8d:16:20:e7:e1:
         67:2f:cd:dc:18:7f:18:0c:dd:96:cc:e7:72:1f:9e:52:51:73:
         51:0b:aa:d4:7e:20:5f:a6:75:97:7b:98:29:91:90:b7:67:7d:
         5b:eb:ea:7e:96:dd:68:90:73:42:42:b1:9e:c2:32:d3:c2:f0:
         75:19:6e:7c:b7:27:21:eb:6e:73:d4:2a:9d:4c:96:01:85:9a:
         5b:79:cd:5e:ea:0a:ae:b3:da:2c:c7:05:4a:ae:d6:88:bb:d1:
         1a:1a:6f:69:f8:02:62:31:3d:5c:de:c9:e0:c5:25:8e:bb:c2:
         ac:24:41:9b:10:a6:9c:b8:5c:86:c2:bc:d7:46:6c:4a:0c:8e:
         82:63:89:05:8f:e0:a9:66:b0:27:50:5a:38:6f:e3:01:9d:d4:
         ff:e3:6c:32:98:5a:f0:35:e0:58:1e:75:17:15:63:f4:c9:ac:
         e6:46:e4:f1:ba:ad:5f:86:72:e1:e7:ca:82:6a:d6:4b:3d:60:
         92:21:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:18 2024 by rpki-client on console-ams.rpki-client.org