Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e610e83c-d61e-473e-a8ff-bf03b5b2cc2f.roa
File:                     e610e83c-d61e-473e-a8ff-bf03b5b2cc2f.roa (raw, json)
Hash identifier:          vm33cdTbWy0eaWv5ZaJ3qnXGC6D+ZMgGlcN2RKDJcSY=
Subject key identifier:   B1:C0:62:3D:06:F1:15:D1:3F:6A:F8:52:E5:A3:09:97:28:03:70:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C39DC199F25C54F3974B633E96881E55CF61E0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e610e83c-d61e-473e-a8ff-bf03b5b2cc2f.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.236.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:39:dc:19:9f:25:c5:4f:39:74:b6:33:e9:68:81:e5:5c:f6:1e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=0c804919e30d4ab3bd877f5dacbfd5faeecb41111fee6d6d4ff239b517db198b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:fc:a8:4b:11:ad:e9:ab:e4:68:18:24:49:
                    0a:4d:ad:6f:e2:77:4f:90:76:de:96:8a:fd:42:c4:
                    64:40:28:93:1c:ad:01:88:12:c1:26:36:85:c4:8e:
                    2b:fb:bf:57:80:1f:7d:d6:41:1f:6a:33:c8:41:a3:
                    b6:ff:a5:6c:78:bf:77:e6:d8:cb:af:59:05:fb:2b:
                    a4:f1:4e:b1:d6:81:d4:e1:74:70:4e:a0:24:1a:5a:
                    19:23:49:2a:64:c1:62:32:2b:9e:38:65:ba:b9:37:
                    0c:dd:a0:b6:10:f8:a0:4e:ec:d0:f0:fd:c5:c4:ee:
                    b7:fe:83:6f:96:b7:0d:54:92:1c:e5:f2:63:4b:a0:
                    c6:a9:f8:34:2e:41:85:8b:4a:bf:1f:15:b3:7c:5d:
                    5f:85:57:18:76:cb:ce:02:2f:8e:b1:c0:59:6e:a4:
                    9a:39:b7:62:ac:bf:47:7b:99:42:9d:9d:b8:72:a2:
                    12:a3:f3:50:63:3f:4d:4a:f4:a3:c2:28:61:d0:bd:
                    b1:27:5b:0d:12:46:70:8a:b6:3c:83:26:f6:f1:42:
                    0c:a9:ad:9d:8f:37:a8:cd:6c:44:5a:2a:bb:b1:4a:
                    30:0c:e6:12:b8:18:46:22:95:9b:46:b6:32:5b:cc:
                    45:be:51:36:fb:f9:97:74:7b:65:bb:15:2e:96:c4:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C0:62:3D:06:F1:15:D1:3F:6A:F8:52:E5:A3:09:97:28:03:70:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e610e83c-d61e-473e-a8ff-bf03b5b2cc2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.236.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         67:e9:ef:03:55:35:76:96:a9:39:c3:30:1c:99:1d:cb:fe:17:
         52:7c:0e:e3:ed:90:44:2c:cd:ff:ae:a0:3b:9f:49:41:cd:d1:
         78:89:e3:19:be:4e:74:e6:f2:7e:dd:38:3d:87:42:6e:42:dc:
         5f:ea:ae:77:2b:a5:8c:9e:87:a6:5e:01:73:08:eb:4c:9d:bd:
         02:94:0d:92:01:8c:77:50:52:5f:35:04:ea:18:7a:9b:a2:4f:
         ba:02:27:ab:6c:46:a4:07:7f:58:21:60:e1:bb:bd:41:25:c6:
         c3:ae:80:07:23:29:7e:9b:4a:3f:6a:a2:6f:f5:60:aa:38:24:
         3a:9a:fa:cb:85:a8:0e:9d:17:58:de:05:80:1c:98:68:df:cb:
         10:df:89:6c:26:8b:9a:01:a5:0e:55:c1:4a:81:24:93:63:05:
         12:30:ff:af:a7:3c:10:b1:5a:e2:32:9f:bb:2c:dd:27:a7:4c:
         6f:43:9b:2c:93:42:47:07:52:ce:7e:0b:6f:d5:88:62:8c:f5:
         81:89:9e:1c:c4:d8:5e:ad:47:1d:82:86:3f:c1:15:78:c4:6c:
         6f:be:1a:35:96:e5:34:56:00:dd:1d:0c:cc:3c:f1:67:08:a9:
         c8:c2:ce:ee:cc:35:cf:9a:92:cc:83:74:95:f7:67:81:4b:7a:
         e8:ff:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:40 2024 by rpki-client on console-ams.rpki-client.org