Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87285c9-5416-4bb2-8736-5712af00b41b.roa
File:                     e87285c9-5416-4bb2-8736-5712af00b41b.roa (raw, json)
Hash identifier:          LuSKjBZiBjvrJFYxKmjWISYFqJWB9XewDeo4qNUcwXU=
Subject key identifier:   C8:3E:CF:B9:0F:9B:9D:55:1F:F0:25:5D:F3:DB:51:E0:0A:72:A3:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       521CE062CFE9674E528ACE64EB5DCC7317B78040
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87285c9-5416-4bb2-8736-5712af00b41b.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.54.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1c:e0:62:cf:e9:67:4e:52:8a:ce:64:eb:5d:cc:73:17:b7:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=d542efbfc56c8f5693633d23b91ac3772b22965cc494d2231b98f78b97bf4aa4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:02:fa:f6:3f:b4:e4:86:34:82:30:91:ac:
                    0f:70:49:cc:99:51:50:b9:25:44:a6:19:68:a2:b1:
                    7d:26:82:62:0c:31:74:e9:f6:1a:c1:11:7b:37:28:
                    12:3d:eb:10:dd:39:9a:ba:36:29:8a:60:3e:0c:de:
                    42:64:22:eb:83:19:a8:7a:a8:9b:73:87:76:04:4b:
                    ad:7b:87:08:a9:7f:52:0f:d0:d6:78:e3:dd:22:f0:
                    e3:3b:e2:f9:4e:a8:a7:73:7d:08:11:63:eb:3a:c8:
                    72:08:13:39:8c:6f:02:65:5b:7b:9e:4a:5d:39:11:
                    24:df:22:4f:04:13:86:e8:85:54:9a:b5:fa:c9:ab:
                    42:d3:9f:07:c7:68:71:cf:41:65:3d:76:59:61:aa:
                    f6:64:09:dd:55:76:f2:5c:9d:fe:bb:3b:85:d3:87:
                    a1:f5:55:73:25:91:37:22:6f:8c:51:d1:98:1f:8f:
                    08:a2:d4:4d:36:f6:69:c9:8e:b3:83:ea:1b:95:45:
                    9e:c6:80:6b:c6:52:fe:0e:68:43:ee:b0:c9:7f:4b:
                    e6:a9:7d:68:c4:34:92:e9:24:c8:e6:b8:91:17:3d:
                    0f:43:51:37:df:7a:d2:fc:0c:7e:84:e8:8c:f6:19:
                    9e:35:74:1d:c8:84:b3:fb:36:88:49:66:b0:d4:50:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3E:CF:B9:0F:9B:9D:55:1F:F0:25:5D:F3:DB:51:E0:0A:72:A3:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87285c9-5416-4bb2-8736-5712af00b41b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.54.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d6:d3:56:db:59:59:30:ed:94:fb:13:16:5e:42:a4:29:b4:1d:
         e1:9a:3d:f4:d6:6e:39:ac:96:87:a8:d7:2f:c1:04:b3:79:24:
         f4:b3:6f:71:0d:38:8c:9e:0d:f9:fe:6f:20:4e:00:ed:24:be:
         b1:03:20:51:c7:a5:2d:ac:d4:7e:6d:3f:4f:90:b3:b1:9a:c8:
         2f:08:22:6c:c3:ec:20:9d:fc:f6:2f:06:78:3d:20:32:ea:6a:
         29:ec:f0:c9:d4:3f:df:d6:e7:cc:12:1b:ef:be:88:c5:8d:5b:
         d3:a1:51:79:70:a7:c4:8c:e2:01:46:f9:64:7c:97:57:7b:d3:
         2f:c9:64:d4:d6:5c:6b:54:93:12:2c:86:1c:4e:34:88:37:cf:
         ab:d3:bf:22:e0:61:15:64:d8:f1:d7:f4:be:ce:65:ae:bd:6c:
         cf:0c:f8:31:94:27:78:fb:a2:d9:45:3e:a2:76:f1:b8:fb:ba:
         50:a7:8a:d0:c7:39:79:e0:50:28:7c:9f:0b:20:e4:4c:85:bd:
         0c:12:68:6f:40:8c:82:05:16:b3:a9:73:e4:6e:a4:0c:c8:bb:
         15:41:c7:65:98:d2:49:3a:87:18:89:12:08:05:67:b8:ba:aa:
         fd:38:ef:1c:50:86:b7:80:ac:6f:f7:3e:00:ac:24:d4:6b:0f:
         2a:e5:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:11:38 2024 by rpki-client on console-ams.rpki-client.org