Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa
File:                     ee072b22-d511-4e36-bf63-9dea3fed9955.roa (raw, json)
Hash identifier:          QjQ6rWdh3oLlLSqCkBjy0mKwVqtus7InLGAtkunQKcQ=
Subject key identifier:   19:5E:6E:2B:78:89:C6:C1:59:6A:5A:02:5F:95:B8:D0:27:28:CF:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70B7FC847AAC8A4C2406550455BFBF2CC5BF89FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.40.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b7:fc:84:7a:ac:8a:4c:24:06:55:04:55:bf:bf:2c:c5:bf:89:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=29bb6a9de2602ef8b2cfb68b6663149a4a5d0654c35e927d09d9c3e18d10a098, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3c:39:71:5f:08:c3:14:eb:6c:b6:83:53:b8:
                    28:a5:eb:f9:66:91:2c:a2:60:c7:6b:c3:79:9e:fc:
                    42:16:00:72:87:ef:46:5e:e1:6f:3e:03:fe:d5:6a:
                    37:42:19:50:b1:a1:64:9b:1a:70:e2:1a:ca:eb:c9:
                    9f:92:ea:39:f0:4d:94:03:59:ad:cb:14:a9:97:2b:
                    21:ec:c5:0d:70:19:c2:52:0a:d0:a3:0b:79:2f:bf:
                    82:90:40:aa:ea:a9:a1:97:3e:b0:70:1b:d1:a0:c0:
                    58:ba:34:63:56:dd:1f:88:6d:c1:39:6c:e5:b6:90:
                    13:47:8f:99:b4:c2:4e:63:c6:5b:03:02:83:0a:6a:
                    5f:5d:dd:da:b6:2d:5f:d6:ca:b9:82:26:f7:e6:42:
                    03:16:b1:2a:48:2a:eb:48:7c:2a:af:4e:40:69:87:
                    57:6f:48:5d:9f:93:e3:f0:57:82:35:b9:cb:e4:cf:
                    b8:af:42:46:2e:5e:ca:ec:e9:a6:7f:0f:22:fc:fd:
                    a8:7b:c9:7f:3e:7c:fa:87:c3:73:01:01:f4:d6:0c:
                    e5:8d:b4:e8:22:c8:4e:92:64:1d:18:ab:25:fd:0f:
                    2b:59:ae:c4:7e:1b:19:05:85:a1:2f:f1:1c:a5:f4:
                    e5:9f:5b:f2:8c:66:73:41:ca:3d:e3:84:7a:8d:bc:
                    3d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5E:6E:2B:78:89:C6:C1:59:6A:5A:02:5F:95:B8:D0:27:28:CF:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.40.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:c9:1b:64:77:b4:ba:d9:a8:f1:d1:9b:78:82:71:04:32:
         6e:a6:0f:94:78:35:83:01:f5:0b:cd:07:4d:6f:c5:b8:e9:a5:
         1b:00:f1:01:4f:58:1c:2e:98:43:b2:13:a5:20:b9:81:b6:e9:
         5e:31:0c:4a:c2:0b:90:1d:28:7b:c4:7b:4a:5c:36:47:97:a3:
         fb:c2:f0:66:42:2c:64:c8:53:ea:62:72:7c:35:e0:6a:85:6b:
         09:3e:4c:4b:20:b9:00:dc:1e:2b:86:35:f7:0e:02:b6:bd:b8:
         a7:88:a7:be:0d:35:eb:b6:86:c2:7e:23:28:ee:08:29:4c:23:
         c9:0d:bb:13:f2:ab:6d:cf:83:b4:3c:05:bb:44:87:31:1b:3a:
         d4:bb:1e:7c:e9:b2:e6:a9:2b:51:fe:be:66:d2:32:63:4b:bc:
         74:97:59:6f:2b:87:7b:2d:c0:a2:8b:3b:8e:2f:a6:74:e6:13:
         e8:68:be:2c:67:c8:27:f7:75:aa:2e:8b:23:77:69:38:1f:bb:
         a5:35:2f:87:a5:c8:fa:3a:05:4f:5c:20:39:b9:e9:75:49:f0:
         85:95:c1:23:5e:ec:38:a6:0a:62:1d:a0:a9:62:e1:fd:ab:42:
         49:c3:79:14:26:f9:b4:8f:e3:2d:10:90:27:d5:fb:be:20:f8:
         c5:eb:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:56:48 2024 by rpki-client on console-fra.rpki-client.org