Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f066f27c-0680-4593-baf9-f40cbb3ae5b0.roa
File:                     f066f27c-0680-4593-baf9-f40cbb3ae5b0.roa (raw, json)
Hash identifier:          dWd1aDckI6rhCzq4dhkxItxVIw8QnEGJn92CbHV6H+U=
Subject key identifier:   A6:EF:BA:3B:5E:B3:CA:88:98:86:3D:12:35:08:E2:C8:7F:BE:06:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E804BA9138104C078259286DEBCA27CF799BC9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f066f27c-0680-4593-baf9-f40cbb3ae5b0.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.187.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:80:4b:a9:13:81:04:c0:78:25:92:86:de:bc:a2:7c:f7:99:bc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=7f05493c44421fc1ab5897fc3962ad067304cbb22a7880853e80cdbcabcc0c4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:22:92:68:61:94:f2:7a:37:72:cd:12:66:
                    c2:89:26:3d:8c:c2:6a:b4:a2:87:21:91:8b:9b:33:
                    8b:71:d5:b1:34:f6:89:c5:b4:e2:e9:9b:f5:16:80:
                    4f:0d:ef:3f:8c:6c:3d:66:e5:73:86:09:ba:e6:3c:
                    91:02:6a:bb:7a:f0:cf:d4:bb:39:6c:cd:63:89:68:
                    dc:58:58:7b:d9:31:75:3e:9e:3f:f3:90:7c:87:33:
                    48:0e:3b:ea:a4:2d:e4:e3:1e:45:39:89:db:81:d0:
                    d4:f3:71:f0:52:12:35:50:8a:40:02:45:17:d1:89:
                    2a:59:71:d1:2e:38:e4:f6:03:2f:24:c9:a7:f3:ac:
                    7c:81:52:02:8d:10:5c:93:56:98:ce:b7:7c:61:4d:
                    d6:72:0b:62:b4:ea:29:ed:c6:83:c0:7f:1a:32:c1:
                    6b:37:b0:33:9f:d4:6d:c5:88:0b:c5:a7:da:da:cd:
                    54:dc:a0:0e:3d:1d:ea:9d:4c:d2:37:6b:d4:6a:80:
                    05:e6:3f:4b:7c:11:25:c5:b4:ae:a0:3b:84:c5:d8:
                    cb:a9:f5:aa:2f:19:1b:38:55:85:43:2a:4c:ff:58:
                    c0:87:c7:a1:e9:10:eb:8e:90:b3:f8:86:21:57:9f:
                    6f:e1:ce:96:10:81:81:9e:ca:94:06:bd:31:cb:9f:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:BA:3B:5E:B3:CA:88:98:86:3D:12:35:08:E2:C8:7F:BE:06:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f066f27c-0680-4593-baf9-f40cbb3ae5b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:3f:38:a9:35:d2:63:d7:8e:47:e4:66:47:0d:4a:49:26:06:
         d9:d9:80:fb:35:33:c6:0c:ba:ef:2a:43:a5:41:2a:e5:14:e2:
         63:32:81:86:fc:cd:5d:3f:9e:85:19:bc:67:ac:b0:9c:6a:02:
         01:9d:1e:d8:5b:37:9c:a4:e2:25:31:60:0c:0e:6c:31:27:b7:
         bd:c2:40:c5:76:d1:5c:b0:8b:41:3f:bc:02:33:17:64:31:1e:
         53:fe:3e:4a:d4:cd:86:6a:17:6b:2b:85:26:7e:18:32:9d:22:
         b9:a5:f0:34:0f:37:8b:7d:01:1c:7e:8b:3f:44:14:f1:dd:74:
         ea:ff:55:6e:56:56:e0:a3:0b:5c:b6:5b:01:59:78:d0:12:1e:
         68:49:6c:f5:d5:30:39:43:d8:0c:be:ca:91:60:4c:15:c6:e5:
         c3:63:d8:16:b9:ce:c2:ec:7b:09:7d:10:a2:e6:56:0c:e3:71:
         49:81:d9:48:11:b1:49:f4:59:8a:13:68:10:30:be:e5:c1:81:
         d6:85:c9:a4:6c:06:df:28:f2:ef:d8:c0:5f:7e:cd:6a:6e:70:
         a6:0b:f3:db:a0:8e:8a:4b:4a:12:7b:03:1c:02:97:2f:93:6d:
         58:f5:ed:6d:08:af:bc:04:b2:05:e1:59:cf:74:3e:40:88:00:
         5d:93:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:51:15 2024 by rpki-client on console-fra.rpki-client.org