Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6e5958f-bc48-4b06-b4c5-1733d7b6d949.roa
File:                     f6e5958f-bc48-4b06-b4c5-1733d7b6d949.roa (raw, json)
Hash identifier:          1l1gTrXZS/tNYpBcJhjVIOXikvKFg/eLN7rjmCi27VI=
Subject key identifier:   2D:45:C3:91:BF:B6:5A:C3:0D:66:63:54:76:C8:E0:DA:16:D8:FD:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F7F6692E64F98B80058217CD2022FE7B707CB16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6e5958f-bc48-4b06-b4c5-1733d7b6d949.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.90.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7f:66:92:e6:4f:98:b8:00:58:21:7c:d2:02:2f:e7:b7:07:cb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=12a252e661d03ca6caa4042521811c9ab9084d3804f50e309de37f1c6f99e5b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:49:74:f6:32:b4:ac:29:2d:b2:44:53:8b:
                    4e:21:7b:89:81:49:fa:53:4d:ba:8b:c1:3f:af:04:
                    c1:f8:6f:87:71:e6:4e:66:fa:41:c5:a9:ba:48:7e:
                    02:94:ac:66:34:34:9c:b8:69:c1:43:f9:34:0d:3c:
                    73:78:f1:7d:4e:9a:98:bd:ab:5c:47:16:b3:c9:c0:
                    80:c8:49:ea:cf:8d:10:e5:ed:17:56:03:1c:af:3c:
                    c9:e0:2d:dd:00:29:be:b5:ec:88:bc:35:73:0e:eb:
                    94:59:68:c2:67:05:0e:6c:ca:0d:03:b9:64:80:e3:
                    c3:59:77:49:86:68:ed:75:80:71:76:d3:3c:6d:77:
                    71:c7:d5:73:50:c6:9a:8e:ad:89:25:92:f4:fb:c5:
                    5d:a4:99:34:ab:fa:5f:58:8b:33:9e:3a:f7:38:01:
                    46:75:97:67:50:b0:94:76:ab:0f:2f:ad:af:06:7c:
                    c4:95:03:b3:d9:47:ae:3b:e9:e7:90:73:33:92:f2:
                    e9:40:d7:c6:3c:05:9d:79:2b:5c:61:84:b8:c4:b8:
                    59:85:69:d3:90:dd:a2:b1:0d:a8:ad:64:59:7b:8e:
                    2c:7e:84:ff:10:55:f6:e8:07:ff:eb:79:ff:d9:18:
                    11:81:fc:86:1c:bf:1c:18:9c:41:d0:49:a5:67:f9:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:45:C3:91:BF:B6:5A:C3:0D:66:63:54:76:C8:E0:DA:16:D8:FD:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6e5958f-bc48-4b06-b4c5-1733d7b6d949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.90.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:80:08:c7:06:07:6f:1f:ce:01:83:5d:f2:10:28:15:66:6c:
         d2:1e:7b:c2:6e:72:95:a1:42:1b:16:ce:3a:68:2c:fb:c7:4a:
         eb:08:b7:21:ed:64:38:e3:30:0b:4e:2c:d5:74:15:13:30:66:
         43:0a:6d:a2:8f:bb:24:4d:66:6f:23:85:a2:f6:1d:c2:86:89:
         1a:f8:ee:09:96:85:89:50:94:36:26:44:bc:d9:96:4c:5a:0b:
         24:d0:d5:c8:0c:9c:a2:41:fd:e3:a5:0d:16:c6:16:3a:95:2c:
         5c:d3:67:c0:58:ad:d7:ca:e8:e8:68:13:39:4c:4d:67:e6:39:
         c9:2b:ee:4c:34:fe:19:87:6c:53:26:5b:ce:f0:22:46:2d:ba:
         7e:5f:76:ce:d2:3a:c4:64:b9:06:ad:d8:74:55:8e:65:74:7b:
         15:05:e8:17:5b:5b:00:7b:79:54:a8:f2:21:29:74:94:c7:50:
         ab:84:1c:d4:e0:9f:a4:1c:64:68:52:0f:79:ca:41:fb:26:20:
         03:16:8b:08:01:d8:7b:71:2a:5b:8b:37:d5:e5:2a:0a:93:15:
         76:47:c0:78:6c:14:ec:8a:b0:85:53:50:67:d2:01:f4:1f:03:
         9b:8c:1f:b4:5d:e6:63:14:7f:b4:4a:2c:d8:5e:b6:e1:08:e0:
         5a:6a:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:28 2024 by rpki-client on console-ams.rpki-client.org