Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f88e74f5-0ded-425b-b6d6-7002d877f536.roa
File:                     f88e74f5-0ded-425b-b6d6-7002d877f536.roa (raw, json)
Hash identifier:          NeG6JEFxVgGdE9gte9PjzI5zfg7EKSz3GM5LbJ29sEU=
Subject key identifier:   95:76:52:00:1D:0D:73:B0:59:EB:E2:83:73:EB:A7:BF:8A:E0:E6:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       051229B2DEA1C4CB4A0298417955DF9B6BCEF0BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f88e74f5-0ded-425b-b6d6-7002d877f536.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.115.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:12:29:b2:de:a1:c4:cb:4a:02:98:41:79:55:df:9b:6b:ce:f0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=7d9f56a7f5dc8091d1707f82e9c99434bc712c8c51f21f0dd9769297684900a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:f8:d6:5e:4d:d7:3a:2e:93:4c:81:46:bc:
                    68:77:ef:13:21:70:86:b3:15:8f:99:6b:a4:8a:68:
                    78:11:a0:3d:8f:4c:3f:b4:cd:c7:57:f8:f0:6b:d0:
                    78:d3:f4:88:89:70:a1:d2:b6:47:6b:93:9a:c4:be:
                    40:3d:5a:1e:06:e9:e1:c6:dc:db:a0:d4:71:16:7d:
                    49:89:59:97:cc:44:19:97:d0:25:2e:50:ed:72:a8:
                    51:6b:6e:9b:b0:36:ca:19:8f:1d:e8:81:15:4d:ae:
                    11:ed:54:69:9d:e1:b8:4d:91:f0:5d:92:ee:27:25:
                    dd:7d:85:51:11:bb:a5:22:29:f6:87:af:3c:fe:5e:
                    6a:b8:2c:13:88:5e:b7:05:77:ee:22:95:d7:41:e5:
                    77:8a:61:cb:76:5e:c1:b6:fb:49:5f:03:28:8a:ac:
                    18:e3:b6:a5:dd:2e:7b:41:3b:ea:7f:8b:a1:42:e5:
                    dc:4c:78:9b:e9:57:4c:f1:97:0e:27:5b:14:34:a0:
                    ae:3a:8a:2c:70:5b:76:92:23:ca:7a:ef:5b:dd:ba:
                    54:a8:3a:77:f9:bb:ae:e5:1c:39:01:98:bd:b5:ba:
                    52:9f:e8:74:bd:5d:8f:e3:27:21:64:d0:e5:80:09:
                    87:74:b1:a6:33:26:2f:bd:2d:9a:1d:d0:c9:64:35:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:76:52:00:1D:0D:73:B0:59:EB:E2:83:73:EB:A7:BF:8A:E0:E6:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f88e74f5-0ded-425b-b6d6-7002d877f536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:0f:79:dc:3e:38:a0:7a:83:54:9b:c5:f9:32:4d:83:49:
         d0:c9:b6:98:cb:83:43:3a:33:d9:da:0d:5d:41:e0:2e:f7:ed:
         55:58:ce:05:9f:17:78:af:c5:c7:07:15:5b:8d:f5:e7:96:52:
         bd:34:3b:90:65:8a:79:e5:70:9e:14:a4:3f:09:c1:67:c0:69:
         11:6d:36:fe:2c:15:0c:1c:eb:7e:bb:38:08:97:08:68:af:96:
         33:c8:7c:9d:49:f6:89:4f:f9:3d:5c:fa:df:b0:7b:81:f9:e7:
         f9:da:1c:b3:b1:e7:cf:4e:a4:e0:7a:5e:3a:28:a4:7f:29:a7:
         8e:16:c3:08:73:b7:58:d1:df:a7:9e:d1:22:ff:96:a5:e1:8c:
         32:79:e2:b6:90:bd:76:90:8d:9f:ab:5b:83:ab:fe:1d:64:58:
         20:8e:ce:99:a3:a2:30:a1:76:b9:67:27:66:26:0b:fb:93:21:
         bc:92:3e:55:ba:0b:25:9f:82:36:6e:6a:ee:0f:82:ae:e3:b4:
         73:8d:af:e6:37:15:9c:2f:a3:16:1e:41:94:93:1f:17:46:3c:
         9c:ad:a7:a7:61:56:bd:b6:0f:e3:df:79:8f:4d:1e:23:14:c7:
         67:ac:ab:d6:f0:f8:f0:84:85:90:f1:02:19:2f:3a:2e:a1:e6:
         93:64:df:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:28 2024 by rpki-client on console-ams.rpki-client.org