Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbcc299e-5ab9-46f6-9793-f6b3ea092bc3.roa
File:                     fbcc299e-5ab9-46f6-9793-f6b3ea092bc3.roa (raw, json)
Hash identifier:          eoyWg3p4sMxt+eUKJZrtY4uLy5fJFjPQWhSGj8LQSMA=
Subject key identifier:   A3:00:33:31:41:59:2E:EA:B6:71:81:A3:20:2B:24:AE:B8:D8:3D:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2CD8A3B79D1FA28C16C9C4F17FAD2E1DDB49CD5D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbcc299e-5ab9-46f6-9793-f6b3ea092bc3.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.116.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d8:a3:b7:9d:1f:a2:8c:16:c9:c4:f1:7f:ad:2e:1d:db:49:cd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=108f104971d2af84695db5699ba0d252e71d6107efb77f51d31896c9698e742e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:62:8d:26:4d:19:c8:e9:84:44:3f:28:17:
                    e2:18:7e:8d:c5:2d:7a:b2:e6:af:93:79:99:7d:61:
                    0d:dd:11:66:b5:af:fa:0e:96:e7:34:a2:c8:84:31:
                    8f:9f:b7:7b:eb:8f:c4:f3:73:38:cc:69:6d:ec:af:
                    d9:9c:2b:db:ef:5e:e2:14:64:c0:2e:ca:d2:a2:68:
                    86:4b:73:c9:5e:72:0f:39:31:a6:8d:80:23:26:4d:
                    fd:af:04:61:27:e2:c1:ed:5a:13:82:fc:26:d3:73:
                    48:06:96:56:12:e4:15:29:09:0d:54:6a:fc:64:d1:
                    aa:d6:1d:1e:5d:45:f4:15:07:a1:71:28:97:90:f8:
                    a2:91:d5:d5:01:10:ef:7e:d6:27:52:b2:03:26:2a:
                    06:fb:79:5b:f1:d7:eb:47:7b:ae:1b:10:16:fd:27:
                    9a:66:ef:e4:4c:71:08:1e:5a:6d:fe:5f:58:c9:be:
                    09:82:37:40:c8:0a:68:66:26:b7:5c:9d:24:0c:d4:
                    11:d8:3b:bd:c5:23:30:e9:dd:6f:56:74:41:1d:0b:
                    12:9a:31:d8:5a:ff:fa:85:ba:16:a5:84:88:79:8d:
                    62:5b:bd:06:92:3b:7c:56:94:50:21:b6:55:aa:f0:
                    07:83:8b:41:f6:21:cb:ab:53:46:7d:60:d9:09:f8:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:00:33:31:41:59:2E:EA:B6:71:81:A3:20:2B:24:AE:B8:D8:3D:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbcc299e-5ab9-46f6-9793-f6b3ea092bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.116.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:60:ea:0e:0b:47:ea:2d:16:e6:81:63:b4:76:8a:4b:91:4b:
         af:54:b9:d4:ca:6e:f7:5c:e3:b2:69:8d:04:b6:bd:9f:a4:42:
         7c:3b:d9:ec:57:c3:19:fc:66:cd:5e:ba:40:75:d9:0d:74:8f:
         a2:71:cf:55:72:40:02:29:f6:64:a0:0a:a8:ba:89:8c:ab:f8:
         fd:d8:ae:ed:79:a6:8a:f0:9d:63:12:3b:cb:ca:65:94:19:85:
         d5:ed:8d:77:58:61:50:09:5a:80:d2:12:63:73:d9:b1:db:49:
         8b:04:3b:9c:d9:5f:69:14:70:42:96:52:ea:b1:8a:dd:ed:04:
         71:37:3f:cd:5d:1f:c8:4e:fd:7e:4a:93:b4:07:dd:2e:09:99:
         bd:ab:50:65:00:4c:d0:ca:6d:97:80:70:68:8c:f0:db:f4:8f:
         ff:2d:41:d3:bb:eb:be:50:ba:78:a9:ad:0b:f9:1d:31:97:4a:
         89:b1:00:8b:a6:b2:72:c7:05:ae:a3:76:ff:84:45:ff:ca:b0:
         37:38:53:17:f2:31:de:f2:90:6e:3f:46:d9:b0:4c:e4:5a:4d:
         0e:e1:dd:9a:3c:00:70:64:3a:ac:fe:de:1f:a2:a8:c8:32:da:
         b6:45:59:f0:d4:ce:ce:a4:9b:31:9f:83:bb:a2:70:ff:e6:ff:
         c5:85:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:51:16 2024 by rpki-client on console-fra.rpki-client.org