Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386bdeca-bc48-4999-9767-c693820020ca.roa
File:                     386bdeca-bc48-4999-9767-c693820020ca.roa (raw, json)
Hash identifier:          i2MocY6LCWGYOfRREVgaDU3dGswCcgpU3BF8FHJGynw=
Subject key identifier:   D1:B7:84:92:E1:DB:43:03:53:61:A6:18:5E:FF:63:07:AF:E7:06:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3DFE0DA7B30723761D29AC3014D4136D40DEE8CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386bdeca-bc48-4999-9767-c693820020ca.roa
Signing time:             Tue 17 Sep 2024 00:00:00 +0000
ROA not before:           Tue 17 Sep 2024 00:00:00 +0000
ROA not after:            Tue 22 Oct 2024 23:59:59 +0000
asID:                     6167
IP address blocks:        139.56.12.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fe:0d:a7:b3:07:23:76:1d:29:ac:30:14:d4:13:6d:40:de:e8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 17 00:00:00 2024 GMT
            Not After : Oct 22 23:59:59 2024 GMT
        Subject: serialNumber=34cb531133d0d5fb6ac944cf9bb5efda03c37600621a0e95582672c451eb3229, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:aa:49:59:a5:b2:e3:be:64:c9:54:a4:94:a2:
                    59:ca:59:ec:eb:38:9d:78:9b:7c:a8:fd:68:a3:fe:
                    0b:e4:c7:f9:f0:df:2d:e6:01:f7:02:e2:2e:dd:cd:
                    0e:55:00:e2:cb:fd:b4:17:61:1f:45:6f:2a:b8:10:
                    1b:4a:12:d3:12:c7:bc:a1:9c:2d:57:2c:ee:b1:b2:
                    a7:b1:69:13:6b:e6:b3:1f:1f:c4:64:d7:7b:6b:d1:
                    0a:f9:8b:23:12:bb:ff:61:93:68:98:92:42:5a:6b:
                    4f:c4:99:4e:02:82:93:7a:0d:6c:50:1a:c5:fc:5d:
                    e7:6e:c4:aa:ab:55:bc:0e:b4:ea:17:f4:7d:d8:a3:
                    4d:ea:20:85:9a:d6:41:5f:d7:ce:6e:f1:6b:73:86:
                    87:54:56:14:ce:d8:96:f3:95:b9:bb:37:5a:9d:28:
                    01:52:56:cd:2d:e4:30:a5:e7:cd:f7:ea:07:0d:7a:
                    89:aa:c3:7e:e4:c3:d1:75:db:54:4f:5b:34:5b:82:
                    a6:10:c7:98:b0:75:ff:73:21:5d:76:8e:b8:02:cc:
                    11:7c:87:10:9e:bb:97:5d:5a:bf:ec:67:a1:4e:09:
                    b5:ee:a0:fb:5a:04:5a:62:e9:28:81:4e:b9:ca:fa:
                    86:d6:e8:95:d9:e0:a4:24:7e:d3:95:d8:8b:67:49:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B7:84:92:E1:DB:43:03:53:61:A6:18:5E:FF:63:07:AF:E7:06:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386bdeca-bc48-4999-9767-c693820020ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:98:bd:df:83:97:b3:b3:c1:cf:2e:f8:3f:d0:b1:cc:ab:
         f7:e3:29:29:d4:32:47:e2:3e:f8:97:b3:39:88:24:f4:fd:52:
         c5:44:c0:17:70:78:21:3e:1e:f6:4f:b4:22:59:cf:2d:50:c7:
         9b:9b:cb:17:f9:63:90:75:e8:ea:ef:a8:43:f3:01:75:04:22:
         2a:2d:3f:31:ab:e6:04:e2:c2:ae:d3:2a:48:f0:49:d2:21:47:
         51:05:4c:41:35:a5:29:25:c9:9e:80:cd:f2:96:31:52:3f:99:
         1d:cf:d1:c5:ba:95:4c:72:d8:bd:4d:fb:f0:ec:d0:82:76:46:
         d1:74:7d:c5:83:d7:e6:55:ca:37:62:fe:c9:71:9f:11:64:73:
         50:97:db:4f:08:6e:53:63:d6:89:9d:74:c3:2a:e0:b4:00:6f:
         d1:75:d4:d6:5a:67:ab:3a:1a:ce:db:84:5a:ee:2d:98:e4:e0:
         d6:2e:83:e4:73:2a:d7:c2:f7:12:17:d2:0e:47:52:71:5d:c5:
         b2:8e:68:5b:53:c8:ff:3d:b3:c7:ac:3d:f3:db:b6:30:50:af:
         a8:58:c4:1e:39:66:83:2e:a4:58:f8:3d:f5:b9:35:fa:5a:b5:
         a0:4c:64:05:d6:33:71:e1:42:96:0d:5c:0d:1b:7f:98:75:11:
         15:2b:a9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 01:29:09 2024 by rpki-client on console-fra.rpki-client.org