Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001593bd-5759-498f-b9c2-6ed628b5888a.roa
File:                     001593bd-5759-498f-b9c2-6ed628b5888a.roa (raw, json)
Hash identifier:          nITSRxwP4tgHLc1i/JSsH/qEA4yQx1+3GtVsYIXu25Y=
Subject key identifier:   D9:4D:4E:81:15:68:E9:B5:5B:65:4E:F9:D7:A2:73:B3:DC:01:69:12
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6258E0F77F9A01BAC162600464E492CC105F1C2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001593bd-5759-498f-b9c2-6ed628b5888a.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.53.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:58:e0:f7:7f:9a:01:ba:c1:62:60:04:64:e4:92:cc:10:5f:1c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=4eda3db3c687f3d848e131e18dd20871fb5eaaa5479505ce6fb5f3c3d5c18d77, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:79:ea:db:9f:f7:e4:ac:fe:01:64:c6:5e:
                    2f:97:84:17:c5:52:ce:65:89:69:af:de:5c:54:a4:
                    04:f4:07:26:64:99:21:ac:59:ee:c7:87:37:d7:7c:
                    61:af:26:ae:21:56:3b:2c:75:48:9f:56:c9:2b:63:
                    ef:13:5e:a0:c6:5d:6c:da:53:26:b1:a3:b5:53:8f:
                    18:03:b8:7a:f6:78:cc:90:85:c8:dd:7d:26:c3:37:
                    3f:63:0c:e1:53:fe:07:85:e9:88:71:2c:98:05:c6:
                    74:21:7a:db:d6:91:71:be:10:43:7c:a6:ce:58:00:
                    27:c8:1d:90:a6:62:89:14:2b:47:d3:0b:49:f8:2b:
                    f1:67:b0:fc:4a:ed:43:0d:71:cc:de:f0:30:b7:73:
                    bc:53:d1:ff:be:99:f6:9f:c9:cd:f5:e7:db:47:ec:
                    0e:4a:fd:a1:e4:4c:c2:a7:a3:fa:48:87:60:8a:eb:
                    71:44:73:5f:8c:d7:9f:68:9e:3b:a6:b1:50:91:26:
                    a8:6c:6d:2f:7a:13:bd:aa:06:81:15:90:2d:c3:3b:
                    8a:99:45:0f:40:e7:b8:32:74:1a:f9:bb:d6:ad:39:
                    c4:68:e3:49:56:83:97:c2:1e:58:4e:c1:9c:4f:53:
                    0d:42:cd:2f:30:a4:b7:a3:36:84:45:96:61:e4:00:
                    9b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4D:4E:81:15:68:E9:B5:5B:65:4E:F9:D7:A2:73:B3:DC:01:69:12
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001593bd-5759-498f-b9c2-6ed628b5888a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c4:8b:96:99:90:67:45:1c:e0:20:26:e6:33:05:8a:2b:ea:be:
         38:b2:b2:74:69:1b:fa:6a:91:46:c7:b5:4d:05:a2:d0:c6:cc:
         7f:c7:4e:99:a8:d0:1e:6b:05:22:b2:62:11:24:64:54:9c:3a:
         5d:82:f2:85:4a:fc:25:b0:87:e4:ed:5e:eb:88:38:a2:a4:30:
         01:10:a6:c6:b5:20:ba:48:6e:a9:13:e8:83:6e:7b:51:82:4d:
         92:b1:1a:75:bd:3e:b8:ac:2c:2d:4c:ed:ef:3c:69:2e:0d:fb:
         f5:30:72:10:c5:5f:7a:d6:4b:99:b6:89:21:fb:1d:f2:33:3c:
         23:fc:ee:6c:23:8c:f8:1a:f0:46:f1:46:ea:0a:8d:f2:7a:3c:
         8a:21:ec:b2:31:42:6f:9e:bb:7d:94:59:ac:0d:56:38:ed:48:
         58:2c:1a:3c:c8:fc:4f:60:6d:0b:5c:0c:c0:5c:95:92:bd:eb:
         0d:ca:59:07:46:15:f0:ea:b6:54:0d:dc:6c:5e:05:ff:62:9e:
         d6:c1:20:d2:e5:98:d0:a2:2d:64:23:59:5d:a3:b2:f6:26:d0:
         3d:68:10:3d:81:79:75:9c:a9:8a:28:0b:1e:27:de:41:62:73:
         25:e1:d6:17:59:2e:4e:f6:82:be:41:ed:75:ae:9e:4d:f6:c3:
         e3:aa:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:37 2024 by rpki-client on console-fra.rpki-client.org