Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa
File:                     0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa (raw, json)
Hash identifier:          RMZiKd2Q3/Z8TFSn8Y8B0uD/POpl076jmWOHENCy7oE=
Subject key identifier:   41:1B:95:7B:10:0B:54:25:67:2F:95:91:F9:25:AF:EC:CE:A6:E8:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E1B5957C056608241A05FDEC999824174262267
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.116.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1b:59:57:c0:56:60:82:41:a0:5f:de:c9:99:82:41:74:26:22:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=3b84125ee76ad25e4193f0c8fc614954a74fafe37b56514f44979b96b1d02d0f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:46:d2:bd:32:4c:34:6e:da:10:bc:0c:e3:
                    18:f1:6a:30:a2:89:18:1c:73:0a:8f:6b:88:4a:e4:
                    a1:1d:65:c7:02:69:84:8e:82:b3:7e:10:cb:b3:7b:
                    54:fb:c8:98:8a:ec:27:e9:a5:ad:23:04:45:fb:69:
                    c9:d5:87:ad:4b:ae:cc:42:68:f4:3a:d9:ee:e1:bc:
                    8d:af:52:9c:46:03:fb:0a:b0:47:ca:5a:9f:cf:44:
                    ba:41:92:4b:ba:23:aa:e7:58:7e:08:ce:b0:33:4b:
                    c1:49:f0:93:e3:2c:e6:7a:b3:b3:6e:2b:26:a1:41:
                    3d:8c:0a:8e:c0:4b:69:9b:52:36:ac:bc:85:41:30:
                    e3:96:58:39:48:39:10:52:95:c1:83:fb:4b:11:59:
                    3b:57:a5:76:65:0a:07:31:5f:b3:2a:ae:b4:b9:1b:
                    b7:1c:02:94:52:ca:27:c7:9d:cb:7f:2d:fb:f7:d8:
                    e8:7b:a0:bb:88:25:3e:0d:bc:94:4b:3a:d5:ad:23:
                    1d:a4:7b:55:99:b1:d5:7d:bf:02:7f:d1:21:78:8a:
                    91:e6:11:57:de:ac:6d:97:96:18:f2:ca:01:74:c8:
                    00:a6:13:b8:19:72:0d:37:83:85:5e:ce:d4:71:b0:
                    45:03:48:1b:42:16:44:ac:ca:2d:e8:f5:78:01:dc:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1B:95:7B:10:0B:54:25:67:2F:95:91:F9:25:AF:EC:CE:A6:E8:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.116.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:ef:ed:7e:27:1d:dc:2c:8d:24:b9:fe:ef:df:24:36:14:af:
         f1:de:13:e9:82:1d:32:ae:9a:36:41:92:2a:3b:3d:f6:d4:88:
         0e:88:c7:7f:37:f0:ff:af:09:6f:9c:42:5c:1c:fd:c6:83:df:
         95:97:e2:ad:94:61:d6:c9:ff:58:9d:b3:10:63:2d:b1:7f:d7:
         ae:b7:58:58:3a:3f:6e:a7:d9:1f:8a:02:c6:43:f8:e5:ca:31:
         0f:26:3f:98:cb:ca:55:83:db:45:e4:33:d0:2c:99:5e:7b:4a:
         f3:9d:5b:6d:f8:02:b7:3f:e2:c3:2c:88:a4:a0:04:e1:17:db:
         5a:dd:ea:b9:2e:c0:33:19:35:da:e4:bc:d7:9a:d1:23:b3:a5:
         3f:99:39:24:ba:9d:48:c3:e7:e3:4d:76:fb:76:cb:cf:54:ea:
         13:66:b3:ec:4d:7a:69:bc:c9:92:3c:71:56:7e:b5:85:2a:5f:
         05:3c:92:d4:b5:5b:5b:17:28:b1:c0:d4:e7:c0:5d:61:7c:08:
         1f:f5:9f:89:5c:a6:da:96:1c:8c:41:eb:5f:01:2a:11:cf:cf:
         fc:e4:f1:cc:95:59:2b:a6:d1:de:d4:28:56:97:46:53:41:49:
         64:a6:6c:65:24:a4:31:bb:0f:8e:57:0c:99:ad:a4:c1:28:48:
         74:0a:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:40 2024 by rpki-client on console-ams.rpki-client.org