Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cfaf610-9856-4685-bd68-affb766bc2be.roa
File:                     0cfaf610-9856-4685-bd68-affb766bc2be.roa (raw, json)
Hash identifier:          VIkxtV4wFY2uYp1rSsT2EPbD1pc0Gi3db02hb+zJJYo=
Subject key identifier:   C7:9F:F1:1F:5C:30:E2:FA:05:2B:D5:8A:BB:ED:8C:5B:6A:4D:9C:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F346CF0E56E0A636ED35E888678692C1363C19E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cfaf610-9856-4685-bd68-affb766bc2be.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.107.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:34:6c:f0:e5:6e:0a:63:6e:d3:5e:88:86:78:69:2c:13:63:c1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=ab2509f1c34c1e3d869e5bb421c5da1ccf9cd3713e4a331f0e460bf4800a9d74, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:ec:04:30:99:d6:7d:7b:f6:e0:9b:27:b9:
                    92:10:b1:70:ac:72:64:5d:19:73:bd:2e:96:5f:b9:
                    1c:31:43:74:56:a9:95:7c:0b:bf:1f:6a:05:ea:86:
                    e0:43:6b:ec:bb:d6:d6:e9:56:e8:c6:20:63:f8:4c:
                    23:4e:0a:ca:af:b5:e0:34:90:e6:1a:b0:17:38:a9:
                    35:4f:16:c3:9a:1f:f4:4a:e7:bb:8b:e1:09:f9:84:
                    af:95:0b:5a:5a:e3:40:db:01:68:c5:3e:1d:e9:2a:
                    d0:3d:28:7b:91:b4:1a:9a:e7:a2:22:91:4d:eb:5b:
                    3c:d9:10:b0:4e:7d:db:03:85:be:47:91:63:59:fc:
                    23:49:2d:b3:cb:44:5e:71:50:47:8e:e8:66:d0:76:
                    3a:0e:e0:90:d5:48:bd:b9:df:b7:b0:03:74:0f:8f:
                    ba:ce:69:98:ba:7f:8f:f9:b8:cf:2a:38:02:83:f7:
                    c5:46:14:a8:51:ff:2f:a3:26:34:38:fb:57:df:86:
                    88:c4:69:c1:0d:d3:53:9d:1c:e9:ce:c4:26:f6:6a:
                    09:26:c1:ec:36:5f:fe:33:27:19:ac:9c:e1:6b:09:
                    ca:74:df:df:92:00:ff:81:25:e4:06:61:fb:8c:28:
                    d5:f2:e8:26:40:68:d6:b9:01:41:fe:31:a6:7d:bd:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9F:F1:1F:5C:30:E2:FA:05:2B:D5:8A:BB:ED:8C:5B:6A:4D:9C:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cfaf610-9856-4685-bd68-affb766bc2be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.107.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:40:2b:40:0d:18:d8:66:75:ea:7f:63:27:a8:b4:40:ff:92:
         92:b7:73:18:a1:83:b6:c4:19:ce:e3:30:f9:a6:a7:14:0f:4f:
         99:a3:9e:a4:87:d6:95:d1:2e:8b:a3:3b:29:af:10:cd:e7:33:
         cd:37:25:a2:16:4c:1e:d1:40:09:29:ac:46:47:ea:0a:3c:ab:
         40:5a:21:11:d7:94:d6:2b:d4:4e:bf:71:6b:b1:72:e6:64:ae:
         00:31:cb:64:cd:fa:b3:ae:7d:13:34:27:09:e5:c5:18:7f:74:
         51:8c:ce:f0:b7:23:f6:d5:03:94:ba:ff:58:6d:e7:6a:df:f1:
         43:d8:b9:ce:f2:17:59:88:27:28:75:96:3f:db:ee:02:52:a9:
         b6:6e:e6:46:b1:49:2c:75:d1:5f:3e:f7:e7:79:c2:42:a2:ca:
         14:c1:73:18:80:b7:37:dc:08:89:13:3f:03:86:cd:21:62:33:
         ee:2c:09:02:0d:a2:0d:f5:df:5b:be:c4:aa:dd:37:4d:60:31:
         ef:5e:b3:ad:9a:e2:2b:32:33:0b:3b:a2:32:09:d8:9c:8c:9a:
         4a:1b:4a:6c:f5:a0:a2:6b:cf:f2:35:66:21:c7:b7:e1:0e:69:
         bb:ab:5e:dc:c5:52:a4:f7:76:1d:32:f9:f4:c9:33:6f:f5:69:
         bf:a0:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:17 2024 by rpki-client on console-ams.rpki-client.org