Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ff46bc4-0e3c-4988-8235-09fb526ac293.roa
File:                     0ff46bc4-0e3c-4988-8235-09fb526ac293.roa (raw, json)
Hash identifier:          EpPYwIPVY9v3HjSeCnzd1CoKV1M1IDBmzPoRvBpucLI=
Subject key identifier:   45:EC:C8:69:98:71:A3:5C:99:58:7C:4F:BF:DE:C3:DD:D9:D0:E0:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38D48952CB278ED0C155B5834D66CC2AC2383F1B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ff46bc4-0e3c-4988-8235-09fb526ac293.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.242.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d4:89:52:cb:27:8e:d0:c1:55:b5:83:4d:66:cc:2a:c2:38:3f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=9935a54b61ea640d539462bfeccc69efc7380ee588e9636a1e15c0380a45c4b4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:15:06:1c:b1:08:bc:18:5c:d0:af:4a:67:2f:
                    90:ad:ac:d6:3c:e9:72:24:d2:e8:d8:22:43:aa:23:
                    93:c7:9a:0d:a1:24:eb:e1:35:0c:38:dc:c2:9e:c5:
                    9a:07:d0:02:ea:33:de:f4:53:d2:c6:15:33:64:24:
                    8b:08:ed:47:ff:cc:87:2c:50:23:21:d3:f3:33:1e:
                    2d:ec:7c:38:4b:6f:72:73:f3:be:c2:b7:7b:a8:8c:
                    38:76:c7:e2:47:51:c1:a1:7b:17:52:21:c6:b1:2a:
                    f5:5c:73:1b:e7:fc:04:ae:99:fe:2c:2b:aa:52:c0:
                    ee:a8:9e:58:36:ca:60:f7:e0:4f:86:57:f1:44:59:
                    cd:ac:a1:9d:19:84:3a:8c:26:a3:62:e5:a3:66:6f:
                    3b:9a:cd:72:82:94:27:04:24:3e:68:f4:30:da:f4:
                    3f:e0:27:9f:6e:4b:79:13:bf:a0:bb:89:19:3f:54:
                    57:12:71:8f:49:32:ec:12:a7:dc:31:01:17:a1:6d:
                    58:40:c0:63:b3:11:a8:c3:5a:71:08:3a:ca:73:68:
                    e1:cb:89:81:7c:e1:2c:29:4d:31:5b:dd:07:f9:0a:
                    32:34:ae:4d:65:0a:ac:aa:c9:e7:fe:9e:78:46:0e:
                    8d:95:4b:5b:1c:bf:7e:e5:1a:96:af:9f:5a:77:1d:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EC:C8:69:98:71:A3:5C:99:58:7C:4F:BF:DE:C3:DD:D9:D0:E0:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ff46bc4-0e3c-4988-8235-09fb526ac293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1b:84:00:63:1f:db:0e:d8:36:51:17:c4:d0:08:4d:4d:43:06:
         c6:7e:1a:1a:11:b0:79:ea:1e:d0:29:34:cb:9f:2d:a2:32:68:
         54:8c:f3:f6:df:24:1d:62:cc:27:eb:06:90:e5:76:b6:a2:94:
         9a:6f:c0:63:7e:66:10:cb:bf:38:18:71:a6:cc:59:fc:6c:23:
         9b:b7:9c:9a:bf:88:15:ef:49:ce:0f:a8:26:1e:13:e6:41:4a:
         0e:f7:55:3f:c2:08:9f:01:57:86:3b:51:37:df:59:21:bf:a3:
         aa:38:00:ea:44:fb:a3:8a:78:a9:e2:83:f3:e8:12:15:78:aa:
         d9:91:c2:26:48:65:7f:26:58:cb:f9:20:36:8e:2d:bd:09:cb:
         99:e5:5d:bd:98:71:a8:05:f3:be:c3:f5:1e:b1:bd:55:55:22:
         8a:e9:ae:7b:f7:ec:50:79:41:a7:01:f6:16:32:c5:d0:67:98:
         1e:5e:c6:e6:3b:13:40:e5:38:fc:ea:81:da:6c:1e:17:58:ca:
         22:17:b5:8c:55:36:c1:9f:77:71:f0:68:51:90:70:aa:1b:08:
         0b:47:58:73:eb:7f:a8:3d:9a:7c:52:d2:6e:a4:19:00:dd:e4:
         ea:aa:ce:f2:e0:46:c2:a6:ec:9b:8c:6d:ae:f8:dc:b2:79:61:
         97:68:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:42 2024 by rpki-client on console-fra.rpki-client.org