Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15a122c4-488a-498d-b339-487a93248619.roa
File:                     15a122c4-488a-498d-b339-487a93248619.roa (raw, json)
Hash identifier:          Q0HDsWMFdSPx5qk1nfikquwW4y1QHG6lbHRSxj3DUKU=
Subject key identifier:   43:D5:10:BE:67:A1:99:09:D8:29:D8:4B:05:8F:B7:45:6D:61:79:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01B1D1E4EC4EE93A9C7EE43EC3E02FC7A42C92FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15a122c4-488a-498d-b339-487a93248619.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.114.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b1:d1:e4:ec:4e:e9:3a:9c:7e:e4:3e:c3:e0:2f:c7:a4:2c:92:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=e1a3d9b1f172859f105acab540898f1e0668cff51a63b199d99c2fc08f534387, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:a0:a0:f7:02:a3:3b:b7:26:6d:4f:96:c4:
                    6c:5d:b7:bf:71:40:fd:59:63:0f:11:2c:34:49:ad:
                    d9:de:34:fe:07:30:e4:58:89:5d:f4:17:f5:e9:58:
                    15:fd:c3:11:75:f9:7b:37:13:ae:76:40:69:41:51:
                    23:44:10:38:2c:9d:4d:85:29:0c:1e:58:f6:c5:26:
                    95:df:61:88:e0:7e:2a:e7:e6:52:2f:3b:b1:56:b0:
                    16:01:61:90:9b:0c:2d:7f:40:4c:dc:4a:b1:54:bf:
                    f5:72:61:ca:25:0d:56:50:a7:6c:ef:d1:a4:4b:bb:
                    9a:8b:81:26:e0:51:e2:5f:82:65:05:18:80:6f:43:
                    08:86:ca:15:fb:51:0f:1f:b8:d1:96:68:4f:d7:02:
                    8e:58:65:32:e1:4e:e9:64:83:bf:7a:05:0e:b4:76:
                    63:0e:15:ad:35:ac:d4:04:08:7d:60:d9:14:51:73:
                    b3:66:14:6f:12:71:6f:21:af:3d:ba:07:d8:af:8c:
                    12:62:8e:6b:5e:f7:cb:cd:49:75:d9:e3:c2:d0:f1:
                    b6:8c:38:e2:24:05:7b:e5:7d:43:0e:8c:df:1c:90:
                    84:d8:0c:d0:c7:e7:10:70:46:ae:76:38:a9:8e:1c:
                    7f:8e:5f:d3:c9:36:b7:c1:1d:c6:b7:2a:f7:18:d7:
                    93:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D5:10:BE:67:A1:99:09:D8:29:D8:4B:05:8F:B7:45:6D:61:79:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15a122c4-488a-498d-b339-487a93248619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.114.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:21:f2:b4:d1:eb:d3:38:5f:b5:0c:eb:54:39:a1:aa:b0:df:
         6d:29:09:82:c1:8b:10:cb:01:7a:9c:e6:44:fc:dc:b5:a6:a5:
         c9:62:53:d2:49:0e:ea:d3:19:6d:6d:c6:db:cb:43:5a:97:38:
         e8:e6:91:cd:90:0a:e8:7f:15:44:97:15:08:f3:73:32:6d:93:
         f5:14:d2:09:76:be:62:da:e2:42:71:16:f2:a9:12:3d:59:7e:
         96:67:b6:35:a6:15:dc:e3:9b:11:a9:16:c8:35:71:18:59:f9:
         bd:62:4a:0e:da:85:41:1c:05:39:95:a9:92:f6:0a:19:07:55:
         0f:9a:eb:8e:fc:1b:f9:6c:13:9c:48:a9:f4:e6:2a:40:3c:12:
         64:6b:ac:4e:0a:ec:a9:52:0c:3f:95:02:d5:c6:87:5f:e6:3c:
         0a:e7:d1:b9:b9:63:fe:4c:d9:b0:9d:0a:0b:46:b2:f8:d7:bc:
         d7:e0:c0:3f:7a:93:da:ea:9c:ba:68:52:ca:8d:1c:45:10:a5:
         c5:de:01:b4:8f:3f:dc:81:60:a5:4e:f5:31:c0:33:d0:7a:03:
         39:02:c7:02:6a:1c:08:9c:08:33:33:f7:47:7f:92:55:b5:66:
         b5:e7:b6:ac:4f:19:cf:96:65:e0:9f:04:20:3b:d1:e3:2a:0e:
         34:43:b8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:46 2024 by rpki-client on console-ams.rpki-client.org