Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cce37b2-fa68-4fd3-9bc3-efe0a16090ea.roa
File:                     2cce37b2-fa68-4fd3-9bc3-efe0a16090ea.roa (raw, json)
Hash identifier:          7MvPZ2n8yPGTGFs98QyrF+z4vvr26aEbLtqRYwqdMXY=
Subject key identifier:   52:E2:48:63:35:69:59:67:5B:E9:58:EC:9F:16:41:DF:02:26:69:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       597B1B04522865624DE25347135177FFCDEE91EC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cce37b2-fa68-4fd3-9bc3-efe0a16090ea.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.117.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7b:1b:04:52:28:65:62:4d:e2:53:47:13:51:77:ff:cd:ee:91:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=dc1bcfe5410943d0e570cb9761fbf67ecf09434c44db6296af22f1ff7627d783, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:d2:0b:30:61:6c:b8:99:c6:44:f6:6b:76:
                    19:a9:eb:1d:f9:bc:44:8f:48:24:d4:c0:86:b8:66:
                    b0:5d:30:bc:97:63:34:36:d6:95:d5:fb:a3:40:f6:
                    c8:14:ed:3a:71:a9:63:fd:ec:30:0c:74:2d:95:5d:
                    f7:14:22:ef:41:20:65:94:16:ea:c0:51:7b:3c:70:
                    aa:79:24:87:b2:08:3f:57:bd:bf:6a:6f:26:be:ec:
                    48:a3:12:f6:a3:b1:64:cd:00:d9:ab:74:69:d7:ae:
                    76:8b:fb:71:79:51:16:59:85:d9:99:7d:d6:68:4b:
                    e0:84:0d:af:fa:d8:4c:eb:8a:1b:3f:79:4b:89:ad:
                    ef:1d:20:09:61:63:73:55:82:2c:75:c0:4c:61:d6:
                    46:c8:79:ce:f0:1a:dd:f4:38:c1:8f:15:0f:58:3c:
                    73:51:63:a3:bd:26:7a:b4:f5:55:72:0d:3f:1e:a5:
                    0b:9c:0d:09:a5:ed:05:7a:a9:bf:da:8e:30:60:b0:
                    4a:aa:67:ea:11:fc:04:20:8e:e4:fa:2a:4d:4b:34:
                    64:bb:a9:21:43:af:3d:14:6f:a1:5e:84:ff:d7:37:
                    40:4a:77:c6:49:ac:ed:4b:80:8d:0c:3b:b3:b5:39:
                    d4:36:39:9c:38:8e:e3:2f:ae:c6:c5:da:73:5b:dd:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E2:48:63:35:69:59:67:5B:E9:58:EC:9F:16:41:DF:02:26:69:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cce37b2-fa68-4fd3-9bc3-efe0a16090ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.117.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:77:67:c5:76:a8:bc:62:45:c5:74:b7:44:7a:28:bd:22:0e:
         a9:19:0e:c6:b5:17:d2:05:77:40:fe:4c:4b:f6:59:c9:09:9a:
         aa:8a:80:0b:24:79:55:94:1e:c7:ff:16:f0:ff:98:a3:f4:41:
         90:79:d0:fd:a3:f7:c0:6f:c2:ea:e5:85:90:d9:dc:85:7d:c1:
         3b:da:06:ef:de:16:c0:5d:d4:52:d0:59:52:41:57:0b:4c:99:
         19:90:0b:d2:54:52:7f:3b:9b:02:02:02:10:e4:2c:99:54:28:
         fb:45:d8:ce:3a:73:7f:f7:cc:8f:4f:14:8d:58:84:76:ab:b2:
         59:94:52:f9:9f:a5:5e:75:59:3f:f6:25:5d:40:31:3e:58:6c:
         bd:c4:a0:34:fb:6d:33:c1:50:42:64:f0:8f:89:e0:9b:86:8d:
         7f:7b:22:b4:aa:73:d4:4e:0b:0a:5c:d2:e4:8e:af:36:36:7c:
         8e:e9:51:42:e9:d3:ed:a8:65:ba:3d:b0:7d:e7:20:e2:3d:91:
         26:8b:78:79:e7:b7:30:e9:3f:c8:11:08:06:f1:21:c8:82:86:
         b3:c8:06:82:29:c3:1f:f2:ab:0a:fb:57:c8:54:47:16:c4:8c:
         27:00:60:ec:ce:c6:0b:d1:45:43:3f:91:3c:27:da:24:ef:c2:
         e2:a5:d4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:26 2024 by rpki-client on console-ams.rpki-client.org