Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3140b59c-e29d-4b8a-8974-b6c470960f1b.roa
File:                     3140b59c-e29d-4b8a-8974-b6c470960f1b.roa (raw, json)
Hash identifier:          HKzXRsxHw/A9MIIOaHzRVRhIsSncvgq3sd4SZRvYsIo=
Subject key identifier:   59:6F:50:FC:6F:00:CA:1A:8A:D9:86:F0:C6:88:1F:E8:66:86:93:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41B0C4001F51C3B08DB46E95DA2CE273FA9B20B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3140b59c-e29d-4b8a-8974-b6c470960f1b.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.115.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b0:c4:00:1f:51:c3:b0:8d:b4:6e:95:da:2c:e2:73:fa:9b:20:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=348499365cfd9d75d361659091e7f3b5a6ce155b58a333d901853aee00827ccb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:83:6c:6d:5d:c8:85:ee:38:c2:35:66:a6:
                    98:b1:bb:25:a2:69:f4:4f:74:ab:23:fb:d4:00:74:
                    6d:b3:9f:dd:c6:c4:c3:f7:28:c6:82:72:a4:c0:d0:
                    42:cc:91:0e:e1:bc:5b:0c:bf:de:98:de:e6:87:8c:
                    34:5f:6b:91:6b:22:34:f4:9d:68:6e:be:ad:31:35:
                    16:b6:d9:a4:21:ba:49:e3:12:44:ff:76:93:ea:ea:
                    e1:b7:b0:dd:16:40:7f:f4:4d:a5:46:9c:74:02:da:
                    68:c4:05:04:25:6f:ee:68:9c:ac:d9:e7:44:58:c5:
                    22:7f:41:05:f4:0c:f2:ff:8b:80:6c:26:05:18:e6:
                    0b:68:ef:27:e1:a8:da:5c:dd:d7:44:5c:74:c8:19:
                    a6:0b:a2:e7:3e:f2:cf:05:32:d8:8e:d1:21:86:ed:
                    0f:0a:d5:33:d3:60:b8:55:5a:d4:ae:d1:35:7d:7e:
                    ca:a8:4f:5e:60:3e:be:e3:37:42:73:47:24:f2:28:
                    af:57:57:16:1b:e1:e8:e1:f1:9f:a5:bb:a6:30:e1:
                    eb:0c:23:a2:7a:65:e6:4a:4a:77:5a:58:c6:0d:ba:
                    f8:ff:ca:58:2c:77:32:24:42:ae:35:bc:5b:d3:47:
                    91:e7:2e:48:d7:40:47:2a:17:1d:dd:38:92:50:7e:
                    83:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6F:50:FC:6F:00:CA:1A:8A:D9:86:F0:C6:88:1F:E8:66:86:93:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3140b59c-e29d-4b8a-8974-b6c470960f1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d5:e8:94:c8:32:2b:c1:3f:8a:5a:6a:a7:db:7f:30:c7:da:2e:
         b2:ca:6b:24:2b:73:fc:70:ae:32:27:d4:b0:85:01:d0:7c:ea:
         83:e7:3c:3b:45:60:0a:b9:00:b7:fa:06:ea:17:26:a5:71:63:
         cb:0b:52:fe:c1:c5:0b:e1:ca:07:27:44:66:29:a3:bf:80:44:
         87:78:66:30:12:74:66:4d:d2:15:82:ba:d9:d3:84:fe:5c:61:
         1c:dd:17:0d:46:71:97:2d:13:1a:76:c1:d0:47:35:4f:1e:c6:
         e4:02:c6:6d:36:ae:8e:f1:89:71:df:20:17:49:2f:a9:4e:56:
         00:d0:7c:f8:55:6a:65:9d:04:ec:5b:d6:94:d5:03:1e:5a:01:
         a2:22:76:03:6f:25:5a:3b:45:5a:64:09:a2:61:f7:57:e2:f9:
         d8:45:98:c7:39:07:fa:e7:e2:f4:28:1f:e9:61:06:28:bc:fe:
         82:68:a1:ae:cd:a1:22:b2:98:aa:ac:4a:0f:7b:af:a7:85:79:
         a2:bc:52:ab:25:1e:8d:cb:86:a3:66:48:88:83:95:b9:d8:c8:
         a7:dc:c6:39:05:89:dc:b8:3e:42:8a:97:31:14:61:34:66:03:
         25:a5:6c:92:f7:b5:20:c7:b6:70:2a:15:8f:b4:4c:f5:5d:76:
         8a:5d:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:53 2024 by rpki-client on console-ams.rpki-client.org