Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33204460-4049-473a-b31e-32c26884ced7.roa
File:                     33204460-4049-473a-b31e-32c26884ced7.roa (raw, json)
Hash identifier:          lTnNEWZ3sACqNZcNyO6I5AIe2vP2W2x+QPRh5m7MNlc=
Subject key identifier:   82:93:1D:F6:D1:D2:A7:85:4E:1C:77:5B:47:8D:FC:42:65:C7:B7:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0BFFD920B1B8A8B922D39BAEC91B807336251138
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33204460-4049-473a-b31e-32c26884ced7.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.157.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ff:d9:20:b1:b8:a8:b9:22:d3:9b:ae:c9:1b:80:73:36:25:11:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=c3bfbb88023431329dac862aa4d9451ab6aabdb3319bcbc1edd40b087bbb9944, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:95:92:58:ca:cc:64:84:88:c7:48:ca:1a:
                    44:11:a1:ea:16:f9:67:26:d4:88:7d:97:a1:f8:f7:
                    0f:96:5d:6a:d5:b1:24:48:ad:2c:f8:d2:f1:95:d0:
                    8e:c1:da:d9:28:9a:ea:95:39:cf:bc:b4:34:8f:72:
                    57:cf:3f:75:e5:4d:bf:f2:83:c3:33:15:d4:0c:35:
                    c7:66:5f:02:03:3c:c2:c4:38:5b:66:bb:87:ef:40:
                    32:ff:0e:0f:ee:fa:b2:68:b5:ba:a1:51:fc:68:95:
                    54:58:c1:dc:d0:e4:fc:48:74:0a:bb:a3:0b:ff:ca:
                    70:08:91:c5:0f:22:0c:35:29:53:7f:ab:41:f8:f7:
                    94:f5:c0:58:16:c6:21:9d:40:81:1a:e5:c6:2e:62:
                    13:c8:38:eb:85:31:c8:2d:5c:1b:51:a5:43:01:6a:
                    32:73:a1:5e:bd:d4:1b:d4:70:16:d0:45:ee:5c:a6:
                    20:f0:7c:c3:9c:85:7b:53:f8:63:fa:3a:a9:2c:67:
                    34:a4:4e:27:0b:b4:e7:a2:24:9b:48:5f:7b:b3:7f:
                    3f:9b:fb:1d:c2:e4:d1:29:be:07:bc:8e:ee:e3:de:
                    65:78:45:3b:e5:0e:f3:2b:1d:ad:b8:35:ba:2a:c9:
                    dc:75:36:61:5e:0a:d1:4a:94:e3:f0:8c:63:76:88:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:93:1D:F6:D1:D2:A7:85:4E:1C:77:5B:47:8D:FC:42:65:C7:B7:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33204460-4049-473a-b31e-32c26884ced7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:e7:e4:30:fd:52:1a:b4:85:8d:bb:71:5d:fc:50:97:e2:
         2d:b4:4b:03:14:d6:96:00:b1:84:c9:5e:54:2f:7b:7e:58:f2:
         84:01:3d:e6:a7:56:2d:f8:a7:82:37:d3:b7:9b:1d:1d:11:f5:
         8a:ad:e7:68:d3:c8:4c:36:7c:5b:82:3c:3c:55:97:2b:1c:10:
         48:80:2f:d8:5b:ea:00:f6:95:bb:df:11:8c:db:5c:8f:63:38:
         4f:bd:62:da:40:c2:b1:af:fe:95:02:04:43:57:42:a1:59:eb:
         5a:03:c8:6c:42:d7:b1:00:d2:f5:90:dd:31:a5:fe:31:db:be:
         b1:bf:f1:7c:da:58:84:68:23:b4:c1:e0:f1:cd:ee:c5:5f:41:
         28:c1:36:5e:0b:3d:02:89:1b:32:b8:f0:52:ba:e8:b9:cd:85:
         07:7b:93:51:5a:4f:8d:0e:97:36:47:83:b9:25:75:98:73:c3:
         33:9e:55:f5:e4:40:3c:27:95:0f:59:2e:d0:54:d5:ff:1c:b1:
         6b:50:16:a0:a8:5c:a4:71:41:f6:7a:dd:f1:ab:05:4e:ce:64:
         f9:79:18:b4:0d:60:26:58:3a:b5:26:d6:43:19:fe:0e:b6:96:
         8f:0a:64:30:46:92:8e:ad:86:6c:d9:37:f9:28:0a:23:7c:94:
         63:f9:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:28 2024 by rpki-client on console-ams.rpki-client.org