Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3732605d-e89e-4ee3-b46d-7df664583874.roa
File:                     3732605d-e89e-4ee3-b46d-7df664583874.roa (raw, json)
Hash identifier:          FjJzAhZiYBNarV5WeHjY4iZv4ozEBJgZZ/q614mZcQ8=
Subject key identifier:   DA:12:BF:D4:C1:3F:23:1A:A6:C1:1A:82:98:20:23:BD:34:6F:BA:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5133F3E27B03AC56EFE7B4C82BE51CC3B2596A0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3732605d-e89e-4ee3-b46d-7df664583874.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.130.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:33:f3:e2:7b:03:ac:56:ef:e7:b4:c8:2b:e5:1c:c3:b2:59:6a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=903ffd011ef415ad85829d1864bbbe0cbc6785dcdcb12ebc9e8728059d49aa06, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:10:f1:8c:b8:aa:b8:18:e3:9a:b2:db:bc:
                    5f:c5:3c:a6:c5:79:9a:d2:9c:a9:c2:32:a8:17:c1:
                    9d:2c:7a:44:9e:31:d5:3b:21:fa:40:c4:55:a8:69:
                    b7:64:88:51:9c:69:77:21:cb:71:50:4d:f6:db:66:
                    ee:b3:49:fa:54:59:91:18:e8:fd:36:4b:98:6d:d9:
                    38:c5:db:f2:35:8e:1d:27:a5:f3:4b:22:44:5a:aa:
                    c8:1d:bc:68:09:f4:59:eb:cf:c3:8d:d7:a3:2b:2b:
                    6f:69:cc:30:9d:ce:59:42:20:90:e1:ba:e1:84:5e:
                    dd:8e:07:cc:07:f4:3d:a7:5a:25:ba:80:85:70:0b:
                    dd:95:8e:49:85:7f:55:f4:f6:08:7e:84:ba:b9:a6:
                    f7:f5:02:94:b4:dc:ee:8e:45:bb:ec:83:81:fc:15:
                    e1:ba:78:b6:90:20:e5:84:23:eb:d5:41:d2:c0:ab:
                    b5:88:23:e0:a4:84:4a:7e:af:0c:65:f1:94:b6:8d:
                    6a:ef:b0:94:de:67:4a:db:10:fc:48:e4:b8:69:34:
                    b7:f1:29:af:94:32:db:20:dc:2d:e8:cd:7d:8b:ce:
                    f3:85:84:be:b9:c0:81:8b:fa:06:e3:59:3c:0e:ee:
                    3d:9e:67:4b:2b:bd:82:02:01:41:6e:7f:df:76:c6:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:12:BF:D4:C1:3F:23:1A:A6:C1:1A:82:98:20:23:BD:34:6F:BA:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3732605d-e89e-4ee3-b46d-7df664583874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:a8:36:21:dc:69:f9:d1:4d:16:bb:69:12:ba:19:77:80:
         96:24:15:9d:a6:f2:81:67:15:d9:41:83:12:c7:c7:3c:86:a2:
         9d:cb:1e:6b:5b:58:80:90:54:08:a9:ab:21:73:c9:2b:60:42:
         b6:52:8e:68:38:db:1b:1b:7c:24:e4:ab:88:53:29:e5:4d:2b:
         b0:1d:79:cf:e2:38:e2:6a:cd:20:8c:dd:75:ab:7c:67:3d:15:
         10:55:9e:cb:a2:8d:61:52:d8:fc:09:23:83:0b:4b:8e:c9:59:
         f4:37:da:b0:54:b0:9f:57:46:27:77:55:47:c9:69:eb:8b:1b:
         06:82:a3:7c:2b:f0:cf:35:e6:d0:b3:83:72:94:94:00:22:5f:
         44:fb:24:e2:14:35:eb:49:4c:b2:bf:56:e5:73:9c:26:ac:86:
         e1:4b:79:2e:0b:3b:21:b4:6b:77:9d:f8:b5:4c:b7:c9:ad:94:
         91:fe:65:dd:c2:c1:5f:47:17:c9:22:0c:07:a8:a8:95:10:34:
         68:2b:e9:36:4a:41:b0:51:ec:82:a1:fd:9c:4c:66:64:8c:60:
         ae:b8:e3:cc:a5:fa:0c:b5:14:0d:47:fa:b8:56:d4:20:73:bb:
         69:94:8d:5a:e4:d7:a6:f8:59:ab:78:33:1d:48:ba:70:4e:fe:
         bf:64:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:30 2024 by rpki-client on console-fra.rpki-client.org