Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f720a3-3917-4f23-847a-2f3956010682.roa
File:                     54f720a3-3917-4f23-847a-2f3956010682.roa (raw, json)
Hash identifier:          RgSPuMiVyidzKVGiURUPtnjmjWSp2U79wUdyjQuLCMs=
Subject key identifier:   F8:AF:12:CE:7D:16:EA:C3:1C:12:B5:9C:0B:65:69:A3:C0:DC:39:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D4FC6D7EBF834AB6A50F194685486B829F58C2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f720a3-3917-4f23-847a-2f3956010682.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.241.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4f:c6:d7:eb:f8:34:ab:6a:50:f1:94:68:54:86:b8:29:f5:8c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=ebf52e5bf75682836c509767ff37bc9d311901f54383275d516af98ef525cf06, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:27:ba:92:54:ef:94:9c:6b:78:fa:07:68:
                    6c:a5:bf:28:06:72:45:1e:e7:65:df:a4:70:23:46:
                    d9:57:c3:e7:60:ee:12:06:c5:52:63:20:d7:d7:95:
                    bf:f4:ee:ea:e4:34:df:ba:83:a2:7e:7c:d0:18:99:
                    e4:a5:30:9a:01:b4:2a:35:39:f5:e5:b8:cd:06:6c:
                    bd:3e:f4:00:ab:84:3b:1b:25:b3:7d:8a:4d:ce:f0:
                    fd:9c:ea:bd:e0:be:ad:46:42:84:52:c7:09:79:ef:
                    e7:89:c0:19:c0:42:92:0c:1d:8b:ac:b6:22:08:2e:
                    42:7f:15:02:a0:f2:0b:6c:98:74:9a:d4:f5:f3:04:
                    ac:47:9c:80:86:58:d2:f7:7a:36:dc:0d:90:69:b5:
                    96:ee:db:a9:5e:36:1a:30:5f:d5:86:41:db:67:f3:
                    05:06:8e:e1:cf:f2:e0:60:c6:ee:58:bb:35:93:7b:
                    a4:de:68:ec:97:8c:6b:fc:80:9b:ef:83:1e:23:8d:
                    8a:fe:b2:bb:6e:c4:37:b1:71:c5:60:39:9f:ca:8b:
                    cc:e0:5c:61:a8:13:9c:0b:aa:f3:ad:b5:e1:d5:fc:
                    5c:0c:cb:3a:86:91:48:04:13:9f:73:2d:12:c8:b4:
                    8f:29:99:34:40:70:fd:e0:df:05:3c:7b:92:40:ce:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AF:12:CE:7D:16:EA:C3:1C:12:B5:9C:0B:65:69:A3:C0:DC:39:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f720a3-3917-4f23-847a-2f3956010682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ce:3d:c6:1d:04:d1:80:1b:b6:bb:53:63:80:4f:e6:be:1b:d2:
         2a:a6:9d:75:6c:d5:3a:60:b4:72:76:7f:46:c5:c9:a9:1d:db:
         a4:38:6c:41:94:7b:db:41:13:f0:4f:de:2c:66:32:39:4b:94:
         57:5a:34:28:c3:8b:c1:4a:0d:51:55:2f:5a:59:bc:f3:b6:89:
         ca:37:50:c8:80:f1:36:eb:47:9e:bc:22:56:d7:fe:8b:74:14:
         49:19:93:1e:bd:21:20:54:6d:72:cd:cd:82:59:0a:1a:c2:6d:
         b9:55:31:16:a6:9b:46:d2:e6:13:ed:48:fe:b7:25:b7:fb:c6:
         d8:88:eb:a8:17:53:a2:00:31:28:47:1f:47:13:a9:9d:4f:63:
         99:e1:8f:67:07:6e:3c:38:d5:ef:5b:7c:dd:99:80:22:87:31:
         88:4d:1f:d7:7c:b3:c6:f3:a6:d2:b4:cf:29:1a:05:17:22:45:
         b5:9f:52:de:23:b5:bf:90:a4:65:80:df:23:d1:18:fe:c5:e9:
         9a:99:d8:72:59:2f:42:3d:39:6e:b9:75:04:32:6c:22:36:85:
         17:8a:69:2d:e3:09:f8:c1:dc:11:ad:30:d1:fb:ab:bc:de:0c:
         2d:98:e8:4b:d7:bb:9d:b7:5f:75:18:65:43:78:11:66:1c:0b:
         a7:de:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:01 2024 by rpki-client on console-fra.rpki-client.org