Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56751d2a-6ea9-4204-9ceb-822fd0ee0c8c.roa
File:                     56751d2a-6ea9-4204-9ceb-822fd0ee0c8c.roa (raw, json)
Hash identifier:          0qpJ0Mt4QJD6GNAElkwLHHzsbKxo+ximlUsRq+DiIHA=
Subject key identifier:   00:C6:66:4B:F4:53:58:C0:2C:65:78:29:7A:23:B8:59:E1:95:DD:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29B3A33B0B63006CB57EB5546282354F83B344FE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56751d2a-6ea9-4204-9ceb-822fd0ee0c8c.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        108.128.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b3:a3:3b:0b:63:00:6c:b5:7e:b5:54:62:82:35:4f:83:b3:44:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=93b807d0f148a2bbe71a64169661eaf19890bf073275fe664296053acd555cb2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:ee:62:6e:2c:03:db:c0:9e:73:16:25:87:
                    bb:2c:60:54:ac:c7:47:b6:73:6f:9a:c2:01:5b:c2:
                    be:33:b2:f5:7c:a9:53:ab:53:ad:13:c4:4b:af:d2:
                    0d:a4:2c:4b:e3:98:84:6a:ac:5b:59:57:2f:9c:af:
                    76:c0:de:c9:b1:f6:52:2a:aa:e7:46:b5:ae:4c:8a:
                    b4:75:53:fa:e6:5b:ac:55:a3:28:7f:15:1e:02:fb:
                    28:85:e9:d6:2e:f4:75:d1:43:f9:98:7f:96:9d:ca:
                    6d:fb:69:1b:64:4a:b0:c7:b0:4d:e9:f4:75:d0:8c:
                    0f:9e:af:96:58:65:39:b1:a1:96:b2:cc:a2:b1:57:
                    5e:14:b0:77:2a:65:d6:9b:26:86:c4:cd:8a:e6:76:
                    45:bd:d2:14:db:33:d2:26:5b:e0:16:f3:e3:d1:4b:
                    99:cb:a2:a4:b3:8f:0d:ec:bd:8a:ac:70:1b:9a:f4:
                    3f:15:19:fe:49:af:e6:a4:33:a8:25:c5:d1:ed:b1:
                    cb:21:17:2c:da:b3:c8:76:d7:c0:d1:56:3e:b6:97:
                    f1:e3:9f:7f:b9:b8:cc:41:4b:96:fd:bf:b0:d3:68:
                    86:3e:1f:73:89:56:b3:35:15:63:04:a5:35:22:78:
                    6c:3c:40:22:26:42:f2:75:f8:09:7d:79:48:75:cf:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C6:66:4B:F4:53:58:C0:2C:65:78:29:7A:23:B8:59:E1:95:DD:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56751d2a-6ea9-4204-9ceb-822fd0ee0c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.128.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         07:ea:db:a6:23:92:bc:75:b4:0a:5e:57:06:09:b3:37:ce:8d:
         35:c8:43:70:87:d2:c6:0d:27:55:22:b9:16:14:0a:0b:f4:2b:
         7b:0f:93:26:cc:de:87:08:8d:e5:b3:44:d1:83:16:b3:28:39:
         81:fc:4a:a2:15:a7:fa:e7:2c:42:f4:34:18:47:ce:b0:e9:91:
         6f:33:f3:60:ae:cc:98:cb:e3:2f:2e:b7:72:6d:a7:11:28:ff:
         38:fe:e9:94:be:fe:0c:3d:48:69:69:16:1d:4d:fb:18:98:3a:
         8d:29:b1:9a:af:a7:9c:28:63:9c:74:fa:d6:a0:08:2b:b7:37:
         db:5f:97:7a:dd:fd:aa:13:cf:da:7b:a7:2a:7d:34:57:f4:b3:
         80:25:75:5e:82:81:90:f8:13:ef:3c:ff:34:c9:50:6b:4e:04:
         4b:6c:fe:d1:45:db:f0:ac:9c:a0:0c:d5:e1:7b:f3:9a:50:4f:
         59:34:c5:43:7b:2b:93:f5:32:d5:52:32:13:a0:93:14:9e:47:
         c2:96:bd:87:ad:c8:fb:92:c9:5f:ef:5d:14:f0:d4:be:89:08:
         eb:5e:5f:f7:1d:7d:80:00:d2:01:38:3a:fb:3f:e5:53:d3:85:
         9d:60:f1:91:14:53:e8:8b:43:a7:fb:a2:70:a4:d6:a4:24:53:
         be:08:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:01 2024 by rpki-client on console-fra.rpki-client.org