Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57dbd5cb-fd60-4a86-96c0-65cf159f0d04.roa
File:                     57dbd5cb-fd60-4a86-96c0-65cf159f0d04.roa (raw, json)
Hash identifier:          R5Ne4557Y4Df0VXXW9HNm4dpHNi6skXWNOZArVZNHk8=
Subject key identifier:   CC:9F:66:81:52:F1:26:CC:CD:CB:EF:58:9A:49:8F:9A:90:34:3B:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21E54F9C315E964CCA539AEF016C2CF417E92F96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57dbd5cb-fd60-4a86-96c0-65cf159f0d04.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.91.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e5:4f:9c:31:5e:96:4c:ca:53:9a:ef:01:6c:2c:f4:17:e9:2f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=b6b17b85a26cdc5bec0dd2267eacd43dde799cea1dcd44cbdeb209cdcd9aae5c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:02:63:27:88:04:58:4b:85:65:f0:8f:45:
                    08:c4:33:98:ef:ed:98:44:a0:f8:0e:29:d5:f6:08:
                    75:e4:de:70:79:48:86:fb:3d:9f:88:4a:11:80:b0:
                    e0:25:69:3d:7d:7d:12:86:07:f8:0f:eb:2c:6c:f5:
                    09:70:bc:99:82:75:85:6b:80:82:04:db:f0:fd:90:
                    4f:af:9e:06:d8:6b:07:6c:01:e7:16:21:af:f2:a9:
                    d5:09:6b:6f:a2:5c:6d:ce:c2:a4:9a:ee:27:4e:7b:
                    31:68:c0:42:ce:dc:6f:e2:99:e5:34:71:82:4a:a1:
                    c7:f1:81:ee:9a:8a:38:bd:46:c8:78:80:53:8b:f6:
                    a6:f0:03:e6:fd:b3:0d:c5:6c:da:be:be:9e:d6:b6:
                    9f:71:78:d2:d2:c2:65:f5:eb:17:9e:65:b9:8d:33:
                    f0:b3:78:9f:3d:4b:8a:84:a8:f4:6c:80:72:7a:f6:
                    9c:ea:67:12:67:71:03:91:e2:a3:f7:75:83:ec:76:
                    5d:39:fd:d5:ac:dd:eb:25:a6:f4:1b:10:64:a5:d4:
                    e4:08:d1:36:5a:38:f3:40:6f:13:d6:e3:74:ec:60:
                    80:d2:3f:69:a0:5a:0c:cc:03:54:c9:f4:9e:5c:8f:
                    de:4e:c0:91:8c:de:8f:65:61:e2:3d:af:a4:ba:98:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9F:66:81:52:F1:26:CC:CD:CB:EF:58:9A:49:8F:9A:90:34:3B:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57dbd5cb-fd60-4a86-96c0-65cf159f0d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:d1:3a:10:f1:06:fd:5a:e5:5c:cb:f5:69:c3:3a:a9:a4:be:
         bc:21:d4:14:8b:64:ef:02:5e:33:bf:ad:62:c9:52:9d:5e:68:
         28:c1:b3:b5:74:4f:6b:d1:c3:1b:df:d4:40:c0:8d:94:c6:57:
         88:3a:bb:37:31:97:bc:7e:94:6b:25:e2:a0:30:33:bc:e8:93:
         a9:f9:8e:3a:5b:b0:b7:ec:87:ea:6b:e7:28:1b:8f:7a:ec:7c:
         46:dc:bf:a6:ac:fd:6d:4a:eb:02:c1:9a:ab:11:1b:d2:ca:9e:
         ea:4a:96:3e:e4:cc:39:b0:9c:27:8a:42:82:6a:b9:ae:b4:d9:
         92:87:27:69:be:ca:f5:a0:01:44:d1:69:68:fb:c1:93:cd:56:
         4f:9a:ac:7d:e7:39:0e:ba:34:12:be:25:40:52:e3:9f:ba:b3:
         12:b2:35:f4:41:0d:b4:ec:54:5a:7a:35:14:50:e3:2a:98:a4:
         c0:bc:64:d3:06:9f:9c:a1:bf:37:b7:c2:0f:f9:c6:ce:dc:2a:
         0c:cf:08:3e:d6:64:3a:be:2b:eb:39:01:1c:28:bb:33:5a:38:
         41:bb:7f:1d:59:59:2d:b7:06:54:02:d9:a3:3d:02:99:5f:c1:
         46:8c:c0:b6:a9:18:7d:7b:bd:28:26:8d:b9:40:7d:b3:50:5d:
         fb:fc:1e:33
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUIeVPnDFelkzKU5rvAWws9BfpL5YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNmIxN2I4NWEyNmNkYzViZWMwZGQyMjY3ZWFjZDQzZGRl
Nzk5Y2VhMWRjZDQ0Y2JkZWIyMDljZGNkOWFhZTVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCDQJjJ4gEWEuFZfCPRQjEM5jv7ZhEoPgOKdX2CHXk3nB5
SIb7PZ+IShGAsOAlaT19fRKGB/gP6yxs9QlwvJmCdYVrgIIE2/D9kE+vngbYawds
AecWIa/yqdUJa2+iXG3OwqSa7idOezFowELO3G/imeU0cYJKocfxge6aiji9Rsh4
gFOL9qbwA+b9sw3FbNq+vp7Wtp9xeNLSwmX16xeeZbmNM/CzeJ89S4qEqPRsgHJ6
9pzqZxJncQOR4qP3dYPsdl05/dWs3eslpvQbEGSl1OQI0TZaOPNAbxPW43TsYIDS
P2mgWgzMA1TJ9J5cj95OwJGM3o9lYeI9r6S6mHN/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUzJ9mgVLxJszNy+9YmkmPmpA0O0AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU3ZGJkNWNiLWZkNjAtNGE4Ni05NmMwLTY1Y2YxNTlmMGQwNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4WzANBgkqhkiG9w0BAQsFAAOCAQEAedE6EPEG/VrlXMv1acM6qaS+vCHU
FItk7wJeM7+tYslSnV5oKMGztXRPa9HDG9/UQMCNlMZXiDq7NzGXvH6UayXioDAz
vOiTqfmOOluwt+yH6mvnKBuPeux8Rty/pqz9bUrrAsGaqxEb0sqe6kqWPuTMObCc
J4pCgmq5rrTZkocnab7K9aABRNFpaPvBk81WT5qsfec5Dro0Er4lQFLjn7qzErI1
9EENtOxUWno1FFDjKpikwLxk0wafnKG/N7fCD/nGztwqDM8IPtZkOr4r6zkBHCi7
M1o4Qbt/HVlZLbcGVALZoz0CmV/BRozAtqkYfXu9KCaNuUB9s1Bd+/weMw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:37 2024 by rpki-client on console-ams.rpki-client.org