Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6456b1c5-0b51-4a1b-9d34-8bcce5cc979d.roa
File:                     6456b1c5-0b51-4a1b-9d34-8bcce5cc979d.roa (raw, json)
Hash identifier:          Pfw/0revjseV4oH/e89kVR1KFAFC2WlMSDa/VlMMYYY=
Subject key identifier:   93:12:AB:34:54:BF:DC:86:90:C4:EA:98:B8:B6:BF:AB:60:F1:09:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49228D4E64D70D818ECF30CC99BD3203C189CA7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6456b1c5-0b51-4a1b-9d34-8bcce5cc979d.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.57.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:22:8d:4e:64:d7:0d:81:8e:cf:30:cc:99:bd:32:03:c1:89:ca:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=ede7e56da1acd7f46d5219c310da7cfe52f27ecceeec7fe5ceeda3f6bd5a8639, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:03:e5:c4:73:cd:c2:1c:e0:3d:59:0e:71:
                    6d:46:6e:b9:21:01:fb:3f:72:5c:b8:17:bc:2c:95:
                    af:d0:76:d7:46:5b:2a:7c:e9:0f:20:80:7c:4a:51:
                    7c:96:51:45:4f:ea:8f:0a:d1:e2:91:07:82:52:22:
                    7d:d1:de:54:2d:a3:a1:30:da:13:a6:1a:6c:d8:4e:
                    72:3e:eb:07:fa:f4:f7:f1:59:7e:4f:69:02:c2:d9:
                    06:23:b3:af:19:be:1d:d3:f0:c2:41:1a:b7:e4:cc:
                    2f:66:ea:5c:6e:f9:e2:76:20:8d:ac:f0:01:02:56:
                    1c:5c:25:e5:c0:82:00:cd:0e:7b:23:6a:22:42:1b:
                    09:16:0f:f4:d7:05:3f:08:a8:62:e0:ef:c0:77:79:
                    d3:a5:7c:ff:ee:94:0b:dd:8d:97:1d:e0:fd:da:7a:
                    81:c1:7e:e1:ba:97:7c:0b:48:69:1b:2f:94:c3:61:
                    16:43:1e:dd:c3:dc:b7:9e:65:23:02:10:67:51:b5:
                    d2:e6:a3:14:e3:c1:68:38:54:5f:df:74:6e:3a:c7:
                    76:9a:1e:11:57:03:93:a8:7c:1a:77:b3:a7:b9:58:
                    ef:b2:c9:fc:db:ef:5d:02:d1:99:9f:ca:f4:66:fc:
                    3f:6e:4e:ed:5c:05:de:31:dd:1b:57:2b:7a:49:ab:
                    69:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:12:AB:34:54:BF:DC:86:90:C4:EA:98:B8:B6:BF:AB:60:F1:09:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6456b1c5-0b51-4a1b-9d34-8bcce5cc979d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.57.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:3a:e9:73:7a:8a:6c:f2:a9:ab:50:1f:48:02:49:f2:77:8c:
         a2:d6:57:73:e6:49:6f:f8:f1:1f:25:7e:03:3a:7b:21:82:4f:
         2e:47:be:54:a5:bd:19:82:75:89:d2:d5:f9:78:37:ff:d4:d8:
         8e:fc:17:4f:fd:10:ca:4f:c7:31:2c:9e:64:18:89:55:ad:3b:
         2a:40:23:34:b5:4f:59:c3:ba:7f:75:de:2a:8b:96:e2:01:ce:
         f9:86:b5:2b:2d:dc:a5:02:2e:41:73:ac:92:81:92:67:ff:fe:
         d9:9b:80:84:03:fd:b3:e8:07:dc:78:54:52:aa:b4:7c:c1:4e:
         52:b1:33:ec:39:83:34:f3:df:15:0c:ec:76:dd:74:64:bc:c5:
         ac:1f:da:51:55:41:06:15:04:f9:30:79:2c:5d:80:ac:04:31:
         02:fe:a5:8f:c8:ec:72:99:03:cb:ee:e1:26:24:01:55:31:7a:
         e0:62:52:96:66:72:cd:3b:92:99:15:45:d2:1f:e9:3a:a7:3d:
         44:a3:0a:6e:7d:43:5f:18:0a:29:44:e7:9a:92:fe:1b:c1:14:
         31:3e:6f:44:4f:1a:ee:4e:3a:7f:fc:ba:a3:8c:dd:12:5e:c1:
         e7:b1:71:4d:4f:fb:9e:03:5c:d6:3d:c0:2d:0f:39:f5:59:bc:
         4d:0f:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:40 2024 by rpki-client on console-ams.rpki-client.org