Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/672a0270-c2e2-4c70-9aa9-76059e590a6b.roa
File:                     672a0270-c2e2-4c70-9aa9-76059e590a6b.roa (raw, json)
Hash identifier:          nW813SzCeZFfsN0zv4p9EJzL+CMQYN6v9ELsHEweFa4=
Subject key identifier:   7B:26:DC:E7:CE:26:AB:2D:0F:C2:5B:79:A7:86:B8:DA:89:F3:2B:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22766A90D316EF04FD526AE37FAC59C27C52B944
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/672a0270-c2e2-4c70-9aa9-76059e590a6b.roa
Signing time:             Sat 09 Nov 2024 00:00:00 +0000
ROA not before:           Sat 09 Nov 2024 00:00:00 +0000
ROA not after:            Sat 14 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        114.56.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:76:6a:90:d3:16:ef:04:fd:52:6a:e3:7f:ac:59:c2:7c:52:b9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  9 00:00:00 2024 GMT
            Not After : Dec 14 23:59:59 2024 GMT
        Subject: serialNumber=d4f775b36788bf03a433f6bfeb5f9158435d9cf5cc367157f4aa19027d35ca22, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:d3:5b:f7:0b:c4:f7:0f:41:ba:fe:bb:42:
                    72:b7:8e:c0:85:68:60:43:f3:ec:41:11:ff:ec:45:
                    c3:6a:9e:98:d4:0a:38:ee:7f:08:3f:ef:c7:35:16:
                    7d:f4:53:fc:2d:79:b4:6e:39:f3:1e:65:f5:f6:de:
                    74:83:64:b3:15:22:f1:97:be:54:86:1d:91:f0:9b:
                    3f:b9:02:1f:4e:7c:57:3c:22:65:de:27:46:50:72:
                    94:37:3f:57:3c:c0:5b:36:78:94:99:31:ef:dd:c9:
                    2e:6d:95:15:e3:67:85:32:f8:3b:69:fd:3c:1f:e7:
                    e4:21:64:4f:85:c0:07:b7:88:9b:68:a6:5d:54:1e:
                    a4:8f:01:b0:2c:a0:36:c0:1d:e9:ef:89:7c:9b:d2:
                    3b:d1:a0:90:54:ce:91:f6:9c:e1:01:c0:f1:47:ef:
                    b1:9e:2d:7e:0e:a7:97:d2:80:e3:0d:f2:34:0a:24:
                    e3:16:56:70:74:1a:3c:d6:b9:b2:0d:b8:fe:4d:72:
                    37:a7:21:4a:34:f9:31:ea:a4:85:a9:c6:4e:08:9c:
                    ed:53:35:52:b1:c3:88:67:be:3f:f8:52:49:92:a7:
                    87:cf:69:b7:39:05:8d:ce:25:f1:32:30:e2:52:b8:
                    bb:f5:0c:df:9e:63:c6:05:bb:77:e0:05:8f:9b:1a:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:26:DC:E7:CE:26:AB:2D:0F:C2:5B:79:A7:86:B8:DA:89:F3:2B:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/672a0270-c2e2-4c70-9aa9-76059e590a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.56.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:a7:8a:be:5f:83:fb:1f:93:60:cd:92:6f:03:16:bf:6a:
         01:86:b3:92:d2:9c:ff:ca:ae:92:4a:e4:76:0e:70:e8:9a:8c:
         09:30:09:0f:24:d1:a6:20:43:b0:41:af:78:37:c5:1e:76:f6:
         fb:b1:89:dd:18:57:99:c4:23:19:6d:e8:53:62:95:5d:1c:97:
         16:31:b6:2e:96:5b:85:b8:b9:be:98:f8:55:46:c3:a7:5a:e9:
         65:f4:f0:a6:6d:e8:24:78:d2:4a:1b:e9:44:9a:29:fb:ed:7c:
         0e:4b:98:a5:aa:e0:58:ce:2b:b2:05:ae:e2:27:f6:2a:5d:13:
         de:25:bd:8f:2e:08:e5:2f:b1:f3:fc:ac:23:40:aa:16:6b:44:
         ae:c4:b6:fd:81:6e:b0:63:d8:26:f3:ff:a1:14:c6:ca:62:9b:
         fe:21:4b:f3:9a:a4:97:c6:a7:10:e0:80:50:6a:53:a1:53:e2:
         be:c4:d9:6f:de:56:ff:22:31:28:42:16:4b:b5:ff:4c:75:04:
         c9:55:6c:41:51:b5:11:a4:97:2f:f2:71:f8:a4:04:6d:70:19:
         57:e5:90:a5:73:fd:ba:f3:3d:07:bb:1d:e8:e6:fb:3a:f9:2f:
         0d:81:42:ab:ed:fd:e6:ca:9c:f6:45:83:88:50:ef:5c:1c:98:
         46:0c:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:07 2024 by rpki-client on console-ams.rpki-client.org