Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cc5e8d9-cf30-4383-8b63-0d0d47ac6942.roa
File:                     6cc5e8d9-cf30-4383-8b63-0d0d47ac6942.roa (raw, json)
Hash identifier:          inx05hz1cQMA6MKaWnBzRftv4e9iJMOZ8cZbf4c0684=
Subject key identifier:   55:B0:AE:18:1E:2D:80:C2:86:E2:D4:EA:91:2E:25:52:B8:16:C6:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0AB107EBFB1C09AD8D5ABFE194EA08AB3EB20096
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cc5e8d9-cf30-4383-8b63-0d0d47ac6942.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.17.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b1:07:eb:fb:1c:09:ad:8d:5a:bf:e1:94:ea:08:ab:3e:b2:00:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=93bd0bacbb53b94c1807ef8e34019fe838c71e842a9b54f4834f3f9215ec4cc9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:56:e4:1a:ef:98:fc:e0:08:1e:bd:4c:b5:17:
                    63:ed:8f:29:f6:9b:dd:f6:c2:4c:c1:34:80:3e:dc:
                    a5:c5:a5:32:bd:43:f9:6d:56:3f:56:b9:31:a4:b9:
                    c0:4a:84:22:33:9e:da:02:11:78:b3:75:b2:af:c0:
                    c4:22:0f:44:a9:16:bc:12:08:0b:dc:84:60:29:fa:
                    11:72:33:c0:2e:e8:cb:f3:fe:af:94:56:dd:44:77:
                    33:4d:fd:87:d3:25:08:fe:8c:eb:0d:47:2a:c8:19:
                    67:2c:94:8b:20:fa:6d:67:2a:3c:d2:50:43:1f:dd:
                    3f:42:00:f3:ee:90:c9:28:35:28:41:f8:c8:7d:62:
                    19:3a:8a:30:d1:53:ae:d3:ee:e2:1a:c8:bb:22:4b:
                    11:d8:0b:bc:0b:0c:c3:5e:ba:8f:f5:56:5a:f8:60:
                    c5:ab:8b:42:e4:e4:3b:6e:5d:63:83:02:69:69:e6:
                    c0:de:11:b1:d1:80:44:f8:fc:82:3e:c0:1f:76:d0:
                    2c:f2:20:96:b0:9f:f8:b0:27:fa:05:ae:2b:73:2a:
                    f0:7f:c2:bc:7e:4c:aa:1f:d6:1a:f5:5e:e0:40:1e:
                    cd:21:c3:3f:58:5c:83:5d:fb:f4:d4:49:26:d2:48:
                    32:3a:5d:7d:e2:3e:07:37:74:c7:17:0f:5e:cd:be:
                    6e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B0:AE:18:1E:2D:80:C2:86:E2:D4:EA:91:2E:25:52:B8:16:C6:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cc5e8d9-cf30-4383-8b63-0d0d47ac6942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:a2:a2:c1:31:8f:46:7f:29:f0:53:31:a5:1f:52:40:a0:71:
         da:3f:ef:40:2c:0a:13:8c:1e:5a:32:34:9a:e6:91:41:4d:9a:
         d2:88:af:6e:0a:40:e2:8f:12:fb:e8:29:85:76:8b:89:e0:04:
         84:bc:7c:d1:45:93:4d:8d:3e:46:a0:75:37:c0:4b:bd:6b:f4:
         ad:e0:be:68:68:d5:f8:bd:14:e4:8a:f0:ec:c2:a6:18:56:04:
         16:51:f1:ef:2d:8a:77:e0:db:b9:c1:43:09:5c:dc:a1:36:b7:
         8a:a1:fb:16:82:c7:79:ab:40:be:b9:6a:b5:2f:66:e8:12:d2:
         87:78:72:e0:64:fd:1d:fc:0b:12:42:d1:9c:72:f9:6e:73:71:
         ef:d1:ad:89:6b:b0:40:50:02:7b:8e:04:dc:32:ee:2a:e6:0c:
         2e:d7:23:d4:6d:19:e3:89:f7:55:11:9e:06:a2:8c:d9:3d:8b:
         40:b9:9f:68:99:a0:65:2a:f9:48:cc:6c:d0:36:59:87:33:83:
         c4:db:72:bf:16:b2:42:7b:c1:b0:63:e0:b2:5b:e7:7a:c2:ca:
         f1:1d:eb:e5:a8:90:b4:d8:b1:3f:fc:5b:e1:44:df:ac:1f:f0:
         86:24:ff:4a:6a:85:f3:b3:11:fa:7d:ea:4f:97:b4:6f:07:32:
         37:43:71:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:08 2024 by rpki-client on console-ams.rpki-client.org