Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa
File:                     7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa (raw, json)
Hash identifier:          ZRV/wQnnsk0PAay/170iXAYPTHCMTFKVOHXof5eSnfs=
Subject key identifier:   82:F3:75:B7:AA:81:A3:96:91:5B:14:3E:6D:FE:87:7E:B9:31:9C:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2AD15D1BB2B3F843D1BB527BF41D690C7A62907D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa
Signing time:             Sat 23 Sep 2023 00:00:00 +0000
ROA not before:           Sat 23 Sep 2023 00:00:00 +0000
ROA not after:            Sat 28 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        104.255.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 12:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d1:5d:1b:b2:b3:f8:43:d1:bb:52:7b:f4:1d:69:0c:7a:62:90:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 00:00:00 2023 GMT
            Not After : Oct 28 23:59:59 2023 GMT
        Subject: serialNumber=f191be659b21bd16b035de1c039cfd6ec8253ef7e180aa48b300dd5b39a2ceca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:0e:1a:28:77:f9:79:ce:69:59:be:b4:83:
                    3e:b8:4a:15:f1:8e:5d:67:fc:d7:17:a9:17:e2:11:
                    09:1e:99:b1:5d:2c:07:80:40:21:9d:58:fb:98:6b:
                    d6:df:96:26:d4:b0:1b:c4:58:0c:49:9e:03:6c:e2:
                    5e:c8:b7:67:a7:e9:05:73:5b:72:5d:c2:01:9a:f9:
                    db:c4:85:92:02:ee:4e:9e:fa:bd:4f:e9:eb:cb:97:
                    f6:c7:aa:0a:d1:77:99:c2:51:1e:62:51:d7:8b:97:
                    91:50:6f:70:ae:4d:9d:8c:89:ae:a1:cb:48:72:d8:
                    4c:77:bd:8b:6a:b4:11:6e:21:68:bb:b8:cc:37:7e:
                    bd:97:aa:bc:89:bb:a1:3c:4f:9a:1f:e3:9d:eb:49:
                    ba:3c:ee:40:4a:ed:ad:bd:9c:b3:0e:f8:39:ec:95:
                    4f:0c:4b:98:48:a2:16:8b:d2:cc:d7:b4:ba:8c:c4:
                    33:ba:2f:69:04:c3:ae:f6:fd:b6:09:78:b3:59:4d:
                    f2:d8:f8:e1:4f:2d:1b:29:c3:59:1e:6b:c0:39:68:
                    ee:8f:e1:a7:fb:6e:9d:df:35:88:80:80:bd:ce:b5:
                    48:c3:a0:83:52:43:d5:07:4f:ab:e5:2c:e9:42:e8:
                    ed:f7:40:88:13:7b:65:7c:c8:08:05:be:73:ee:7b:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F3:75:B7:AA:81:A3:96:91:5B:14:3E:6D:FE:87:7E:B9:31:9C:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:8c:76:1c:24:07:7f:a4:41:8a:75:a8:e6:e1:be:7e:34:
         f1:d5:f9:00:b5:a5:de:12:20:fa:99:26:c1:59:79:d9:8b:c7:
         3b:da:94:7b:19:05:6f:5c:2d:df:5c:51:a7:d2:5c:bd:63:6d:
         29:5e:24:d1:1f:5e:70:18:37:b4:52:7c:c5:9f:a1:eb:1a:ab:
         94:85:ea:0c:96:0e:db:1d:87:2d:d6:5d:61:5b:f9:2a:c1:b3:
         93:f7:67:a2:7e:41:f3:3f:b4:15:03:ee:61:60:8f:3b:22:c0:
         fb:ea:07:17:16:e3:07:d2:1a:dc:8c:c9:30:14:41:ea:7d:74:
         6b:c4:e3:94:e5:94:c2:fd:10:55:fa:6f:76:52:38:21:91:7b:
         73:45:94:c6:da:71:b6:55:6e:31:d3:25:82:f4:b6:a4:93:b4:
         1e:c0:67:23:24:30:ca:0e:59:96:b4:73:cc:70:ad:00:9d:40:
         92:dd:34:9e:32:8e:d6:1e:a7:b6:ea:7c:08:c0:3e:e2:d7:fb:
         5d:94:07:9c:f9:08:8e:a0:8b:0f:07:3a:98:ec:7a:e5:96:0a:
         48:3f:fb:6e:38:7f:9d:7d:a5:8b:38:58:a3:a9:28:a6:7c:39:
         fb:fe:c9:c8:69:25:c5:8a:ed:3c:6f:82:1d:52:75:79:aa:1e:
         da:25:10:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 23 00:38:45 2023 by rpki-client on console-ams.rpki-client.org