Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cca70e2-e95c-4a8a-a3a5-69e736c6cb19.roa
File:                     7cca70e2-e95c-4a8a-a3a5-69e736c6cb19.roa (raw, json)
Hash identifier:          JclD1MdgpSmo+SCAGsEiMIBHuUNGGstlQ6sWyeBDT/k=
Subject key identifier:   BE:84:C1:EC:12:AE:B0:2C:74:E2:4A:33:5F:89:78:C6:8F:BC:9A:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64C981F8A52E21B32E00E38AD6D938724373EB03
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cca70e2-e95c-4a8a-a3a5-69e736c6cb19.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.65.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c9:81:f8:a5:2e:21:b3:2e:00:e3:8a:d6:d9:38:72:43:73:eb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=f631736f8994734e3cc0dc2b7f633c3a2a5a1f1c1d760e5413d8dbd5fa5f95be, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:6b:6f:dd:78:79:4f:93:44:76:aa:7e:8f:
                    35:d7:45:06:82:55:4d:5a:60:54:66:bf:ce:23:eb:
                    37:6c:28:de:f3:be:ef:cb:a9:71:ff:7a:e3:49:3b:
                    d8:46:fb:f8:ae:92:ee:f6:ea:61:34:d2:c6:9e:b1:
                    cc:2b:d1:db:0a:4e:ca:2c:3c:7c:e7:80:9b:ba:55:
                    9d:cb:25:33:11:49:05:d1:2e:f0:8d:4c:4b:f8:76:
                    33:01:0b:30:af:b9:23:cc:37:55:cc:0a:c0:34:eb:
                    95:5c:de:8d:99:a4:5d:ff:c4:b5:24:87:05:7e:06:
                    ad:69:75:e7:c9:ec:d5:45:a1:bb:c8:d7:72:14:d2:
                    b0:92:09:6d:4a:54:e8:47:74:30:30:d5:c7:51:e2:
                    b7:c2:4f:20:3e:17:1b:4d:72:44:de:b2:9f:90:2e:
                    04:d3:a2:30:e2:ec:ec:c1:f9:9e:26:9b:59:c5:c0:
                    25:31:05:2d:ac:d4:59:0f:85:00:c9:ae:b8:c2:9f:
                    19:ba:69:9c:e3:c9:ed:ef:91:a0:56:67:79:78:f3:
                    da:5e:ae:19:e1:a3:06:b9:64:10:04:e6:0f:d3:89:
                    3e:3c:0a:ec:76:f4:fe:de:ea:85:ec:b5:13:13:dc:
                    d7:04:48:ee:1d:ba:e9:e1:70:5d:7b:1c:6e:2f:d5:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:84:C1:EC:12:AE:B0:2C:74:E2:4A:33:5F:89:78:C6:8F:BC:9A:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cca70e2-e95c-4a8a-a3a5-69e736c6cb19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:10:42:b4:48:51:dc:76:70:cb:79:cb:b9:2f:2e:85:09:c6:
         19:69:10:30:87:f1:24:26:22:d9:cf:8a:6a:d5:58:39:32:22:
         a8:11:5e:7f:35:0a:85:33:d8:0f:57:f0:56:a6:20:01:b8:3d:
         e9:4c:c5:02:ae:dd:d8:8c:df:42:c8:fb:4a:61:47:f5:f0:ff:
         fc:90:55:ed:24:34:75:71:ba:bc:37:b3:a0:cd:bc:89:34:7a:
         fb:3c:92:a9:bf:37:e8:86:2b:cd:bf:ac:d1:8c:a4:1b:e5:50:
         a2:5e:22:c3:4c:f2:1e:80:dd:22:00:22:75:aa:27:62:90:b9:
         a6:83:68:47:92:bd:61:fb:e5:4f:d4:d7:b1:e9:e4:b8:06:0d:
         c1:4d:0d:dd:cc:21:4e:2b:6f:7c:87:b4:e5:fc:f3:ff:6e:53:
         92:6e:56:e3:5c:dc:91:db:48:41:b0:86:b3:5d:1e:db:1b:a9:
         2e:5c:b6:52:a4:c4:66:fb:17:ff:af:b7:c3:38:a0:c6:0b:a1:
         70:5a:da:b8:61:d5:eb:a0:a1:b2:b6:c2:12:c8:6e:ca:da:9a:
         7d:89:5c:36:cb:83:bc:43:6d:93:6d:1e:85:5e:bf:74:a8:3c:
         f0:24:56:f8:e8:f3:cf:81:7c:da:91:a6:77:1b:7d:ab:3a:09:
         98:03:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:12 2024 by rpki-client on console-ams.rpki-client.org