Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc69a83-4a96-485c-9489-1b574db4510f.roa
File:                     7dc69a83-4a96-485c-9489-1b574db4510f.roa (raw, json)
Hash identifier:          x+r4YdghBjFU28ptFgqZolLFWTyNvzsMmvsuBvZ/bFw=
Subject key identifier:   A1:C2:7C:0E:FA:65:96:A8:F8:E1:46:F2:E5:F5:BA:3D:C2:88:5F:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44581CC7D698AAE55AC1405D99405531763040DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc69a83-4a96-485c-9489-1b574db4510f.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.90.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:58:1c:c7:d6:98:aa:e5:5a:c1:40:5d:99:40:55:31:76:30:40:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=5e20cbb8402106b3fc93ea8f4bfe28224b92ee39ad05825fdfa35d0f3284a72b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:9c:18:e9:80:ad:00:10:0a:1e:3b:55:0e:
                    5a:59:1d:b1:f2:0f:30:e6:3c:4a:50:27:db:a0:0a:
                    d2:21:53:79:59:9d:58:12:47:3e:cc:69:cf:98:7d:
                    bf:9e:ea:41:c3:27:da:c5:12:a9:3a:3c:42:7e:fa:
                    d6:83:f6:93:21:1a:cf:6e:a6:d5:03:9b:09:b2:36:
                    9c:57:1a:db:7e:50:25:1b:be:a2:dc:25:e0:03:28:
                    19:77:20:6b:44:c8:54:8e:7d:02:5c:f0:f5:09:84:
                    3c:7d:0b:0b:2d:00:42:0c:a9:b8:48:26:12:74:9b:
                    74:b7:41:36:64:49:f9:04:fa:47:99:90:ca:47:42:
                    0e:1c:c6:91:9e:2f:a6:13:43:ef:e5:d3:d3:83:46:
                    9a:4f:e3:03:d8:d0:66:aa:38:af:da:e5:60:33:31:
                    88:e2:2a:9a:28:d9:0d:6e:32:f8:b6:4f:67:32:96:
                    c7:01:f2:d9:43:56:e5:5f:29:ae:5d:17:90:0e:37:
                    6d:63:df:cd:b2:4c:b8:39:05:5a:96:b6:c0:48:36:
                    15:98:7c:02:2e:ec:9c:85:6a:cc:41:ab:f6:b9:9c:
                    be:7b:67:8d:4f:b1:4f:7e:d1:95:9d:ed:96:29:3e:
                    54:f5:b2:4e:7d:0b:27:9f:5d:98:4e:89:db:04:21:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C2:7C:0E:FA:65:96:A8:F8:E1:46:F2:E5:F5:BA:3D:C2:88:5F:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc69a83-4a96-485c-9489-1b574db4510f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.90.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:2f:62:13:db:42:42:40:33:62:73:80:a5:b9:e3:a2:03:
         b8:87:d4:83:9f:99:7a:60:70:b3:d7:c0:25:0d:f6:3d:25:d0:
         a4:ae:f0:13:36:19:ff:3a:3a:d0:3a:33:84:ec:79:bd:96:62:
         56:03:a6:67:a6:0d:dc:4d:48:72:f0:97:02:56:1c:5d:7c:40:
         1f:91:22:ef:e4:20:8d:9a:cb:ca:03:60:59:26:57:9f:69:53:
         5c:31:05:a1:2e:55:64:ac:99:f5:5d:04:46:7b:c9:b1:3a:f8:
         51:66:9d:ac:5c:13:77:f3:41:b5:8d:a5:a0:8a:5a:01:94:2a:
         50:8c:6a:d1:61:0b:55:b2:ba:39:5b:92:18:c2:ee:52:9d:3d:
         24:16:a9:da:c7:c7:ab:07:7d:f6:e7:d0:b3:ed:03:ee:b9:da:
         3d:23:00:9a:59:e5:92:72:cd:1f:5f:ca:41:12:9b:fd:07:dd:
         53:d9:6e:54:00:70:4d:b4:27:42:3e:46:ef:0c:df:13:89:b5:
         95:db:62:69:59:e1:4f:76:fe:5e:43:5d:40:82:7f:1c:b6:e4:
         be:e4:11:1c:35:e6:97:4c:ac:ac:32:ee:0a:bb:58:58:c7:d2:
         a6:a8:66:f0:5a:c6:28:e4:26:91:84:81:c3:4f:64:c4:d7:4e:
         8f:01:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:11 2024 by rpki-client on console-fra.rpki-client.org