Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/896e1e80-7cdc-45e8-bd3e-07ed7dbc2e8c.roa
File:                     896e1e80-7cdc-45e8-bd3e-07ed7dbc2e8c.roa (raw, json)
Hash identifier:          BOsDs64MFrzqzAptn/pBVcZihd/SK6JvYw6cQkLrQMA=
Subject key identifier:   10:E5:A5:86:FD:EA:F8:B0:B1:F7:B1:BF:15:A9:9E:0B:EF:8E:D0:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E084F9046919F2807AFC7661E81ACE9FF24B26C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/896e1e80-7cdc-45e8-bd3e-07ed7dbc2e8c.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.56.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:08:4f:90:46:91:9f:28:07:af:c7:66:1e:81:ac:e9:ff:24:b2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=9577beb6c80da5116b45314650ddc34d852ac3b6177fdc09b5f2bd9fe2fb4e86, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:34:55:7d:a2:5d:96:a0:d9:a2:e6:4c:46:
                    a5:d6:af:4f:c0:ac:87:f4:33:2d:2c:90:0d:b9:b5:
                    a5:1b:ba:0b:bb:0d:f2:53:26:28:fb:ce:5b:4e:38:
                    7f:3a:30:67:73:33:08:40:05:81:7f:a9:d3:c5:64:
                    62:86:75:be:38:87:77:d6:0b:3e:ff:b1:ac:ef:39:
                    a2:18:c6:cf:29:45:a0:0e:57:de:0b:1d:cf:6e:ac:
                    94:18:a6:98:77:7c:d6:44:54:93:a2:b5:f7:c0:3e:
                    38:49:da:76:19:d1:d2:b8:41:3f:33:7b:02:e5:9a:
                    9c:84:ec:0b:75:8d:6e:b4:b0:57:0e:ef:2d:da:d3:
                    98:6c:79:a0:e6:3f:63:74:e8:05:f6:ef:16:70:b5:
                    8b:69:28:d4:e0:19:45:42:08:46:a0:ce:96:61:b9:
                    e6:da:be:85:e3:c3:11:12:be:73:ad:e1:42:09:b8:
                    0e:63:ae:d0:79:78:53:98:f7:22:9f:32:13:1f:a7:
                    e8:b9:7e:be:b8:7b:e0:39:24:13:05:75:f6:78:99:
                    69:da:9e:96:e6:ac:75:14:09:b5:33:bf:b1:a3:b5:
                    7f:f6:ef:8e:28:a4:ed:4e:a0:10:76:10:4c:36:ca:
                    2d:7a:c4:2e:a6:0d:ab:36:1f:2e:fa:66:bb:71:43:
                    64:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E5:A5:86:FD:EA:F8:B0:B1:F7:B1:BF:15:A9:9E:0B:EF:8E:D0:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/896e1e80-7cdc-45e8-bd3e-07ed7dbc2e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:09:9a:91:91:e2:64:a9:76:c7:91:31:b1:c0:9f:ff:d4:55:
         18:b1:4c:4e:6f:60:ba:4f:0c:f2:1e:52:be:1d:69:8b:bd:49:
         dd:c4:fc:da:5f:a4:2b:38:15:22:d7:32:d1:05:81:5d:6d:1c:
         e5:9d:4f:ea:fd:67:02:08:30:5a:95:ca:90:b2:9d:a7:fa:41:
         1b:1b:74:52:b2:e2:67:5c:d2:e2:27:ec:76:59:48:4e:8e:33:
         1f:8a:76:ed:bf:b0:13:e8:33:fc:8e:13:e5:ad:7c:c2:d2:98:
         dc:98:89:cc:82:d2:b3:9b:0e:15:80:d7:df:27:08:0a:10:8e:
         3c:a6:de:84:2f:88:22:bd:d3:21:e9:bb:27:43:53:f9:14:40:
         46:7d:d8:a1:28:d8:0b:1e:3b:73:1f:9b:f1:04:29:aa:49:ee:
         f9:a3:26:89:17:57:03:bc:b1:03:22:79:1f:9a:3c:09:dd:dd:
         9f:71:6e:3f:db:fd:86:6d:d0:24:63:29:b7:e2:3a:90:b1:f1:
         0a:ec:91:c9:52:fc:7a:dc:04:04:70:e9:6e:1a:9a:7b:fa:4e:
         75:4f:99:c3:0e:47:36:b4:03:4d:e9:45:24:7f:39:c7:30:7c:
         a6:d0:e6:87:5e:1f:5f:92:39:2f:a5:aa:38:42:56:10:bf:4b:
         2f:ad:0d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:15 2024 by rpki-client on console-ams.rpki-client.org