Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b11831b-a49b-46b2-95de-a4bac45375cf.roa
File:                     8b11831b-a49b-46b2-95de-a4bac45375cf.roa (raw, json)
Hash identifier:          5hpg0wklaDZywf4KYZ464Hlww58/RJN79HnS1yfhfyU=
Subject key identifier:   AD:34:90:53:0A:06:F0:7C:5A:A8:0C:94:CF:DE:C4:54:83:6F:8A:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D5FA4323C75D733548703FCA904C316876E9D82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b11831b-a49b-46b2-95de-a4bac45375cf.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.169.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5f:a4:32:3c:75:d7:33:54:87:03:fc:a9:04:c3:16:87:6e:9d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=b1b8add7cbd33dbbbc9a7b8d3d1f576cc215d207da7c9fa88950215294cf317c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:b1:d4:fa:43:47:85:db:a5:cc:d4:05:c0:
                    0c:93:e1:eb:8e:09:42:cb:00:f1:b1:5b:71:9b:50:
                    31:af:3a:a0:82:b1:ea:e5:ae:d6:ae:6f:bd:89:40:
                    d8:8d:2a:ac:a0:63:53:4b:b1:2c:87:19:8f:1a:f5:
                    b9:19:8a:f0:7f:60:6b:26:6a:e3:fb:0b:cd:9f:f6:
                    72:41:3b:08:1d:0e:c7:f3:64:23:91:d3:6a:82:38:
                    0f:5a:fc:c0:30:cd:4d:2b:e9:f7:95:13:10:dc:5e:
                    40:4f:3f:72:6c:77:de:28:2d:3b:42:ba:66:fa:6a:
                    fe:bc:f8:aa:69:bf:37:1a:98:4f:78:fd:c3:53:90:
                    97:33:26:3e:ce:b4:c4:30:76:f5:c8:8a:38:0c:41:
                    bb:f5:0b:36:eb:42:e2:54:76:62:28:5a:58:fe:89:
                    72:a1:bb:72:80:70:ea:fe:71:a7:37:8c:0c:8e:5e:
                    c7:dd:a3:52:ef:ab:7f:a9:f6:cf:77:9c:17:b4:fa:
                    02:21:1c:31:82:d4:34:4c:b1:4a:f6:61:ff:5c:1a:
                    7a:50:7e:d8:4c:d8:38:7b:a9:c2:b5:a1:96:79:a3:
                    74:03:94:2b:f6:7f:16:32:25:ec:9b:94:6a:01:d9:
                    b5:e6:f0:da:e7:15:64:33:e8:f6:e7:75:9b:a5:26:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:90:53:0A:06:F0:7C:5A:A8:0C:94:CF:DE:C4:54:83:6F:8A:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b11831b-a49b-46b2-95de-a4bac45375cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:7a:0d:80:10:32:e0:9f:09:7e:d5:aa:c4:de:a0:f1:0a:5c:
         d8:3c:37:01:4b:83:d0:21:cd:72:a5:4d:31:bf:2f:e1:45:03:
         6d:1a:27:20:cc:ad:29:76:7a:d9:a8:26:8b:a4:91:c5:f8:c6:
         56:de:e9:78:bf:c6:24:06:bc:d4:7f:78:e8:8e:a3:42:90:0c:
         86:e3:a7:15:a4:cc:25:0f:1e:34:bf:3b:21:78:f8:c0:f9:0d:
         55:af:ee:fd:b0:48:cf:10:46:a3:94:bf:82:96:c1:46:de:79:
         bf:a3:a4:4a:d3:4d:14:50:18:f3:86:23:17:5d:8d:24:c4:e3:
         52:90:8b:89:82:c6:d0:b4:06:45:f8:71:8d:4e:37:fd:26:70:
         ec:c1:9b:c9:29:92:7c:67:af:c5:cb:96:c1:77:be:42:98:a5:
         cc:31:6f:da:c8:70:d0:96:c7:20:ce:0c:a6:3c:a1:79:0a:11:
         7c:30:31:0f:42:39:46:59:16:04:35:d5:9d:75:b8:00:7c:c5:
         3d:6c:67:35:ce:9a:bf:9a:a2:f4:62:5c:a9:20:4b:08:00:ad:
         91:29:f9:69:b6:89:c1:ac:4a:c8:80:c7:50:f6:ad:7c:1d:c8:
         ba:12:fd:07:83:b1:1e:77:7e:eb:5c:48:94:14:b8:b7:e7:7e:
         5a:91:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:14 2024 by rpki-client on console-fra.rpki-client.org