Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bddc70f-633e-45e7-87bf-3deb8fc20ec9.roa
File:                     8bddc70f-633e-45e7-87bf-3deb8fc20ec9.roa (raw, json)
Hash identifier:          sIInCy9ZIGkl7dd9YWhYkZG85cN5NSEo7EpLHD2kjqs=
Subject key identifier:   03:10:AC:D5:79:10:B9:6B:75:49:97:CE:FE:EC:BE:30:98:1C:01:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D27DBCB6761AD5EEE263478E038B572A0A5E722
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bddc70f-633e-45e7-87bf-3deb8fc20ec9.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     6167
IP address blocks:        139.56.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:27:db:cb:67:61:ad:5e:ee:26:34:78:e0:38:b5:72:a0:a5:e7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=f5db0546f9690fa0ac94fed4cbb5ec0a52a8da151e9e8ffa3f62f4d7292bd32c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:1a:19:27:55:df:77:4b:c0:32:b8:45:f5:
                    f9:2a:11:06:0a:4a:01:f8:5e:fc:c7:2c:6e:1c:38:
                    28:98:ae:0b:64:6c:06:d3:1e:bf:2a:86:d1:a6:c1:
                    8c:7f:32:d3:37:5a:ca:07:9e:8e:19:97:72:64:71:
                    9a:2c:8f:8c:2a:6d:ef:89:2a:d0:33:99:93:76:6c:
                    9b:b3:4a:51:c1:de:6b:16:74:ab:c8:da:86:da:ca:
                    5b:49:8b:58:1e:1f:d9:88:d2:af:0f:69:ae:46:1a:
                    95:3c:f7:ce:56:6c:44:7e:95:7b:49:70:48:3a:2e:
                    7f:7f:90:94:36:98:05:b9:c9:fb:e2:89:5c:ad:6d:
                    6e:8c:49:2e:02:5d:67:81:f8:69:a7:e5:38:f0:fa:
                    89:78:f3:e3:7a:74:64:4b:66:11:40:45:4e:05:f8:
                    66:c2:89:39:fe:b2:2a:ea:a4:f0:bc:aa:2f:cd:59:
                    d3:d4:3d:fa:d7:fb:da:86:4f:e1:d6:65:bb:f5:10:
                    c2:5c:68:f6:7b:40:13:2f:52:62:02:42:f2:ae:e6:
                    61:79:8a:a4:e8:16:70:0b:89:49:15:e4:28:2a:6a:
                    ad:11:70:84:f7:b4:52:c8:c5:24:b5:29:7b:c4:2d:
                    3e:99:50:74:db:41:09:bc:69:4f:73:b6:a6:74:70:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:10:AC:D5:79:10:B9:6B:75:49:97:CE:FE:EC:BE:30:98:1C:01:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bddc70f-633e-45e7-87bf-3deb8fc20ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:83:58:5c:79:12:7e:ee:2e:2c:46:bf:0d:1a:25:d1:45:da:
         3b:47:c2:c5:e8:4c:e6:24:ee:7f:5d:2b:46:fb:28:4c:4c:bc:
         94:02:68:b4:67:5d:00:a3:cd:43:50:36:09:aa:0f:a1:7d:d9:
         60:1a:db:71:92:04:f9:0d:1d:7a:28:6c:69:e4:41:04:c6:ad:
         9f:8e:a2:2d:53:d9:82:7a:ff:20:40:59:0e:29:f6:13:7c:8d:
         af:d0:88:9b:65:fd:06:92:ad:46:d0:c2:19:2c:6a:51:8d:85:
         b9:f5:dc:2d:7a:c0:b7:77:23:b2:74:d2:cf:b5:27:a4:0c:35:
         f2:df:06:25:5d:cf:6c:f0:8a:3d:f7:ba:a4:70:26:b3:71:f8:
         aa:92:e7:ec:2d:bd:6f:e1:f6:be:c3:f7:c7:c7:51:7b:1b:3e:
         14:dd:47:04:be:2e:eb:2c:54:ff:2b:da:b1:79:7a:87:23:07:
         ca:4b:00:23:c5:3a:9e:8f:92:9c:a0:3b:2d:76:2f:2f:13:50:
         cf:65:8f:e0:81:34:31:a8:2d:e2:91:7f:14:4b:21:3e:a6:92:
         50:cc:da:42:fe:49:0f:63:ee:c8:f4:56:3f:ab:e5:65:71:10:
         c0:14:39:5b:fa:9f:f6:00:b0:b5:6a:1c:62:d0:e4:ad:bb:dc:
         1e:0e:1b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:53 2024 by rpki-client on console-ams.rpki-client.org