Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d8d5c43-3b4b-4d6b-a36b-51e5b35ea1a5.roa
File:                     8d8d5c43-3b4b-4d6b-a36b-51e5b35ea1a5.roa (raw, json)
Hash identifier:          yLQVLqUrpwcxo1A2H1Qt1RxHeog43hntgQkR88P8iY0=
Subject key identifier:   9E:5B:EE:79:FF:B0:50:F4:EB:D7:A5:66:3E:07:B6:73:D5:A8:52:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30C23CCD14E3CD20D27A6E6DF96108A82A08FF52
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d8d5c43-3b4b-4d6b-a36b-51e5b35ea1a5.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.137.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c2:3c:cd:14:e3:cd:20:d2:7a:6e:6d:f9:61:08:a8:2a:08:ff:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=162017f7b529b439bbc0f36d13b85fdc505bb30dc6263f356afe17ef1c53390f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7b:8d:d8:83:bb:e5:85:99:fc:e6:a0:75:5f:
                    bd:83:e7:9d:93:f0:4a:47:93:5a:4b:82:75:1c:7c:
                    48:1c:75:92:e9:20:dc:e0:6a:27:3b:ee:cd:5a:55:
                    c9:09:75:d0:b0:a3:ea:11:a1:84:f2:ab:85:7e:d8:
                    60:32:ed:f2:44:66:33:ff:8a:3d:d9:bf:2f:54:b5:
                    92:46:40:99:68:99:e9:a7:79:18:66:fc:d7:5f:a0:
                    2d:f7:5e:4c:44:87:c1:01:f9:0f:65:3f:77:f8:1c:
                    19:52:26:5d:bf:88:86:14:d7:36:b9:57:83:ed:34:
                    c9:af:e8:2b:4c:6c:d9:00:a2:6f:85:af:01:c4:ca:
                    61:13:7a:31:11:d9:80:8a:b6:d5:3d:73:59:23:c8:
                    f8:29:33:fb:a8:91:4d:b3:ae:36:c5:f8:9e:ef:61:
                    ff:55:72:c3:d6:fd:0c:e4:db:51:48:f0:1e:61:f8:
                    98:4d:ca:23:e6:cb:13:e2:00:d3:cd:9a:6c:86:d3:
                    ac:9d:85:a9:a4:ef:be:40:72:c1:27:07:c0:25:24:
                    6f:3a:05:87:1b:35:a1:8f:c4:40:2f:a3:15:a1:3d:
                    a8:2c:97:cf:8d:5b:11:97:18:44:37:f1:b8:df:d9:
                    26:cc:b3:ae:80:ac:44:17:5c:81:44:1d:84:a3:55:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5B:EE:79:FF:B0:50:F4:EB:D7:A5:66:3E:07:B6:73:D5:A8:52:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d8d5c43-3b4b-4d6b-a36b-51e5b35ea1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:85:50:4f:a1:06:9b:57:8e:39:81:01:ef:ab:80:10:a0:61:
         41:b0:cc:a5:86:c9:cd:40:b1:13:6b:56:ce:d4:f0:75:a5:af:
         6c:2e:a3:8a:f9:2e:8e:c2:60:de:81:f4:40:62:47:ec:da:15:
         5d:73:f4:d1:87:8d:94:21:55:d4:ed:96:4e:cc:af:15:14:0e:
         0d:af:e2:83:97:1a:74:b5:38:d9:c5:ac:9d:c6:0a:d4:55:7e:
         65:33:b3:42:83:0c:af:67:6d:7a:cc:a1:71:87:46:38:1a:31:
         a9:02:28:8f:a0:aa:15:3b:2d:d0:6a:24:8f:05:66:d1:fa:77:
         19:53:89:8e:9f:9a:32:01:47:bf:06:93:cc:90:0b:35:02:0c:
         db:5f:df:aa:bb:15:b9:46:7f:b1:15:45:db:24:1d:fb:53:f2:
         1b:ce:9e:7c:58:68:c8:dd:80:82:b5:f5:fc:56:a1:88:44:77:
         a6:50:42:d4:cc:ed:26:90:8a:35:3f:92:ff:ef:a4:8d:df:dd:
         ef:96:b5:d2:15:53:37:bd:e2:41:b3:d6:ab:36:a2:e5:78:43:
         64:52:cd:b7:1e:87:0e:42:45:10:4a:4a:eb:07:b1:48:0b:34:
         da:19:df:d3:89:80:2b:ef:b5:d2:ac:9a:2d:5f:a5:21:a5:1f:
         86:4d:6b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:51 2024 by rpki-client on console-fra.rpki-client.org