Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa
File:                     8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa (raw, json)
Hash identifier:          EHaf7/JWWlG4fGGei2MFhwV3glpC+ITeDeAElhvY6oQ=
Subject key identifier:   FC:B8:24:4F:36:B1:53:B6:3B:02:67:FF:96:71:9C:6B:4E:1A:B2:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44A360DF2DD1CADB7C2C5BD8FD7FABB4F73736B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa
Signing time:             Wed 30 Oct 2024 00:00:00 +0000
ROA not before:           Wed 30 Oct 2024 00:00:00 +0000
ROA not after:            Wed 04 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.178.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a3:60:df:2d:d1:ca:db:7c:2c:5b:d8:fd:7f:ab:b4:f7:37:36:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 30 00:00:00 2024 GMT
            Not After : Dec  4 23:59:59 2024 GMT
        Subject: serialNumber=52f5e123461c847e7b5329219f2a36c0eefcea4eaf2d4fc925d40709e49d87a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:2b:23:d8:c6:50:81:ee:0c:d4:17:09:d1:
                    a9:c3:e8:12:74:8c:82:85:fd:74:bc:20:6a:f1:4e:
                    1f:ad:ec:86:46:42:41:5a:5e:2f:7c:81:55:8c:2e:
                    c6:b4:29:98:ae:a7:6f:44:0f:71:eb:39:eb:f5:80:
                    63:2f:62:66:84:4a:04:22:4b:02:73:14:21:1b:75:
                    98:ea:8f:39:84:cd:49:ee:13:19:d6:3c:ad:30:4d:
                    ab:23:61:f8:98:95:16:a0:bc:13:f4:08:84:c9:d1:
                    d0:68:8b:96:88:47:eb:e2:96:d3:19:0c:71:50:0e:
                    fe:37:7c:90:19:b7:ed:26:c2:1b:ae:73:24:43:91:
                    87:89:cb:a7:a0:25:df:16:91:95:bd:e6:4a:21:05:
                    7e:c0:c5:63:5a:29:2c:30:9f:52:d6:b6:bc:f0:52:
                    d3:61:60:87:d6:e1:d1:e5:76:ed:c1:d8:33:29:6e:
                    89:d6:ea:9c:57:07:9e:e5:92:d5:79:10:7c:ff:15:
                    47:19:b2:34:04:bc:c8:7d:7a:fb:86:50:ed:ef:c0:
                    68:44:43:c6:cb:fb:2b:29:ec:41:3c:31:27:88:75:
                    2a:3c:d1:21:4c:15:8f:97:4f:3d:2b:ae:05:da:ab:
                    8c:91:aa:58:86:69:a4:01:a7:fd:b5:3d:33:c6:39:
                    8c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B8:24:4F:36:B1:53:B6:3B:02:67:FF:96:71:9C:6B:4E:1A:B2:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:99:b9:1c:b8:a4:3f:6b:7b:ed:db:cc:30:d4:35:ca:cb:43:
         ec:eb:bb:4a:03:41:e3:00:a0:74:64:ad:99:ed:d8:0e:bc:c7:
         bc:b1:3a:de:1f:6e:a8:94:aa:ef:cb:90:93:88:e4:09:35:4f:
         9b:7a:cf:75:d9:c7:6a:50:fd:46:3c:5d:71:c1:e3:8d:11:8f:
         64:72:70:0c:67:f6:cb:5d:c4:4e:6f:31:2e:09:57:ca:0e:4f:
         3c:c7:a6:d1:70:d7:9c:05:89:a1:4a:a2:40:ec:a1:7d:59:ac:
         c7:d6:23:94:a5:80:a1:c1:75:22:55:98:b6:55:11:59:7b:b0:
         64:62:6f:e4:7a:3d:87:1f:a8:91:7f:a6:72:33:3a:bf:f2:b8:
         b5:c4:b7:a4:f4:5d:e1:42:94:f8:9c:a4:14:19:d9:0d:b9:89:
         36:57:84:ec:6b:ce:4c:ca:8a:28:a9:a6:8c:5e:79:07:88:88:
         7b:5b:01:5b:9c:4e:5b:10:4d:01:6f:82:21:67:7d:51:61:65:
         73:f0:c1:c1:93:13:8c:27:2c:71:a7:7a:0c:ab:11:b1:f5:68:
         ed:52:1a:1a:6b:1b:6b:35:a2:15:35:48:d9:b2:51:c7:e7:6f:
         f9:9a:2d:4f:0e:bd:0d:b8:b5:f2:15:1e:75:5d:0b:b4:94:05:
         58:f2:88:5b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURKNg3y3Rytt8LFvY/X+rtPc3NrAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDMwMDAwMDAwWhcNMjQxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MmY1ZTEyMzQ2MWM4NDdlN2I1MzI5MjE5ZjJhMzZjMGVl
ZmNlYTRlYWYyZDRmYzkyNWQ0MDcwOWU0OWQ4N2E2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDClSsj2MZQge4M1BcJ0anD6BJ0jIKF/XS8IGrxTh+t7IZG
QkFaXi98gVWMLsa0KZiup29ED3HrOev1gGMvYmaESgQiSwJzFCEbdZjqjzmEzUnu
ExnWPK0wTasjYfiYlRagvBP0CITJ0dBoi5aIR+viltMZDHFQDv43fJAZt+0mwhuu
cyRDkYeJy6egJd8WkZW95kohBX7AxWNaKSwwn1LWtrzwUtNhYIfW4dHldu3B2DMp
bonW6pxXB57lktV5EHz/FUcZsjQEvMh9evuGUO3vwGhEQ8bL+ysp7EE8MSeIdSo8
0SFMFY+XTz0rrgXaq4yRqliGaaQBp/21PTPGOYyBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU/LgkTzaxU7Y7Amf/lnGca04asnEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhmOGJlOTdiLTI3ZDYtNGIzNS05MDM2LThlMDE1YzZlNjNmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4sjANBgkqhkiG9w0BAQsFAAOCAQEAmJm5HLikP2t77dvMMNQ1ystD7Ou7
SgNB4wCgdGStme3YDrzHvLE63h9uqJSq78uQk4jkCTVPm3rPddnHalD9RjxdccHj
jRGPZHJwDGf2y13ETm8xLglXyg5PPMem0XDXnAWJoUqiQOyhfVmsx9YjlKWAocF1
IlWYtlURWXuwZGJv5Ho9hx+okX+mcjM6v/K4tcS3pPRd4UKU+JykFBnZDbmJNleE
7GvOTMqKKKmmjF55B4iIe1sBW5xOWxBNAW+CIWd9UWFlc/DBwZMTjCcscad6DKsR
sfVo7VIaGmsbazWiFTVI2bJRx+dv+ZotTw69Dbi18hUedV0LtJQFWPKIWw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:16 2024 by rpki-client on console-fra.rpki-client.org