Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a29c11-3b61-4ea1-a02e-b71c4bf5c41c.roa
File:                     90a29c11-3b61-4ea1-a02e-b71c4bf5c41c.roa (raw, json)
Hash identifier:          D/nIrPajniLU06CgRnvXcMATeNP3CLQhz04xWtm77zY=
Subject key identifier:   B7:E6:D4:7A:C0:AB:18:99:F2:64:6D:06:8B:9A:4A:C7:EF:9B:1D:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68D87098DC0F6A2593ADAE776FA6D385746F3FC9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a29c11-3b61-4ea1-a02e-b71c4bf5c41c.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.109.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d8:70:98:dc:0f:6a:25:93:ad:ae:77:6f:a6:d3:85:74:6f:3f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=cb6b2371c7a435ed5cad57f9ac192f3dff9ce3cfd8aa5121c3f32a2a95599ed5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:6f:ba:30:1d:35:de:09:d8:48:26:da:b6:
                    9f:b4:d6:7e:a5:72:47:17:2a:9c:c1:8d:44:d4:2c:
                    60:76:85:56:f9:af:32:39:f1:46:41:17:40:3a:b2:
                    3e:c5:2d:d8:8a:d7:70:3e:d8:3d:bc:fb:89:a9:9e:
                    8c:5e:3c:4f:40:5b:8b:d9:1e:22:a9:d1:88:88:96:
                    4d:29:01:3d:d7:61:55:fc:10:4b:be:df:05:d7:99:
                    92:f5:53:0d:bc:a3:b0:59:4b:d3:75:6c:75:8f:c0:
                    53:27:57:e2:e8:11:68:91:21:11:42:c9:53:fb:d2:
                    13:4a:98:de:28:78:40:d9:65:b8:e0:42:f8:2a:3d:
                    19:f3:ad:71:91:11:5f:5e:df:5e:59:56:d6:d5:d9:
                    ce:65:f0:e6:76:9f:da:3a:c4:25:49:76:73:32:96:
                    7d:e0:36:45:39:cf:51:c4:cf:ad:e1:45:74:da:ee:
                    3d:ff:41:6d:e4:71:ba:6b:67:24:e8:fe:4d:77:22:
                    43:e4:1d:ec:bc:ea:48:45:80:76:5a:13:51:f6:f9:
                    9e:97:d5:b7:f6:b5:8d:42:3a:11:e8:42:fd:0b:e4:
                    77:10:ab:c2:67:e2:7a:44:d4:79:6b:bd:01:30:aa:
                    99:0b:ce:12:f5:81:73:de:86:f8:bf:f9:9f:cf:95:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E6:D4:7A:C0:AB:18:99:F2:64:6D:06:8B:9A:4A:C7:EF:9B:1D:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90a29c11-3b61-4ea1-a02e-b71c4bf5c41c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         72:f1:b9:d4:b0:38:38:28:6d:5d:fa:2b:cf:49:fe:97:2f:b7:
         fc:50:3e:b6:ff:c5:50:b2:c5:05:61:de:77:9d:a9:b7:bd:b7:
         48:a2:cf:e4:c8:3a:91:57:60:d2:ae:d2:ce:03:46:68:38:dd:
         79:c5:59:7f:43:bf:2a:bc:fc:45:82:b1:bb:62:2d:9f:ab:c1:
         7f:9b:59:2c:7c:5a:c9:f7:00:07:df:d6:b7:0e:e3:ce:14:a1:
         98:fd:8b:b6:bd:2e:f9:7e:30:35:28:d0:08:4e:1e:bf:e6:b3:
         12:50:1e:96:4b:f9:38:29:dd:72:b1:66:bb:12:ab:87:ef:9e:
         50:9a:65:c3:c0:89:67:49:b1:bb:aa:43:6e:82:e9:1a:a6:8d:
         07:56:8d:38:fc:64:b7:13:5b:9e:92:c2:f9:20:36:59:2f:e5:
         95:50:5f:66:1f:db:5e:65:27:8f:15:9b:0f:a1:66:f1:3d:30:
         58:7f:4a:2f:89:37:a1:87:ab:b0:a0:9c:c9:57:3d:5a:c8:82:
         db:dd:7b:c7:cd:93:5c:96:ee:19:99:05:eb:93:9a:37:d4:1a:
         c6:57:1d:a8:72:90:57:f2:c8:33:01:11:52:4a:9f:bb:16:82:
         99:e9:b6:4e:75:d7:01:b8:46:52:b8:ca:8c:25:d4:73:28:42:
         88:8e:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:54 2024 by rpki-client on console-ams.rpki-client.org