Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91420aee-72b8-4a39-bf92-c3b468b68e0b.roa
File:                     91420aee-72b8-4a39-bf92-c3b468b68e0b.roa (raw, json)
Hash identifier:          scVS91KQ2QmB4043EZ5RsjpVf+ZXDC+KkZjkjaFrOqk=
Subject key identifier:   EE:10:0B:9E:F4:CC:28:03:D7:42:C7:D3:E5:F9:FB:F2:0F:62:38:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74EBA4C222DF70915E66BF6792F0DD1B7B9021CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91420aee-72b8-4a39-bf92-c3b468b68e0b.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.100.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:eb:a4:c2:22:df:70:91:5e:66:bf:67:92:f0:dd:1b:7b:90:21:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=61be3663cf6c0a3af8ce038213455639a6dea3cda3cd626591ca03c559c45b40, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:16:83:ad:0a:8d:84:e8:bf:0f:50:24:b0:
                    a2:d0:67:29:99:7a:47:9e:7e:26:47:49:6e:2c:f0:
                    95:86:e4:3f:c9:7f:43:91:2b:d4:c3:f7:0b:88:8f:
                    44:13:75:b0:3f:97:a4:59:34:8c:c1:bf:16:8d:ee:
                    fc:9c:22:1a:6f:e1:3f:bb:43:52:7c:3e:4f:41:49:
                    f9:b6:58:a1:63:7c:3c:f4:c8:d1:8e:50:0a:db:95:
                    a1:36:75:cb:4a:09:12:d1:4e:da:58:25:af:9c:d8:
                    1a:d4:ca:aa:ad:01:2b:37:83:67:5c:13:13:b9:60:
                    90:1a:77:8f:eb:0d:8c:60:aa:49:fe:31:19:18:54:
                    a3:65:ab:a6:26:98:ce:1a:e6:ce:d7:fa:92:68:ff:
                    50:ca:3c:0c:3d:9a:0e:a2:37:f4:72:b2:e3:b1:15:
                    36:c1:b4:64:45:14:fb:17:78:5f:03:e4:ef:8e:fc:
                    5d:4c:3c:d0:a8:0e:37:f3:0c:e0:3e:f5:12:c3:69:
                    ed:49:cb:1b:3f:6e:7c:22:ed:11:9d:0a:9d:0f:81:
                    70:2b:5c:60:2d:62:a9:7e:96:c7:ec:ab:0c:2a:26:
                    00:e5:f6:bc:a0:27:c7:e4:d7:cd:74:48:2b:2f:09:
                    1a:5b:90:2d:ab:ed:51:a1:76:1c:5d:2e:1b:f6:a9:
                    98:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:0B:9E:F4:CC:28:03:D7:42:C7:D3:E5:F9:FB:F2:0F:62:38:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91420aee-72b8-4a39-bf92-c3b468b68e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cd:12:7c:a4:fd:23:dd:24:bc:0c:8c:ac:1e:f1:2d:1f:33:b8:
         02:92:74:8e:d4:13:3d:7f:95:9b:89:a0:7c:d2:56:40:08:19:
         53:d6:ee:20:82:a6:a3:e3:c9:e6:58:bb:92:8b:3a:ab:cd:3a:
         8d:a8:7c:99:4d:a3:24:9f:a6:25:1b:95:a8:19:ab:a9:5a:ca:
         c0:f1:9b:b9:c8:af:0e:de:5c:5a:76:4a:e5:21:52:ee:58:f3:
         05:af:94:65:5c:fd:f3:8c:b5:28:21:c7:d6:00:e3:7b:7f:24:
         c3:5a:5f:83:aa:30:84:2e:e9:c6:20:3a:80:94:8c:c7:34:6b:
         15:e5:e6:b2:99:fb:96:78:10:30:5f:f2:0a:94:6b:1f:04:49:
         ac:b7:85:a8:d9:c8:67:d7:a3:f0:df:6d:a3:a8:58:5d:63:b0:
         bc:f4:bb:5c:02:96:c0:81:81:f7:3c:df:d0:1a:5c:41:c6:54:
         7c:21:39:31:d4:07:c2:f4:54:71:e6:77:f9:9b:5b:6d:8e:6d:
         ad:09:be:be:32:c5:a0:5e:b8:af:0e:df:c1:9d:03:3b:fe:ef:
         8c:4f:0e:94:03:39:91:3d:93:c4:68:4e:c9:f8:be:8f:40:99:
         43:e8:fe:7a:89:08:37:ef:ce:62:16:d1:f1:f5:c2:22:5b:39:
         e5:c2:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:16 2024 by rpki-client on console-fra.rpki-client.org