Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/943003eb-7a70-444c-b20a-e4b444965465.roa
File:                     943003eb-7a70-444c-b20a-e4b444965465.roa (raw, json)
Hash identifier:          9qonHZNJ7igx6YsSMAGfWFok94B0pSPD/htEAZTGKg0=
Subject key identifier:   7C:3D:FF:5B:21:F4:46:98:68:AA:FA:FE:34:BF:C6:7B:95:35:1A:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2911EB43110CA45196BDAF766BF33E951B97F23F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/943003eb-7a70-444c-b20a-e4b444965465.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.44.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:11:eb:43:11:0c:a4:51:96:bd:af:76:6b:f3:3e:95:1b:97:f2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=a46e19b9bc0ec53f46355c9f4e0bc8f234fa139f485d150e47959eae74691583, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:e7:a0:85:0c:fd:8a:c5:7e:7f:65:06:c2:
                    a7:30:7d:40:2a:b4:98:7a:ff:d7:9d:67:e6:76:34:
                    22:61:e0:09:ff:02:bf:75:22:7f:f6:ea:f0:8f:78:
                    2f:02:d3:c7:8e:2b:3d:bf:b1:1b:e8:9b:6a:c1:e8:
                    81:5c:ed:9c:c0:3d:21:ff:5c:e5:ce:b0:28:9b:17:
                    25:7c:41:c9:04:cf:78:16:83:ae:75:33:a1:d5:f6:
                    60:ad:16:fa:ee:35:0b:67:71:ed:ca:f3:23:ea:2e:
                    cb:cf:fa:a5:b1:3d:b1:2e:83:f6:45:8b:aa:08:8c:
                    d0:3c:8e:d6:f6:b8:a2:76:0c:96:de:92:fd:c8:3a:
                    f3:d1:83:4b:ee:9f:04:99:a6:4d:b4:b2:55:81:d0:
                    b6:85:94:ab:88:bf:22:e5:b4:1b:f4:06:11:65:8c:
                    e9:ea:cd:51:16:f3:aa:a8:0e:0c:5a:45:65:92:07:
                    36:94:dd:8e:bd:ac:d6:ae:98:52:2d:61:1d:17:69:
                    11:f7:31:9f:9b:00:7b:05:ee:b5:d4:7e:6b:c7:4c:
                    ef:10:3c:88:7c:16:bf:e7:b2:24:d6:68:ba:17:45:
                    9e:47:1a:23:cc:f1:e7:d9:79:48:53:52:9f:91:08:
                    4d:46:23:29:85:c6:a4:f8:60:62:31:c0:1b:c1:58:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3D:FF:5B:21:F4:46:98:68:AA:FA:FE:34:BF:C6:7B:95:35:1A:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/943003eb-7a70-444c-b20a-e4b444965465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.44.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:eb:ed:e9:fd:fb:17:2f:dc:6c:ee:75:8c:85:43:70:7a:46:
         15:0a:ac:d2:1b:a2:f6:7b:ff:9a:c0:ab:10:cf:e6:df:48:8b:
         c9:f5:91:77:b2:c6:1f:b8:da:e7:ef:db:c7:52:16:06:48:70:
         43:5c:d5:7d:8d:6d:2f:bb:1d:47:3e:1e:b4:c4:9a:44:ff:f6:
         c5:48:c9:c4:fe:e2:d2:78:30:a7:5c:62:5d:5e:f9:1a:e1:7b:
         1d:33:c8:6f:0e:7d:83:87:7b:c5:ad:0f:1b:d1:c6:51:05:73:
         ab:ac:de:d8:64:c9:19:d0:69:be:35:01:00:70:4e:46:cf:08:
         23:96:ee:b5:7a:b4:58:76:67:c2:ec:b7:fb:d8:84:15:9f:b6:
         3c:37:43:d0:af:66:4f:34:e3:53:7a:57:dd:da:58:91:9d:55:
         13:43:d0:ba:3f:7e:6f:bc:aa:c2:53:d5:c2:1b:48:37:e4:83:
         cd:b6:2c:a0:da:0e:89:da:1d:d1:3b:5d:50:01:e4:5c:3a:fb:
         4d:a2:7f:51:d4:c0:c3:60:ff:49:34:2b:63:bf:97:2d:df:3f:
         e6:e4:8b:75:80:dd:84:70:15:07:9c:e5:15:9b:a7:b5:ea:85:
         70:e6:83:14:af:a5:50:31:21:c5:a9:42:4a:d2:15:8d:13:af:
         74:ef:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:55 2024 by rpki-client on console-ams.rpki-client.org