Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94a7c917-6869-4830-9bca-db6ddd98328b.roa
File:                     94a7c917-6869-4830-9bca-db6ddd98328b.roa (raw, json)
Hash identifier:          eqe6rQpkEEjRC1/jFIXOVOcPOuEs2Lf2EMV4IWcGirw=
Subject key identifier:   63:37:4B:A2:38:D3:08:49:D5:F1:B1:3F:4E:9F:7E:42:4E:A8:E3:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2140A4F9D611F043393B2CF5069915CF3524AE87
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94a7c917-6869-4830-9bca-db6ddd98328b.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.110.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:40:a4:f9:d6:11:f0:43:39:3b:2c:f5:06:99:15:cf:35:24:ae:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=47b509723a0c5a3c3e9875c1bd1dd3075f96fd6ef50e8efdd62aece078be677e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:78:38:b7:37:11:a8:27:b7:ab:52:5a:7b:
                    ba:3d:c6:e0:2d:dc:09:03:8a:47:43:73:73:fa:74:
                    d2:cb:6f:d1:e5:10:8b:4e:f5:15:26:ce:a6:ff:ad:
                    65:15:2a:ec:e2:72:a8:82:13:ba:d2:47:42:18:49:
                    54:c3:e3:f6:56:f4:aa:00:1b:83:2f:d7:86:6f:5b:
                    19:e7:17:4f:2d:2e:6a:58:f1:da:09:da:00:d8:7c:
                    df:6e:37:f3:1b:fa:8c:14:12:80:5e:82:39:61:99:
                    05:56:86:03:99:f7:1f:bf:1f:59:d2:47:fb:ab:a1:
                    a4:c0:7f:e4:19:37:6f:78:da:90:22:cc:44:2e:02:
                    9b:1a:1e:30:ad:40:f1:7f:76:a2:2b:73:1a:eb:11:
                    f4:68:50:b4:76:00:ed:32:16:27:14:af:15:45:96:
                    67:4f:cc:0f:41:c0:85:6e:e4:31:f4:14:7d:2f:07:
                    3b:74:48:4c:bd:ed:a2:e4:e2:34:4b:c9:d5:ee:d7:
                    94:ef:02:6b:99:de:68:89:93:25:cc:33:69:09:6c:
                    67:63:b8:d2:76:5d:15:6a:4e:a7:56:25:97:c4:7c:
                    20:65:dc:03:69:48:28:ca:98:9b:92:ba:13:39:10:
                    06:77:23:1d:22:91:6c:6d:e3:a1:33:5a:cb:0d:96:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:37:4B:A2:38:D3:08:49:D5:F1:B1:3F:4E:9F:7E:42:4E:A8:E3:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94a7c917-6869-4830-9bca-db6ddd98328b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:97:ec:04:de:07:6c:5b:25:fc:d4:bf:2a:5f:50:ef:12:e2:
         f2:5f:cc:9d:69:74:38:66:a3:af:26:39:36:fa:55:d5:47:d8:
         df:2e:33:4c:a9:47:a0:2b:8a:55:f9:43:50:28:93:7d:9c:ef:
         52:0c:23:e1:0f:19:5a:00:a0:13:32:80:16:6a:cb:1e:bf:b9:
         fe:1f:4f:1b:02:0f:d0:09:49:97:77:be:75:0c:c3:74:9f:7a:
         7d:ec:3b:f1:45:43:ce:5c:33:79:6c:e9:32:ce:59:e5:47:e3:
         20:57:04:03:e8:bc:9e:b8:95:a5:a0:e3:cb:27:3f:5e:19:40:
         d4:50:55:8f:f6:02:f4:ee:1e:06:e6:09:8b:30:e0:9c:45:a3:
         0b:04:65:70:1f:fa:7f:e0:f3:b8:f8:9a:7b:fe:a5:bc:8c:84:
         a9:97:31:8b:74:1b:df:ee:63:d1:2f:95:08:f5:9b:e2:27:8c:
         2a:23:64:17:fd:15:23:50:d0:34:1b:86:fc:7f:73:21:8b:22:
         12:16:94:2c:b2:dd:fd:1c:c4:65:cd:40:3f:35:c4:6e:86:4c:
         91:11:f7:73:6d:42:00:25:68:4d:d3:f9:ef:cc:fa:df:02:fc:
         64:e2:6b:86:b3:a0:cd:64:94:91:5c:5d:ab:47:6d:da:c9:1d:
         1d:c8:d6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:17 2024 by rpki-client on console-fra.rpki-client.org