Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/970115b3-ed25-4bc3-9ef6-b221db00b330.roa
File:                     970115b3-ed25-4bc3-9ef6-b221db00b330.roa (raw, json)
Hash identifier:          QHFYBhYsr+FSSwvM3nlyCaq+alIyUQCn8GEOKmc+uHQ=
Subject key identifier:   AE:F2:CC:00:16:59:86:CA:60:C0:26:52:CC:55:5C:90:13:70:AC:E1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A3D2B5FF8B6B49DDD8EEFC5C78FC496EBDCAF55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/970115b3-ed25-4bc3-9ef6-b221db00b330.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.254.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3d:2b:5f:f8:b6:b4:9d:dd:8e:ef:c5:c7:8f:c4:96:eb:dc:af:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=f5cbaff3beeeab17b3d33e68899e5134872dce2fa0af0f13026b4045a03802cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:68:6a:6f:4e:5b:31:65:2b:9a:f0:24:c4:
                    4e:56:3d:a5:bf:be:e7:49:96:49:4c:c5:32:f6:c8:
                    22:75:6c:50:f2:1c:97:04:c4:66:26:b5:39:ea:d7:
                    eb:a5:69:61:6f:82:5c:42:ba:92:93:0e:8b:a6:b2:
                    fb:f8:9b:e6:51:65:0e:89:47:0e:57:e6:f3:9a:94:
                    fe:ba:33:d3:f2:4d:aa:cb:ec:31:4e:b5:f9:21:3a:
                    72:ec:9a:f8:88:95:dd:83:cf:b4:bf:38:91:40:3b:
                    e4:b5:cf:1d:af:ff:28:41:e7:93:06:6c:79:76:34:
                    3a:af:38:e7:0a:24:9b:3f:62:74:6c:9e:f0:53:4d:
                    0b:20:31:dd:43:6f:c7:62:19:b3:b1:1e:e5:1a:0a:
                    fb:c1:fd:c6:c3:85:dd:ed:e3:75:99:9c:a6:b7:3c:
                    df:55:45:a8:51:b1:9c:d0:0f:6d:f1:83:a6:e6:14:
                    5e:fd:3f:ee:b3:46:ee:17:91:13:64:b7:ee:cd:81:
                    3f:88:8f:bd:83:6a:5b:de:ae:5c:7e:ac:16:0b:4a:
                    36:a0:43:3f:83:6a:87:06:35:a7:a6:9a:53:7f:ca:
                    6c:b2:2c:5d:2b:69:a8:84:45:24:44:b4:6b:dc:59:
                    f7:76:4c:2e:af:30:cd:53:b8:df:df:fc:ad:bf:c5:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F2:CC:00:16:59:86:CA:60:C0:26:52:CC:55:5C:90:13:70:AC:E1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/970115b3-ed25-4bc3-9ef6-b221db00b330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.254.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:fd:2d:7e:95:8b:14:da:30:e8:8d:e6:f6:bb:b2:77:f2:
         cc:e2:52:f6:4c:2d:95:43:64:14:31:d9:9d:4c:21:50:64:76:
         38:42:87:e1:a8:bc:06:85:98:61:3a:f1:a7:68:e5:ca:5c:00:
         b5:f9:9c:c3:83:dc:a3:50:da:f4:e1:60:11:5f:f1:fb:3d:10:
         6b:64:2a:ef:fa:9c:8e:ac:04:a5:30:1c:78:72:ff:88:6c:07:
         d0:32:71:3d:f2:78:21:6a:a1:80:0b:66:28:12:7a:aa:b1:21:
         b0:63:9a:9d:c8:02:41:cf:b0:6f:50:19:39:c1:75:51:37:3b:
         d6:92:7d:16:33:12:cb:89:ce:58:12:ec:73:ae:c8:95:86:8d:
         37:50:8f:7d:8a:22:07:39:27:3e:91:1e:33:bc:fa:b3:5f:cb:
         5d:e2:89:ab:c2:d2:be:fc:04:bc:2a:cb:9c:9d:08:21:db:ff:
         eb:b1:4d:45:07:28:e2:15:cc:87:20:6a:75:50:ae:34:97:33:
         77:fa:ba:97:02:39:ea:48:8c:a4:77:98:30:6a:63:9a:b6:bc:
         f0:02:91:07:cf:90:d6:3a:a6:bb:61:b9:d3:f5:49:ee:ef:ea:
         4c:b1:ae:2c:a8:c3:ce:f8:58:df:6f:64:4c:65:04:54:41:50:
         47:ff:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:57 2024 by rpki-client on console-ams.rpki-client.org