Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a34f9a6-7325-43d5-bbdf-7c482123b59f.roa
File:                     9a34f9a6-7325-43d5-bbdf-7c482123b59f.roa (raw, json)
Hash identifier:          63LbrEIpjkMLqWFokQasS/1g4d41SftWPL2LvmDbShc=
Subject key identifier:   6F:A0:E5:E1:5F:DB:24:99:D9:70:4C:86:66:BA:3E:47:D4:38:BE:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45E44CE5BB556BEBD06E1153AD2CC849D9867B47
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a34f9a6-7325-43d5-bbdf-7c482123b59f.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.240.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e4:4c:e5:bb:55:6b:eb:d0:6e:11:53:ad:2c:c8:49:d9:86:7b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=e4d8f3a7341eb68212810f8393b75a9fa3c1a3845b0cb705453675f2618eafc0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4c:8a:85:41:40:bd:94:46:9e:de:a9:02:1d:
                    10:8b:d2:43:87:c2:d4:7d:3f:2d:e7:fe:c8:e4:a6:
                    22:c0:90:15:82:17:34:a5:91:01:68:87:be:ba:5c:
                    37:af:de:4e:17:12:7e:bf:ca:9d:c9:ca:06:ab:30:
                    55:06:4f:73:a0:dd:b8:2d:7b:a6:04:b6:a7:a3:ee:
                    2f:73:2e:07:6b:0d:ec:78:64:81:af:dd:9b:d6:62:
                    6c:3c:81:8c:6f:72:32:28:4c:ac:0b:0f:74:72:08:
                    68:9e:e7:37:b4:50:2b:64:4f:c6:f0:a9:19:f9:fb:
                    df:c1:4e:49:b9:15:1b:a4:ce:2a:fc:3b:66:90:7a:
                    cf:b3:7c:4b:f3:70:77:12:98:f3:8e:29:c0:4c:59:
                    23:63:66:56:d1:b9:b9:79:97:5f:cf:75:1b:3d:f9:
                    8a:e6:1d:99:c1:c1:aa:6d:87:62:26:3c:4f:7b:ca:
                    40:ae:25:41:98:42:15:1f:48:6b:58:07:59:47:1b:
                    fe:b7:d2:f3:e1:bc:c5:69:b3:a9:e1:3e:5a:e0:7a:
                    48:4c:ee:7b:20:55:68:a8:65:b9:2f:c1:0a:4d:47:
                    a5:b7:85:68:4c:23:8e:7d:ac:49:1f:c8:08:3a:5d:
                    43:70:ef:74:ad:ac:5e:af:db:0b:ae:eb:15:7a:d0:
                    fb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:E5:E1:5F:DB:24:99:D9:70:4C:86:66:BA:3E:47:D4:38:BE:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a34f9a6-7325-43d5-bbdf-7c482123b59f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:d6:5e:75:ff:3b:b4:16:cc:3a:37:a5:8b:ce:00:f9:64:7c:
         7c:79:ce:f4:21:5c:96:00:9b:9a:2e:fc:f9:0f:a7:b4:2c:38:
         55:17:8f:67:dc:93:28:0a:bf:94:ee:b2:f5:69:dd:0f:49:d3:
         ac:6e:fe:18:69:77:5f:51:95:ab:17:c9:91:e8:52:6f:7e:60:
         5b:23:89:ea:46:d0:c9:92:6f:3d:fe:20:30:a2:02:23:11:01:
         09:95:6a:cf:0f:6a:60:1c:15:2c:b0:33:13:fa:3c:3f:72:8a:
         65:c9:1b:7f:64:06:f7:d6:41:63:21:4b:b4:45:2a:fe:fe:01:
         28:53:c2:a9:c2:56:c0:8b:65:e7:3c:c0:a3:82:95:00:c7:03:
         e4:33:21:fa:14:ca:07:0b:fe:28:3d:06:73:56:8c:aa:36:3e:
         77:e5:9c:f7:f3:07:2f:b5:87:83:31:13:70:1b:59:e9:ed:b6:
         7f:90:41:79:3f:a5:db:75:45:93:8f:c3:ed:73:f0:66:80:ac:
         24:60:a4:c0:10:a9:7b:d1:1f:49:3a:83:7c:bc:a2:20:6f:5c:
         45:0e:f5:5b:64:d9:83:31:4a:fd:c8:19:a4:84:90:5d:bf:63:
         fc:01:b4:49:cc:9e:34:1f:8d:18:4a:d6:7c:5f:2e:03:dc:78:
         c7:58:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:39 2024 by rpki-client on console-fra.rpki-client.org