Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a62a997-9b7b-441a-b9b2-dc02180d8cf6.roa
File:                     9a62a997-9b7b-441a-b9b2-dc02180d8cf6.roa (raw, json)
Hash identifier:          /lJHY6b9BrPjBjbP/co/FkYMRbPo5kabyCpwecRRGhQ=
Subject key identifier:   95:51:51:A7:54:61:B9:E2:F8:14:D0:B1:BA:48:72:84:04:D5:99:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       175F11F57A5F86CD9FD31E72FDFB77E4B7921A92
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a62a997-9b7b-441a-b9b2-dc02180d8cf6.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.190.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5f:11:f5:7a:5f:86:cd:9f:d3:1e:72:fd:fb:77:e4:b7:92:1a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=fe30622da03c39b14f468cbe2231e59479e8d7661054d3a5c56c40f5d67e8f33, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:79:40:b6:8d:90:06:66:42:9a:a9:2b:30:
                    c4:68:67:7b:8f:d4:8f:56:a8:34:13:ca:cf:5a:9b:
                    7f:7d:63:9f:a2:d7:58:2c:af:96:fd:05:18:7d:f7:
                    45:31:67:bb:1c:05:8e:ad:76:2f:e4:d9:48:a1:86:
                    c0:d8:dd:45:2b:12:73:18:03:e6:3b:8b:96:a0:17:
                    dd:29:8e:1d:b4:bc:e8:90:96:b3:a2:70:22:a7:42:
                    02:58:d5:37:2a:52:e1:b0:0f:53:a5:26:70:a9:d6:
                    65:df:d2:75:e6:aa:ee:b8:e5:08:01:aa:33:ef:46:
                    b7:71:4e:6a:c0:f8:1f:5d:4b:54:76:87:4a:7a:fe:
                    2b:d4:43:40:81:76:fb:65:93:94:c6:36:b8:a9:69:
                    6e:6b:6e:cb:5a:b7:c8:8e:b4:bc:22:29:30:87:02:
                    4c:e1:bf:5c:51:a4:99:d3:dc:c1:3c:db:12:d6:4a:
                    13:44:4e:17:52:5d:19:9b:d1:25:ba:99:e8:5d:e3:
                    cd:cd:26:85:fe:9a:8a:2c:f5:a5:85:06:de:80:c3:
                    d5:bf:95:0e:7c:23:29:f2:c8:5e:fc:30:26:21:b8:
                    85:04:de:b7:e0:31:3c:0f:5c:d8:1d:48:9c:49:14:
                    78:27:eb:bb:81:a0:4d:4c:82:ef:a5:02:70:c7:70:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:51:51:A7:54:61:B9:E2:F8:14:D0:B1:BA:48:72:84:04:D5:99:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a62a997-9b7b-441a-b9b2-dc02180d8cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:5d:e7:c0:17:2e:d0:a0:4c:64:e2:17:08:f9:40:e5:7e:67:
         5a:77:0a:16:92:7a:70:1e:a2:74:78:e7:ad:b7:68:fb:fa:f4:
         55:83:2b:be:0b:31:c9:54:16:3b:ba:20:a1:2f:46:2e:fa:be:
         1e:b0:85:59:2a:55:46:83:b9:99:5b:ce:00:03:88:a3:23:dc:
         05:3f:47:52:61:7b:0d:ee:b0:38:34:65:41:97:72:13:4c:fe:
         76:51:0f:50:3c:d6:87:3f:99:ce:aa:32:9e:17:1b:23:21:34:
         2f:b9:bd:88:63:0b:6e:1a:c6:74:f9:72:47:d7:91:4e:15:ff:
         2f:5e:94:67:fa:59:05:53:63:49:06:43:92:c2:53:51:45:40:
         33:f5:07:ca:d6:49:b9:74:ac:1a:1f:db:15:61:dc:67:53:15:
         0f:82:11:b7:07:71:fe:d0:66:ad:59:4b:58:c0:6f:cd:9b:fd:
         a8:94:b7:bd:c8:63:a5:cc:7b:30:cb:c2:9a:ef:5d:d3:d2:88:
         68:e7:9b:25:1f:35:4b:b0:4e:95:c5:c6:01:ca:9e:e1:f7:cb:
         fd:58:56:0c:ef:9c:31:9a:5e:d0:e2:33:84:62:b4:bb:1e:da:
         36:5f:d8:90:cb:da:cc:ae:9f:8b:09:b2:d4:ba:9a:62:0f:f5:
         6c:32:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 01:49:53 2024 by rpki-client on console-ams.rpki-client.org