Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa
File:                     a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa (raw, json)
Hash identifier:          68bnvN/SYvz3b7FBKbpPYl/eHWHFTSnY35pk4vrXI00=
Subject key identifier:   B3:F2:72:2E:73:7E:66:1C:F4:8F:51:F8:55:A4:8A:32:CC:2A:8F:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50BFC069B514D95E95A8A744B3252B31AB7792C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.6.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bf:c0:69:b5:14:d9:5e:95:a8:a7:44:b3:25:2b:31:ab:77:92:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=2074ac094229e14946c8f457c60ad0a786ab658aaa0958e135853a3a5bcd1a6c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:01:0a:84:3e:2d:bc:fb:d4:95:4a:86:36:
                    13:e3:e7:36:ec:06:24:f9:69:81:3b:b5:5e:3b:05:
                    b9:93:f6:48:0a:8c:eb:07:1c:26:87:e1:b3:db:2c:
                    5d:23:0a:78:a4:da:ec:35:e2:ff:5e:5d:de:4d:7c:
                    3c:80:f3:5b:33:76:c5:ea:78:e4:e2:38:22:61:19:
                    27:aa:2e:ea:b7:b8:6c:8f:f3:3a:8e:37:0e:b5:c4:
                    e2:74:46:e9:ed:a5:66:81:32:2d:1e:46:28:e7:0b:
                    b8:b4:08:b1:28:a4:5e:23:24:7d:a3:8c:54:00:82:
                    28:5b:73:66:2f:60:a8:a2:38:47:54:ef:82:4a:e1:
                    86:d6:58:1c:0a:57:e0:09:63:c7:06:1b:8a:0e:98:
                    e1:43:b1:91:19:a4:46:0c:d7:82:6a:07:05:89:24:
                    2f:1c:7c:44:dd:02:33:8c:fb:10:4c:de:df:ff:59:
                    5c:63:93:06:cc:de:58:26:f5:f2:47:c7:a4:2e:71:
                    fc:8e:4f:6d:e7:89:14:97:25:50:a4:b8:4f:d9:5e:
                    61:fa:fd:08:6f:39:e6:00:e9:1b:34:75:f3:18:e1:
                    95:53:2e:f5:2e:99:1d:bc:1f:7f:56:03:82:b7:3e:
                    b1:b2:e6:94:c5:49:7a:4b:5e:0d:5f:23:d6:ac:72:
                    50:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F2:72:2E:73:7E:66:1C:F4:8F:51:F8:55:A4:8A:32:CC:2A:8F:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:e7:30:f0:45:2d:16:d2:0e:63:fa:29:76:9f:00:c9:af:dd:
         23:d3:f0:cd:c1:8d:ce:6c:59:b6:5b:55:e6:79:3e:14:32:34:
         b5:50:0b:51:98:52:7e:e3:a8:06:91:55:f5:51:16:28:89:53:
         32:ab:28:bd:ba:96:75:95:38:21:83:b9:4a:68:8a:42:92:79:
         1a:d2:ba:38:75:fd:71:cd:5c:fd:85:b9:19:35:14:e1:09:e2:
         f4:a6:df:a8:cf:02:e2:6f:77:84:8b:3a:43:3e:34:21:69:0b:
         90:db:28:06:c8:b9:98:93:c1:cc:f8:48:1c:3d:4d:73:32:2e:
         f5:ee:42:b3:4c:56:86:09:6d:dd:1c:22:5a:cf:93:11:88:b5:
         a7:51:b8:7f:f5:b4:8e:4b:fc:9a:02:57:eb:de:6e:44:98:04:
         b0:57:0f:5b:df:58:64:0a:3a:d2:d9:f8:82:9c:97:43:aa:94:
         2c:88:86:8d:77:f5:37:31:f9:87:50:1b:46:d2:f8:61:34:27:
         a2:8a:97:06:82:3e:d5:35:a1:db:28:89:21:9f:d1:97:cc:78:
         11:30:d9:0e:dc:9f:22:26:22:f4:a3:14:88:e3:64:42:eb:31:
         39:1d:47:84:d3:99:5b:41:87:b4:65:c4:44:66:6b:4e:94:2c:
         50:6f:de:02
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUUL/AabUU2V6VqKdEsyUrMat3ksIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMDc0YWMwOTQyMjllMTQ5NDZjOGY0NTdjNjBhZDBhNzg2
YWI2NThhYWEwOTU4ZTEzNTg1M2EzYTViY2QxYTZjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCL9AEKhD4tvPvUlUqGNhPj5zbsBiT5aYE7tV47BbmT9kgK
jOsHHCaH4bPbLF0jCnik2uw14v9eXd5NfDyA81szdsXqeOTiOCJhGSeqLuq3uGyP
8zqONw61xOJ0RuntpWaBMi0eRijnC7i0CLEopF4jJH2jjFQAgihbc2YvYKiiOEdU
74JK4YbWWBwKV+AJY8cGG4oOmOFDsZEZpEYM14JqBwWJJC8cfETdAjOM+xBM3t//
WVxjkwbM3lgm9fJHx6QucfyOT23niRSXJVCkuE/ZXmH6/QhvOeYA6Rs0dfMY4ZVT
LvUumR28H39WA4K3PrGy5pTFSXpLXg1fI9asclDzAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUs/JyLnN+Zhz0j1H4VaSKMswqjzQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EwOGVkODU2LWU4ZGQtNGY1NC1iYmJmLWJkNzM3OTZiMGJjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4BjANBgkqhkiG9w0BAQsFAAOCAQEAHucw8EUtFtIOY/opdp8Aya/dI9Pw
zcGNzmxZtltV5nk+FDI0tVALUZhSfuOoBpFV9VEWKIlTMqsovbqWdZU4IYO5SmiK
QpJ5GtK6OHX9cc1c/YW5GTUU4Qni9KbfqM8C4m93hIs6Qz40IWkLkNsoBsi5mJPB
zPhIHD1NczIu9e5Cs0xWhglt3RwiWs+TEYi1p1G4f/W0jkv8mgJX695uRJgEsFcP
W99YZAo60tn4gpyXQ6qULIiGjXf1NzH5h1AbRtL4YTQnooqXBoI+1TWh2yiJIZ/R
l8x4ETDZDtyfIiYi9KMUiONkQusxOR1HhNOZW0GHtGXERGZrTpQsUG/eAg==
-----END CERTIFICATE-----
Generated at Thu Dec 26 01:23:36 2024 by rpki-client on console-fra.rpki-client.org