Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7016da9-3ba0-49db-a184-72bb19d4a3c4.roa
File:                     a7016da9-3ba0-49db-a184-72bb19d4a3c4.roa (raw, json)
Hash identifier:          qjXQYbSkF3jb5vEaFpiZ/Jpk83go415VcztJP+zpQck=
Subject key identifier:   14:F8:A7:A2:87:4B:41:C8:2F:D0:F7:A6:25:A3:44:3F:66:00:F8:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60F8504956E5F500DBE2798E6D084116036CF964
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7016da9-3ba0-49db-a184-72bb19d4a3c4.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.212.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f8:50:49:56:e5:f5:00:db:e2:79:8e:6d:08:41:16:03:6c:f9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=8205d9c925ecfe57f79781d5462156e6a56a11b6b6e3b13879f6776c83c870b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:f6:6e:81:e4:a9:10:75:40:c8:61:04:f8:
                    7f:dd:26:b0:26:2f:73:c3:13:50:bc:6c:8f:aa:25:
                    fe:79:9f:09:94:5e:61:23:cb:1d:13:d1:e5:64:a3:
                    c3:b9:50:88:15:4e:e9:bd:13:90:f7:18:d6:e2:1e:
                    d5:1c:99:b1:3a:56:eb:ff:c5:35:d0:b7:7d:28:83:
                    da:a2:ca:ed:e4:db:c8:cf:49:2d:a1:1e:ad:e1:26:
                    34:99:bd:6b:18:25:ee:6c:75:5c:86:02:6b:74:97:
                    9c:ec:1b:e9:01:1d:fe:c6:b8:4b:6e:36:64:6c:84:
                    a7:3e:f7:3c:a1:71:b8:2f:19:8a:da:ec:0f:37:8c:
                    a9:79:2c:04:f2:8a:a9:20:3b:48:60:0e:31:81:e3:
                    b3:04:bf:e7:b4:60:e2:10:b4:d7:b2:67:59:c4:90:
                    e9:80:93:56:32:2b:35:64:62:d1:d5:97:90:ad:2c:
                    f0:65:5e:51:57:84:e5:59:cd:a8:07:cd:99:0b:5b:
                    b0:ba:62:e6:ab:e9:5a:be:d8:1e:c6:d4:41:7b:73:
                    ca:36:33:38:1c:ec:e1:f9:ab:67:28:43:49:00:0b:
                    4f:c0:9d:db:94:22:e3:b4:ce:8d:a5:b9:62:32:fa:
                    6a:9e:1c:1e:a4:55:28:97:53:15:8f:ef:09:02:d5:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F8:A7:A2:87:4B:41:C8:2F:D0:F7:A6:25:A3:44:3F:66:00:F8:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7016da9-3ba0-49db-a184-72bb19d4a3c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         93:4d:37:f7:09:c4:b0:98:e0:c9:69:da:63:c0:4f:d9:1a:7d:
         15:ee:b7:e8:f4:d0:1b:10:74:67:88:c0:fa:18:8b:9e:73:a1:
         f2:cc:e7:80:7b:37:40:9f:95:5f:32:dd:a8:1b:ff:b2:ec:78:
         3e:1b:38:a5:d4:33:95:b8:a9:5b:0f:1a:5b:d2:88:0f:0b:6a:
         d1:fc:e1:92:a7:83:c5:99:d2:8e:60:ae:ed:46:a4:6a:fc:ea:
         86:55:81:16:d2:48:be:c6:03:fa:15:86:d7:78:65:48:2f:f4:
         ba:1f:49:bc:ed:ef:f8:01:38:96:a1:ed:35:36:cd:b1:fe:1b:
         ea:37:05:88:41:5b:2d:7d:94:a2:37:78:03:32:ad:b6:21:af:
         9f:5c:ea:56:11:f6:3e:cf:34:cc:57:54:b8:7d:90:25:30:09:
         c0:e8:d4:f6:d4:d8:ad:50:1b:4d:42:ab:33:3c:dc:4a:70:be:
         c1:57:95:52:88:9e:da:b0:52:48:3f:3f:32:0c:19:55:df:44:
         6e:49:c8:0c:7a:8c:66:87:be:8e:20:74:6a:56:58:aa:d4:41:
         1f:8c:8b:c8:0f:e1:4e:b0:f6:ef:fc:53:bf:a5:20:fe:9b:73:
         b2:af:72:71:d7:cd:fa:7a:4e:05:a3:e4:26:f1:1e:61:f8:be:
         a2:b3:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:02 2024 by rpki-client on console-ams.rpki-client.org