Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa
File:                     b50e29db-8ea8-465e-b77b-6bb4903e7932.roa (raw, json)
Hash identifier:          WSWFaU0ibF5dPTBrZTTHgAF9Y1PuKquSjrot4JMbFiE=
Subject key identifier:   40:4D:FD:BC:F0:47:0E:F3:80:CB:07:4B:05:1A:AE:DE:73:FA:C3:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1220EA3DED70F9EBF324A4A6D8DB4AAA2BBAF1EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.215.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:20:ea:3d:ed:70:f9:eb:f3:24:a4:a6:d8:db:4a:aa:2b:ba:f1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=8cbc220bec77fd6c0ef88c7ddced4b7939ec194e5fb1536254bd30b21c49cb52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:8a:91:2a:d3:1a:47:5b:c8:20:b5:58:fb:
                    97:23:22:75:49:49:1e:c7:73:20:f6:b7:dd:3f:10:
                    df:35:49:fc:6b:78:6d:79:2a:94:85:30:ed:ff:d4:
                    5b:63:a6:4e:cd:e7:54:73:b0:dd:99:17:ac:ea:55:
                    9f:b2:2e:67:a1:bc:94:13:d6:02:1c:f1:1a:43:2c:
                    21:c8:fe:bf:e8:26:d3:7e:4f:ff:83:c1:16:cf:f7:
                    ae:d0:e4:22:7a:cd:dd:1c:fb:fe:20:1f:89:cb:5a:
                    c6:17:0d:ca:33:82:e2:39:b5:88:99:7a:0e:66:8c:
                    fe:98:fe:3a:be:6a:35:46:f9:0b:d2:39:53:1d:ac:
                    28:d7:eb:be:1c:76:ce:a2:1e:cb:14:a7:e7:2d:97:
                    ae:62:76:8c:93:32:f4:22:42:21:f0:e7:af:3e:e2:
                    b2:ad:01:81:08:78:71:28:71:a5:af:62:93:c6:17:
                    dc:f9:e7:69:cf:76:51:b0:41:9d:43:88:40:e6:ad:
                    37:7f:b5:4a:34:a7:da:52:62:bb:32:c3:fe:32:08:
                    b3:2d:f3:2e:76:19:2c:6a:e4:d2:11:67:0f:54:5e:
                    fa:08:54:58:74:97:ce:c5:fa:e4:70:c4:69:a4:f2:
                    ae:19:73:2a:26:52:97:0e:d6:57:67:75:fa:de:e2:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4D:FD:BC:F0:47:0E:F3:80:CB:07:4B:05:1A:AE:DE:73:FA:C3:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.215.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:41:05:60:52:92:3c:09:8d:94:1e:20:10:9b:d8:30:d3:
         c4:8a:50:af:c0:4f:d2:87:72:21:83:74:2a:60:38:c5:53:bb:
         3a:25:42:25:f4:0c:5b:1d:6d:47:b0:b0:69:4d:76:be:62:7c:
         ec:c2:60:3a:29:32:63:13:58:95:aa:c4:68:21:cf:a7:68:32:
         66:42:a7:54:6b:17:64:5f:4a:9b:f9:44:0a:8f:22:19:e4:32:
         d4:60:aa:b1:79:26:47:b7:63:89:d8:6e:91:d1:e4:25:83:fd:
         8e:95:6a:cf:51:44:9a:70:7c:14:38:71:4c:d5:45:e4:93:9a:
         06:94:b7:a3:07:f0:82:18:43:75:a9:3d:36:5a:4c:bb:0f:e3:
         ab:2d:d4:f8:c3:53:57:09:71:8d:9d:b1:44:e8:1f:95:10:69:
         37:ab:8a:fa:6d:61:4e:22:2f:9d:79:55:83:ba:35:d9:55:0b:
         8a:13:03:e7:dd:51:8f:c1:58:0d:72:03:97:c5:04:73:32:13:
         f8:f7:d0:cd:23:a4:77:c7:dc:64:1a:b3:eb:d6:42:61:26:30:
         37:77:56:18:27:c3:b0:f9:a6:5b:08:07:d7:74:22:2b:22:b1:
         4d:51:f2:94:ed:89:90:11:9f:dd:db:9e:fd:ec:de:b1:6b:0e:
         ba:35:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:27 2024 by rpki-client on console-ams.rpki-client.org