Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca9077da-6c69-41b8-b08a-c3dba5a251d5.roa
File:                     ca9077da-6c69-41b8-b08a-c3dba5a251d5.roa (raw, json)
Hash identifier:          cufCd7HKlkAG9mUK3Ruat1fvpfAyVdjOhExCEV3veOA=
Subject key identifier:   B5:20:41:BC:98:34:FF:4A:31:0F:D1:CD:52:66:A3:23:5D:A5:5A:AD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F50E22469A4318F01891BBDE36A17EB4E7A9586
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca9077da-6c69-41b8-b08a-c3dba5a251d5.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     6167
IP address blocks:        139.56.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:50:e2:24:69:a4:31:8f:01:89:1b:bd:e3:6a:17:eb:4e:7a:95:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=1db75ae1107b71f745c02e0dd7c3bae19ed221532195a7f0cbb729d6d67843b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:0a:1e:37:64:ef:bc:a4:f7:29:cf:ae:36:
                    3c:f1:cc:4f:09:f4:23:5f:70:a7:13:5e:fc:92:43:
                    a1:2e:86:49:7d:7a:0c:38:36:3b:99:b4:f2:c9:78:
                    e3:35:08:82:61:1a:9b:f3:e6:88:f6:4c:04:88:46:
                    18:68:8c:07:61:0a:07:0b:57:c9:a6:85:02:f0:34:
                    11:9b:ea:0b:fe:52:f2:f7:1f:4d:f9:54:18:3e:1a:
                    8e:fc:05:51:35:ff:eb:51:17:c6:78:21:ed:5c:96:
                    ff:16:69:5d:2d:a9:cd:00:f4:01:7d:d8:9c:89:5a:
                    fa:56:ae:04:f5:2b:b9:36:c4:ba:68:d8:cc:46:1b:
                    cb:5f:6d:a5:ba:aa:55:8b:1b:a3:f7:4c:d8:fc:4b:
                    58:42:90:55:02:3e:20:fb:04:84:b9:20:0d:66:e1:
                    ae:9d:33:08:08:02:de:8c:c8:4c:d0:49:f1:81:f6:
                    3c:34:93:65:ce:89:75:69:83:89:49:79:ab:07:9f:
                    f9:51:41:73:2f:d7:93:42:e1:5b:7c:f9:90:8f:c0:
                    23:56:20:1f:47:50:51:38:6e:51:1a:04:f3:77:bf:
                    e6:19:bc:72:0d:d4:9d:f1:cd:73:5b:2b:82:15:98:
                    e3:3f:68:78:68:48:3c:7d:ff:6b:c0:37:91:23:54:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:20:41:BC:98:34:FF:4A:31:0F:D1:CD:52:66:A3:23:5D:A5:5A:AD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca9077da-6c69-41b8-b08a-c3dba5a251d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:d6:9a:e9:96:b5:cd:25:37:10:96:ee:33:d5:a5:b8:46:4b:
         1e:50:0e:2a:fb:fd:e1:13:66:aa:92:ba:36:ae:ac:54:2d:45:
         8b:f2:51:5b:1c:44:76:69:6b:7b:e6:f3:bd:8c:22:2d:18:b5:
         a7:90:cb:6f:9b:76:a6:62:f1:00:32:b9:2c:e1:fc:97:fe:e9:
         b1:1f:cc:cb:ef:49:a0:b5:ed:c8:76:62:c1:ee:7b:0c:bf:0e:
         32:e0:a8:4c:4e:0c:84:36:de:50:b6:3a:32:60:93:4d:0b:a4:
         e7:68:4c:37:84:54:4e:9d:f7:ce:cb:b3:7d:67:24:00:83:aa:
         92:e6:4e:e3:72:61:83:e3:d0:40:c7:05:6e:43:91:e3:9a:d1:
         00:8f:1b:98:77:f1:50:36:bd:3e:e7:1f:62:97:15:37:3a:76:
         f5:ac:cc:c6:6f:d3:0f:a9:22:69:1b:2a:28:52:49:7d:58:93:
         28:f4:c5:b5:f9:2a:87:70:f6:b5:11:2f:b4:af:92:94:bf:44:
         a1:5e:9a:64:38:d9:aa:32:2e:75:d9:65:f0:6d:76:56:db:52:
         bb:7c:6e:cc:48:e8:84:1f:31:17:2e:93:2b:da:3d:70:bd:fa:
         e7:48:b4:36:58:f5:bf:7f:13:7a:c3:4b:3a:f1:04:91:b5:0b:
         df:21:ef:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:13 2024 by rpki-client on console-ams.rpki-client.org