Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d44c8318-9fb6-4a82-adee-e9bf88fde75b.roa
File:                     d44c8318-9fb6-4a82-adee-e9bf88fde75b.roa (raw, json)
Hash identifier:          KR0tBci9gOcxkQafEIor0Cz1M+RURI+kFTI0p5z9PCo=
Subject key identifier:   83:63:20:4F:EC:C6:84:9F:E2:18:2D:6E:6F:34:23:7D:C7:53:AB:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C79729F6B7CD5895984DC22D638291521210BED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d44c8318-9fb6-4a82-adee-e9bf88fde75b.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.231.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:79:72:9f:6b:7c:d5:89:59:84:dc:22:d6:38:29:15:21:21:0b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=2a01e285ec229867ff14aa379e5cdd07ab6e941664da7958b303735d4937c410, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:84:19:8a:11:8d:88:a7:33:25:ea:01:bb:
                    95:51:e2:84:46:ba:fa:db:63:68:8e:01:26:38:68:
                    5e:e1:99:85:57:57:f4:67:52:6d:a5:ef:d6:24:e7:
                    03:8e:1f:da:40:b9:bb:0a:8a:a7:47:19:c2:fb:e7:
                    c4:79:b3:11:47:a7:0c:1c:3d:01:80:df:c4:bc:33:
                    f8:1a:6e:e2:75:bd:54:82:10:1e:ef:a2:e8:24:b9:
                    c0:f7:75:01:cd:e7:48:91:70:56:ad:2e:4c:e1:7b:
                    61:f7:f3:20:60:c7:69:ec:66:97:d8:8d:58:01:a3:
                    6e:0d:21:af:b9:71:8a:f8:36:3f:b7:1a:2c:70:7a:
                    d4:56:a7:e8:7d:68:fc:8d:48:59:44:05:76:41:1a:
                    7c:17:59:82:96:00:b4:96:03:ad:e9:5b:e6:8b:b0:
                    88:4a:cb:cb:8e:54:4a:a0:2c:78:1b:da:1d:74:f9:
                    c9:c1:72:c6:c0:bc:fc:c3:48:82:55:cc:64:19:61:
                    55:ae:ec:4c:ba:2d:8e:d2:38:1c:bb:09:a1:10:ad:
                    5f:6f:0d:3a:9f:99:21:50:07:43:71:21:30:bd:8e:
                    8a:8d:28:8d:b5:09:62:01:5b:26:55:b0:39:14:99:
                    27:6e:0b:0a:70:7c:4c:e5:c3:b9:79:86:72:29:59:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:63:20:4F:EC:C6:84:9F:E2:18:2D:6E:6F:34:23:7D:C7:53:AB:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d44c8318-9fb6-4a82-adee-e9bf88fde75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.231.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:a1:53:5d:94:c6:d7:1d:8a:06:a8:4d:e1:69:61:03:38:
         16:bf:cc:cc:22:70:be:61:77:a5:bb:28:59:c3:07:53:88:c3:
         dc:d1:1b:65:f2:cd:8b:56:76:2c:9b:7e:01:8f:b0:f3:ba:52:
         cf:ac:8d:f3:53:e7:13:7a:8e:05:81:54:60:27:34:4e:ff:0b:
         ab:46:07:1f:99:02:d1:31:7c:bb:46:98:5d:37:86:8f:49:4f:
         83:1e:fd:79:3e:98:e5:6e:3d:1c:be:9d:be:fe:4f:9a:80:b7:
         00:a2:8b:91:6b:13:f7:6e:a1:0f:c1:96:71:39:d9:cc:87:0c:
         d7:ec:28:37:51:64:99:ce:e5:dc:2d:3d:05:52:ba:1f:65:4e:
         4c:14:90:76:f4:90:96:93:e1:60:c9:c4:c6:04:00:4c:23:1d:
         68:b9:34:26:0c:e9:c9:14:b8:c0:11:c3:f6:db:da:ac:1b:55:
         05:8c:19:2b:e6:c3:dc:66:0c:31:05:66:e7:bf:0b:6b:86:3c:
         73:ed:e6:f1:38:07:aa:1d:92:b4:73:69:54:2a:1d:62:eb:44:
         37:0a:f8:b7:8b:96:37:39:c9:31:41:bd:67:f6:78:cf:40:af:
         72:de:83:03:69:33:48:3d:84:94:25:f2:5b:25:d9:56:68:e8:
         3c:c2:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:33 2024 by rpki-client on console-fra.rpki-client.org