Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d970cbb6-beb9-41ae-b26e-22b731e5667a.roa
File:                     d970cbb6-beb9-41ae-b26e-22b731e5667a.roa (raw, json)
Hash identifier:          7t9ud+QcxmFTiBFMI8GLof2x3DByMder9qEGlxXlRcM=
Subject key identifier:   9A:4A:07:51:6C:20:94:1A:5E:D7:56:E3:F9:3F:F1:08:87:11:42:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54BBC6437A0A517B2EE2888CFEA526F9681226CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d970cbb6-beb9-41ae-b26e-22b731e5667a.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.230.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bb:c6:43:7a:0a:51:7b:2e:e2:88:8c:fe:a5:26:f9:68:12:26:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=45e26bfa92f20db71c7d76dde3fb0c72880caea451d4b9a1283942577c7e8324, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:8a:34:75:cb:b2:13:93:a5:a1:c3:e5:4f:
                    93:d5:f7:e1:f8:6b:a0:e8:72:3c:90:a6:6b:e7:20:
                    5b:92:ce:0a:18:0f:d4:f5:82:0f:42:46:9b:76:c9:
                    b4:21:48:a1:a6:05:23:af:d4:38:f1:38:c6:7e:68:
                    ce:70:e5:b6:1a:12:30:a4:bf:ab:19:d7:6c:6a:16:
                    8d:bc:dc:89:f5:0a:c2:bd:14:c4:1b:39:3d:5f:d8:
                    89:3c:37:54:91:e7:61:2f:a3:6c:6d:09:fa:70:df:
                    e0:be:f0:55:fb:f5:61:94:34:25:bd:81:d2:d1:81:
                    8e:d1:02:16:2b:e1:5c:ea:b2:8c:21:ec:3a:9b:cc:
                    b0:8f:7c:69:23:8e:1f:a7:92:62:a3:ae:59:b6:d2:
                    3f:bc:56:1a:d6:ee:f9:1b:cc:6b:fb:d6:f1:c2:17:
                    8f:c6:79:05:07:e3:b2:3e:9e:d9:35:63:3f:f3:12:
                    3f:fd:d5:73:09:91:8a:de:b7:5c:3d:16:17:6e:40:
                    d5:52:e5:27:6f:61:b2:89:c5:43:c9:6c:d4:ad:54:
                    00:99:4c:15:98:d8:e6:00:a0:a8:7b:dd:38:4d:96:
                    3b:b2:7f:06:bf:12:1e:39:7b:2e:cf:d1:cd:6c:fd:
                    5c:ac:0b:5a:a6:d8:4a:54:89:d2:1b:a4:e2:85:a2:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4A:07:51:6C:20:94:1A:5E:D7:56:E3:F9:3F:F1:08:87:11:42:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d970cbb6-beb9-41ae-b26e-22b731e5667a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:04:26:7d:f5:23:2a:d0:a6:0d:88:21:36:2e:3b:48:a9:49:
         67:ae:60:49:ef:a1:3d:20:03:d1:5e:77:f2:87:0d:bb:6f:ad:
         6c:63:2e:b0:7b:3c:4f:b3:80:8e:c0:c1:a8:54:fe:30:0a:82:
         5c:9b:ee:e8:77:d8:d3:e8:4f:21:b0:6c:ab:f5:f3:19:95:5d:
         63:f8:bd:4b:d1:10:00:74:4c:92:2b:83:5f:69:a7:ea:bf:e8:
         d2:29:a4:97:8d:73:6e:46:a6:40:51:d1:8f:d0:d5:ab:48:78:
         be:6a:a6:86:37:ce:c7:b0:8a:81:f4:8a:43:04:f8:78:9b:25:
         0b:1d:ca:54:84:c6:4c:00:57:87:55:91:9c:fb:2d:f6:cb:73:
         49:ac:06:5e:73:db:f7:4e:b7:52:04:11:6b:b6:ef:58:9b:de:
         89:5b:c6:e6:57:dd:0b:70:54:46:24:23:47:93:ac:92:fa:59:
         3a:84:73:1d:57:1e:d5:9d:f2:b8:a5:a2:86:d7:8e:1c:d7:18:
         51:3c:18:4e:9c:56:08:84:4a:8c:c9:e5:d4:0c:a3:a3:4f:54:
         ec:15:54:27:92:2c:9f:00:da:cd:33:3e:63:9d:9b:c6:95:e2:
         5d:56:3d:47:88:48:de:f9:7a:aa:b0:d5:fb:1a:c9:b1:a8:0f:
         3d:fe:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:34 2024 by rpki-client on console-fra.rpki-client.org