Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261541c-5236-438a-addf-e0379cb8428e.roa
File:                     e261541c-5236-438a-addf-e0379cb8428e.roa (raw, json)
Hash identifier:          zCoFSflMpCqhGPvBS9o5grcgAUhuoC3vShco3aRaq4M=
Subject key identifier:   F8:70:4B:B7:53:D4:0D:3E:B2:25:AC:5A:B1:BB:90:A8:DE:6A:FE:20
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       418A0A04DC1265B45D855CC962E5882525A2FE64
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261541c-5236-438a-addf-e0379cb8428e.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.162.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8a:0a:04:dc:12:65:b4:5d:85:5c:c9:62:e5:88:25:25:a2:fe:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=307175f65e9785f82871b0fa8d5869c3ef13f695012c740fe71e099836f56b95, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:08:92:a2:10:a3:c1:03:a4:74:75:1a:c5:
                    a6:f5:cf:72:9b:04:8b:e1:de:a4:04:8c:0b:58:c2:
                    1d:9c:79:00:93:51:2e:a4:1d:f9:66:b3:b4:29:f9:
                    7b:b9:3c:19:e5:b9:8a:9b:26:35:f5:78:c4:e5:af:
                    9d:6d:67:1b:ba:4e:e4:60:05:be:7d:81:d9:19:bd:
                    f0:66:90:47:3e:59:dc:f9:0d:88:3f:ca:a6:d3:fc:
                    32:2e:32:53:d0:42:89:41:eb:1a:53:32:a7:1b:92:
                    96:99:62:4f:e3:08:4e:8a:c5:91:40:d1:f4:5a:ae:
                    78:2c:7f:cb:0a:ab:19:fc:70:b7:54:9b:d4:ee:ab:
                    7e:9a:62:74:dc:1a:31:1b:88:f2:61:e8:32:39:29:
                    90:12:05:42:70:1e:b6:a8:7c:01:8a:e5:66:9e:41:
                    52:b4:4d:89:d0:0c:60:19:1a:b8:10:7f:1f:ed:fa:
                    c2:93:3e:5d:e4:6b:29:8d:f0:a8:90:f9:94:72:90:
                    0a:6b:a1:47:74:82:6a:17:e9:0a:75:4f:25:c6:27:
                    36:18:b3:a4:d2:2d:7c:be:39:18:cf:a7:6d:8e:26:
                    a4:c3:ab:5f:3e:d9:87:e4:f4:f4:63:a8:cc:3b:58:
                    00:c2:e7:7f:a7:d8:8e:3d:47:59:4b:c6:5e:cf:db:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:70:4B:B7:53:D4:0D:3E:B2:25:AC:5A:B1:BB:90:A8:DE:6A:FE:20
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261541c-5236-438a-addf-e0379cb8428e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:83:9d:99:14:cf:ec:a0:ba:c6:c7:3d:b7:e9:9e:8d:e5:eb:
         12:c7:20:60:34:4c:bc:a5:0b:fd:ce:29:51:95:f5:ce:64:4f:
         76:f3:cc:89:ea:d0:20:24:01:56:e7:ce:e1:a8:0e:48:85:4d:
         81:48:c9:bf:90:6c:70:f8:ec:39:0c:9d:33:de:6f:86:a6:58:
         0a:69:47:7f:8a:ce:d3:fa:bb:1f:32:7c:ca:ce:50:6c:ef:26:
         d0:f1:bf:96:79:09:29:98:ac:7a:ce:5f:1b:07:fb:08:fd:c6:
         5e:47:c6:78:b6:ba:10:96:41:48:9c:bd:e4:7e:10:ba:7d:e8:
         2e:20:f0:db:d7:2a:28:a1:e6:6a:3a:7e:fd:67:60:70:35:15:
         b9:8b:4f:75:e3:61:11:81:70:cc:33:74:74:f8:6d:3e:38:79:
         5b:f7:1b:36:b7:b4:17:6f:ad:46:8c:01:b9:d7:c2:55:4d:1c:
         c4:19:91:22:df:af:38:7e:f6:4a:9e:2e:f2:74:97:4c:b2:a9:
         0c:65:a5:2f:31:65:5e:39:21:cb:2d:b7:31:72:27:16:76:a8:
         91:9e:26:10:eb:4a:1e:f6:37:cc:7a:5a:a0:05:a1:08:e6:de:
         75:8e:0d:b1:dd:bb:f1:5a:e2:d1:41:fa:39:9d:bf:c1:0d:36:
         aa:f7:d8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:37 2024 by rpki-client on console-ams.rpki-client.org