Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa
File:                     ee072b22-d511-4e36-bf63-9dea3fed9955.roa (raw, json)
Hash identifier:          0r8GX6rVrV4QoRyB/Mcb8ftbUhnWVW+jFtfzFrRl7+4=
Subject key identifier:   F6:71:30:F9:73:B0:85:68:35:9C:4A:F8:88:59:9A:F0:C4:16:74:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A43AB3FE9B298E7901F91AA7F880C8375A59243
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.40.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:43:ab:3f:e9:b2:98:e7:90:1f:91:aa:7f:88:0c:83:75:a5:92:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=8759fd7cd6dc2b507e5eaa79ddcb5cd071a1db642b8a961b8d06ea17d878cdb7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:f0:aa:7b:81:84:9a:fe:b5:48:f0:61:27:
                    20:d8:52:bf:81:8f:0b:a6:85:9b:2c:6c:53:6f:43:
                    48:00:60:ee:56:b9:b3:9a:d6:e1:46:8a:ca:f7:44:
                    48:04:84:5f:92:12:aa:40:73:25:69:9a:69:1a:0b:
                    db:fc:88:84:fb:21:e8:6e:cf:78:df:c2:94:29:69:
                    0e:b7:f4:9c:0c:8b:68:04:0f:b6:ff:7d:d8:1e:d9:
                    f8:2a:92:eb:e9:dc:93:ad:51:f7:c3:0b:23:49:81:
                    87:02:e8:68:4b:66:ae:95:51:db:7d:ca:c2:fd:1a:
                    ba:01:3b:fa:90:15:21:a8:99:60:b3:43:76:a2:e0:
                    ba:4a:ee:e6:54:7d:d0:f7:42:45:b2:cb:9a:27:d6:
                    65:29:59:8f:7b:57:70:8d:cd:4d:23:f8:17:36:8f:
                    65:54:65:4c:02:6c:2d:39:f0:0e:f5:70:21:dc:14:
                    ff:2c:93:27:97:0c:b6:d5:e8:91:77:06:f1:70:77:
                    b0:27:78:32:3a:3e:ae:5c:19:3f:c6:cd:ca:61:ce:
                    9c:7e:d8:12:b3:87:09:59:d9:a4:67:75:47:84:0e:
                    88:4e:a0:2a:a8:3b:50:11:7e:c6:fe:fe:24:07:a1:
                    7d:37:2d:94:37:be:ff:4c:37:90:65:5f:00:b0:d1:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:71:30:F9:73:B0:85:68:35:9C:4A:F8:88:59:9A:F0:C4:16:74:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.40.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:d1:75:4b:39:a4:05:fa:2c:7c:d3:0c:f2:83:be:63:a5:9c:
         21:c6:f2:9c:5b:ea:20:be:18:4f:2e:c3:59:85:81:55:d4:e0:
         cb:94:02:2b:45:73:ea:7e:65:15:b6:cf:5b:95:9d:7b:0f:6c:
         4f:08:0d:61:9a:70:54:12:f6:dd:fc:08:5d:16:96:f3:ed:fb:
         55:44:25:9e:f8:b7:20:84:41:22:e1:5c:5e:b5:8b:9d:da:eb:
         aa:c4:3a:b6:a1:db:c2:92:30:32:e9:ed:a9:c7:f4:e7:50:f1:
         20:b9:39:25:69:76:8f:49:b6:81:d1:1a:d9:13:79:75:e8:e1:
         12:5f:f2:13:d0:db:c2:9d:c1:b4:85:68:d4:cc:44:9b:9a:cb:
         db:a5:6d:26:1d:f2:7a:13:fa:d2:bf:b5:fe:70:91:11:f1:0c:
         1e:2b:b0:b7:32:53:c2:cd:49:42:86:53:cf:22:6d:fd:2b:57:
         fa:e1:49:12:bf:89:5f:e8:f9:99:e9:90:d0:9f:a6:d2:ea:17:
         23:c5:ea:b9:a8:d7:d4:04:c1:b7:f9:13:3c:3e:90:ba:8e:47:
         f8:a8:2e:8c:b2:5f:e4:cf:d9:4c:56:95:22:49:5c:5b:11:ac:
         81:ce:0a:3b:b0:8c:17:72:63:cf:d4:29:34:06:28:94:9c:48:
         5e:e3:6f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:40 2024 by rpki-client on console-fra.rpki-client.org