Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0589bc1-dada-4627-8535-78658bd02252.roa
File:                     f0589bc1-dada-4627-8535-78658bd02252.roa (raw, json)
Hash identifier:          KtscpXqkWCQgjnmCW9vtFIQzdvX3EUFl9j0mzwOG3f0=
Subject key identifier:   F7:3A:95:F0:44:09:97:5B:2A:17:D3:AE:9A:EA:F1:44:DC:D2:1A:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C2FF643262EC85A0647CDF1A2AD428EE1E2C6C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0589bc1-dada-4627-8535-78658bd02252.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.249.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2f:f6:43:26:2e:c8:5a:06:47:cd:f1:a2:ad:42:8e:e1:e2:c6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=71621a85954f72312f2342a8de03aa686e658673d44922670a78bf1fd993c770, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:0a:ee:b4:d7:0e:cf:10:cc:8e:f3:89:6b:
                    00:f6:d7:45:18:18:8f:23:f1:81:b1:30:a9:53:e1:
                    06:0f:69:94:70:4c:1c:12:a7:7c:8a:da:3b:8c:19:
                    f8:7e:5c:c8:19:ea:35:f7:15:52:22:30:a6:e1:5e:
                    fa:85:ca:8d:2a:12:fa:a1:2a:ef:12:56:0b:6e:39:
                    a4:d5:b5:c0:9d:25:39:71:39:ae:87:00:1b:a9:ab:
                    f7:70:7b:5a:b7:43:b5:e0:a2:87:67:4c:92:33:39:
                    2f:ff:2f:b7:cc:eb:29:61:5a:75:4c:47:bd:7e:2d:
                    d0:cc:35:c7:80:75:db:e5:a5:a3:18:c3:4b:52:90:
                    ee:b9:a3:33:c2:4c:fe:0e:b4:bc:54:4e:f2:cd:48:
                    96:7c:40:3e:2e:40:99:df:be:c6:ce:a0:b9:a0:c5:
                    75:fa:05:45:e4:3a:3b:c3:9a:0c:a9:29:8d:fb:f6:
                    b4:76:c5:e1:6d:3f:41:2f:f3:ed:1d:c3:f1:ab:80:
                    c6:57:b0:63:77:18:88:85:2f:0d:96:b8:af:37:22:
                    22:6f:89:93:fa:eb:fb:18:77:1c:19:43:25:bd:a4:
                    f7:6d:24:4b:a5:2b:38:b6:68:6c:43:29:8b:5f:8c:
                    a8:17:6f:c9:7e:05:c4:d3:f9:cf:4d:b3:ce:91:d0:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3A:95:F0:44:09:97:5B:2A:17:D3:AE:9A:EA:F1:44:DC:D2:1A:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0589bc1-dada-4627-8535-78658bd02252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:cd:df:f5:20:b8:8e:31:bd:b4:c7:a5:03:1f:ca:a9:eb:
         97:b0:37:d8:35:0b:b5:98:d6:98:55:7c:9b:aa:37:d5:78:82:
         f8:71:34:d4:f2:19:3b:14:98:4b:50:22:ec:d3:2f:cb:fe:85:
         b3:32:87:40:0b:17:d3:6d:6a:06:99:be:74:1b:aa:1b:e8:8d:
         48:d6:7a:12:9a:64:dd:22:55:cf:70:ef:af:a4:f8:a8:31:f7:
         a8:db:e3:9a:5a:cf:77:f6:ea:75:fe:26:4a:a6:42:b7:4f:4a:
         2a:1a:fe:6d:d5:1d:75:b8:65:06:07:14:02:9c:8d:4f:0e:11:
         a4:7b:5e:5b:91:8e:d4:64:e4:28:3e:bc:03:70:cb:ab:77:d9:
         71:52:72:8b:ba:ce:8a:71:70:b5:96:dc:a5:b5:ee:cc:1e:ff:
         1d:f5:d3:af:cc:9b:cb:fa:a7:62:ae:f7:dc:43:92:b9:a6:e4:
         b2:da:73:16:e7:7f:2c:b8:b3:4b:33:db:e6:ff:60:0a:58:dc:
         b3:17:09:de:fa:53:4c:f5:1f:8c:59:14:49:ed:bd:84:46:e2:
         7a:14:08:2a:72:0e:42:55:e7:b9:6c:f4:74:d7:83:52:9b:e1:
         88:88:ab:07:be:9e:e7:31:bb:cb:d1:b7:7a:2c:7a:06:e7:31:
         d0:48:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:40 2024 by rpki-client on console-fra.rpki-client.org