Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0607a85-59d4-41f8-a27e-6ca35a850925.roa
File:                     f0607a85-59d4-41f8-a27e-6ca35a850925.roa (raw, json)
Hash identifier:          tS2pvN4LtThBzqN7gXJT5HhjnzJqQGYDcFnP5IZ6zOE=
Subject key identifier:   5B:17:49:4C:E9:E7:14:35:FC:14:1D:8E:E7:E5:12:81:16:45:35:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1112D53EB50BB1D6AD9B131F31626686BFF3A79D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0607a85-59d4-41f8-a27e-6ca35a850925.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.139.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:12:d5:3e:b5:0b:b1:d6:ad:9b:13:1f:31:62:66:86:bf:f3:a7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=f766e864a3310de739fb0442bde32b0b391012828d847e8b6227c3ff4c8d6933, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:00:a8:1b:6d:d1:2a:11:5c:55:b8:46:2b:f0:
                    f8:f3:64:f7:95:7e:60:3a:88:59:32:ea:78:88:ba:
                    7c:97:65:ec:05:9f:7d:6f:e3:72:9a:dc:cb:67:69:
                    2f:5f:30:00:f3:bd:11:19:fe:b0:ed:98:33:23:54:
                    42:fa:7a:a7:24:d8:89:6e:fe:53:fe:1a:bc:29:ac:
                    e9:cc:9c:35:a1:76:f1:41:8f:82:6a:bf:20:14:7d:
                    5c:f4:19:8f:e0:31:e0:86:7a:72:d6:07:38:75:3d:
                    e2:7d:ee:a2:a7:14:d9:85:5d:be:5d:10:a7:f6:5a:
                    fa:9c:3e:f6:37:93:0f:b4:22:4c:03:59:e8:95:0b:
                    27:a1:41:d2:6e:b3:bf:b6:5c:6e:bd:a2:c4:c3:11:
                    ab:fd:5c:e9:08:1f:79:79:ab:e9:c6:6b:20:a2:5f:
                    ce:ba:93:b1:b3:80:37:10:dc:ed:88:dd:40:cc:de:
                    f9:24:de:d8:de:66:21:0b:df:d0:a2:0a:49:05:ef:
                    b0:c4:c6:4b:bc:54:33:b3:8e:39:73:94:b1:6e:c2:
                    48:b7:91:ea:d3:fd:5f:10:9f:57:44:31:73:ea:d1:
                    e3:3d:e0:88:80:96:78:4a:36:3e:c9:14:b9:ed:57:
                    3b:f0:62:8d:29:d3:71:39:83:af:d5:90:83:d9:07:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:17:49:4C:E9:E7:14:35:FC:14:1D:8E:E7:E5:12:81:16:45:35:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0607a85-59d4-41f8-a27e-6ca35a850925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.139.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:5a:14:9c:8d:29:f3:d8:42:28:36:43:a8:49:f6:c4:ad:
         fd:cb:b6:dd:08:ac:25:6a:2e:62:68:f3:81:19:4c:00:ea:9e:
         66:f9:65:ff:e6:e3:27:b4:cf:62:23:d0:33:6f:73:c6:95:13:
         23:1b:01:0b:4d:bd:27:d5:cd:ff:56:94:26:03:42:89:84:e0:
         9c:32:6a:66:10:47:28:39:a4:bf:17:55:9c:3a:c4:c9:64:3f:
         b7:21:43:67:45:5c:3c:f3:fc:ed:57:7e:19:35:29:c9:21:c6:
         26:53:8b:ba:38:b3:4d:10:36:7a:bb:6b:06:d8:a1:39:ec:74:
         58:ae:bf:36:bf:5c:d3:2c:84:70:59:b3:49:3a:d7:b1:5c:28:
         1a:73:29:6d:05:77:cb:ab:24:16:4c:ec:2c:23:42:92:5f:4e:
         73:55:99:ee:f1:ce:d1:46:ff:e0:11:6b:c7:87:e9:13:d6:1c:
         0e:13:cf:65:8a:4d:ec:19:45:12:f2:c5:79:c2:c4:d9:ef:d4:
         dc:26:ef:fa:d8:55:dc:a1:dc:9f:8c:f6:5b:49:79:1e:ba:05:
         3c:ec:27:40:dc:56:7c:35:83:6f:58:41:ae:25:88:b5:d3:21:
         9e:3f:80:75:3f:24:4c:3d:d2:ba:61:99:ba:e6:bf:d5:fb:2c:
         de:66:77:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:43 2024 by rpki-client on console-ams.rpki-client.org