Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c210291d-680f-4b5c-9812-d774ab27912e.roa
File:                     c210291d-680f-4b5c-9812-d774ab27912e.roa (raw, json)
Hash identifier:          ExytbFOJ77fw3rTbH29zaztcxGtd8YbqflIH24I9FNg=
Subject key identifier:   E0:45:0D:91:1D:38:6C:BE:BF:95:6C:EC:45:91:E0:F0:C0:95:F5:D2
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       504E4A3EFF715B283A377F53AA3AB25E84EAFCE8
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c210291d-680f-4b5c-9812-d774ab27912e.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        206.55.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4e:4a:3e:ff:71:5b:28:3a:37:7f:53:aa:3a:b2:5e:84:ea:fc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=b1f8e93de997479cd0918b3415abeb3344f628e8a258443e83698efb374bbe52, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:9f:56:11:da:6d:8f:2e:77:c0:d0:3d:4c:
                    a9:8a:25:5d:9a:05:b2:7c:d5:0f:c2:1f:24:22:70:
                    ab:d5:29:43:63:0a:82:17:9c:13:cf:6d:8f:63:3a:
                    f2:79:54:ef:71:4a:9d:8c:16:0d:dd:e3:64:83:90:
                    f3:73:e5:9b:8f:d4:6e:6b:7d:ad:30:2e:da:ee:88:
                    3e:cb:8f:ad:3c:66:17:58:35:09:d0:3b:a2:d5:d5:
                    c3:26:eb:68:e6:0b:75:7b:1c:05:f0:4a:f8:8a:74:
                    60:b7:7b:ee:83:dc:e1:42:86:98:f4:75:76:c1:23:
                    b4:e7:9a:07:b8:1d:f1:3b:10:fc:f1:d3:e9:14:94:
                    96:55:ee:4c:76:ca:1e:72:38:e4:99:8c:8b:3e:8f:
                    7d:eb:57:5f:17:a9:87:c3:48:64:97:3e:49:26:c3:
                    c0:da:fc:07:1c:1f:34:4c:dc:43:ad:16:9e:9a:51:
                    1c:c1:0b:a0:2e:33:7a:41:bc:11:37:09:93:a5:5e:
                    b2:30:d9:6b:34:0f:d0:c3:1d:be:e6:d7:24:63:be:
                    4c:09:56:0f:61:96:08:1c:b5:ea:58:e7:a1:52:6e:
                    c2:6b:f0:af:d1:2f:43:db:7e:39:41:be:ee:55:4f:
                    05:9f:2b:1b:e1:75:22:76:28:84:53:d8:40:d2:52:
                    9a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:45:0D:91:1D:38:6C:BE:BF:95:6C:EC:45:91:E0:F0:C0:95:F5:D2
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c210291d-680f-4b5c-9812-d774ab27912e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f9:43:90:d8:26:dc:15:4c:46:71:b7:0d:7e:60:08:ae:1f:
         f0:f1:32:e2:d3:8b:ad:51:bd:4d:e8:41:4a:40:61:22:8e:d3:
         66:72:2e:27:10:c2:ce:b4:2f:09:75:e1:b7:e1:82:7f:13:04:
         d3:46:04:98:c5:1c:87:33:50:3b:29:de:7d:dd:a0:56:5c:e7:
         8f:94:ee:96:58:e6:db:01:23:7b:61:59:98:a9:fa:bd:5c:f7:
         9d:67:43:3d:74:a2:5e:bc:45:a4:e5:0f:1e:80:c2:72:7a:49:
         d1:39:5e:b4:0c:02:c0:55:32:b1:22:af:f9:aa:24:7e:a9:8a:
         02:53:7a:29:e3:dd:7e:de:27:d8:69:41:e8:cd:ad:52:ec:06:
         f1:5d:07:c4:06:cf:15:df:e6:6a:ec:50:41:e5:f9:d5:37:12:
         da:68:45:09:c0:7a:48:9a:e7:89:33:dd:5a:93:40:f6:77:90:
         06:d4:9d:82:ce:63:56:cb:39:ed:9c:c2:54:37:0e:61:74:f0:
         33:7c:30:1c:c4:9e:08:dd:1d:79:fe:fc:70:10:3e:06:51:67:
         3d:24:c9:2e:9e:ed:b5:2d:99:d9:ab:f5:28:22:64:01:59:fc:
         36:28:b5:3f:ac:4a:6f:0b:e3:d7:60:1a:92:24:e2:08:df:2e:
         8c:1e:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 00:24:25 2024 by rpki-client on console-ams.rpki-client.org