Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/015c4df6-0407-467d-85b0-6a619a1341a2.roa
File:                     015c4df6-0407-467d-85b0-6a619a1341a2.roa (raw, json)
Hash identifier:          h7oS0BPxUKY3EQ0I8xrX10gdMVbKofv3kP1Sot85Ljk=
Subject key identifier:   1A:86:AD:0D:72:98:F3:D8:58:F6:3B:E6:16:58:E6:28:AA:16:77:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53E7CBC8EF92C95BA0F16F3690EF3ECE7BC9F157
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/015c4df6-0407-467d-85b0-6a619a1341a2.roa
Signing time:             Sat 28 Sep 2024 00:00:00 +0000
ROA not before:           Sat 28 Sep 2024 00:00:00 +0000
ROA not after:            Sat 02 Nov 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.25.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e7:cb:c8:ef:92:c9:5b:a0:f1:6f:36:90:ef:3e:ce:7b:c9:f1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 28 00:00:00 2024 GMT
            Not After : Nov  2 23:59:59 2024 GMT
        Subject: serialNumber=c9b03a1ff97435e8fc282583cca92ca308fa47ee927d142ee8fdf786cb471e4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:2f:9a:fe:f2:f7:f2:76:19:e4:b4:f7:7e:
                    8e:cb:bc:b7:fa:1f:c1:f1:bf:f1:36:d4:e5:29:f5:
                    d0:61:28:28:a0:50:9a:af:9a:74:9a:94:b9:a5:4c:
                    3a:3e:4a:05:7d:40:19:bf:ba:fc:bc:32:fa:59:41:
                    36:7a:50:65:4c:3d:96:29:b8:f4:74:26:42:97:3b:
                    d9:00:97:0b:2f:08:d9:e8:b2:06:04:98:28:37:5e:
                    1c:51:79:02:fa:e9:b9:ee:c3:5e:38:ac:12:78:34:
                    9d:67:90:74:0a:d9:00:42:e5:b4:d2:68:f1:aa:6e:
                    fd:7d:f0:f2:79:ce:d2:d9:9e:27:1b:3c:a6:c2:f1:
                    54:88:12:72:cd:c4:42:90:9e:a6:70:1c:9b:f8:c2:
                    5a:18:8b:5c:46:d4:3f:fd:f4:e0:80:e0:1e:40:9d:
                    cb:9f:1b:63:18:54:98:49:bf:f6:2a:c1:75:0e:1d:
                    ec:e3:3d:bc:8b:ff:a0:fb:94:d7:36:c9:8d:76:63:
                    50:5d:c2:75:41:7d:88:e7:17:b9:60:ea:c3:16:c0:
                    18:fb:48:c0:87:61:80:39:52:e8:56:ce:e3:b0:c0:
                    8a:0e:c2:a9:54:a3:2e:ca:64:75:c6:7a:32:9f:7e:
                    c3:3a:e0:f8:05:df:16:5d:02:90:09:ce:c3:18:6e:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:AD:0D:72:98:F3:D8:58:F6:3B:E6:16:58:E6:28:AA:16:77:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/015c4df6-0407-467d-85b0-6a619a1341a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.25.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:96:f0:c9:db:0b:9f:e3:91:f2:14:77:66:3a:aa:54:92:
         28:58:29:e8:02:f0:c5:f3:32:63:cd:89:f6:bc:6c:61:a1:70:
         0e:c0:4c:b8:36:01:6a:57:74:dd:36:a4:b3:46:16:f4:96:99:
         e4:92:da:79:b4:34:54:90:5d:34:81:8a:f8:8c:5d:da:7c:95:
         58:d2:5e:0a:82:87:7e:d6:e0:13:04:b4:f9:a2:b2:7e:d4:5b:
         b3:75:7d:ef:0b:cc:19:f0:b8:51:d0:46:3b:6e:e0:34:03:79:
         9f:cf:f3:8e:b2:4f:33:43:fd:46:99:38:19:0d:b3:47:ed:58:
         2b:af:9b:be:f4:95:00:e0:dc:75:9b:a8:a8:e8:2c:fe:3b:85:
         43:6a:2c:a8:4f:bf:6a:d4:fb:bd:99:36:57:db:68:9a:0f:54:
         14:fd:e7:57:d9:58:8d:36:9a:b1:aa:d8:89:4f:c7:4b:44:a6:
         bf:14:83:95:8f:e0:3a:a5:8c:b4:52:4f:8e:18:7b:fa:99:9b:
         e4:91:fb:cf:95:14:93:c7:ac:ee:ed:72:b6:4a:16:f5:38:cc:
         03:ba:9b:8a:f4:e2:68:2b:33:4a:3f:19:f4:76:ea:47:7c:98:
         6a:4b:20:8f:e0:13:f6:fb:2e:1b:5b:2f:92:51:8e:d3:62:90:
         f8:14:af:b7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU+fLyO+SyVug8W82kO8+znvJ8VcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwOTI4MDAwMDAwWhcNMjQxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjOWIwM2ExZmY5NzQzNWU4ZmMyODI1ODNjY2E5MmNhMzA4
ZmE0N2VlOTI3ZDE0MmVlOGZkZjc4NmNiNDcxZTRlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtdy+a/vL38nYZ5LT3fo7LvLf6H8Hxv/E21OUp9dBhKCig
UJqvmnSalLmlTDo+SgV9QBm/uvy8MvpZQTZ6UGVMPZYpuPR0JkKXO9kAlwsvCNno
sgYEmCg3XhxReQL66bnuw144rBJ4NJ1nkHQK2QBC5bTSaPGqbv198PJ5ztLZnicb
PKbC8VSIEnLNxEKQnqZwHJv4wloYi1xG1D/99OCA4B5AncufG2MYVJhJv/YqwXUO
HezjPbyL/6D7lNc2yY12Y1BdwnVBfYjnF7lg6sMWwBj7SMCHYYA5UuhWzuOwwIoO
wqlUoy7KZHXGejKffsM64PgF3xZdApAJzsMYbvFJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGoatDXKY89hY9jvmFljmKKoWd40wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAxNWM0ZGY2LTA0MDctNDY3ZC04NWIwLTZhNjE5YTEzNDFhMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2GUUwDQYJKoZIhvcNAQELBQADggEBAIWslvDJ2wuf45HyFHdmOqpUkihY
KegC8MXzMmPNifa8bGGhcA7ATLg2AWpXdN02pLNGFvSWmeSS2nm0NFSQXTSBiviM
Xdp8lVjSXgqCh37W4BMEtPmisn7UW7N1fe8LzBnwuFHQRjtu4DQDeZ/P846yTzND
/UaZOBkNs0ftWCuvm770lQDg3HWbqKjoLP47hUNqLKhPv2rU+72ZNlfbaJoPVBT9
51fZWI02mrGq2IlPx0tEpr8Ug5WP4DqljLRST44Ye/qZm+SR+8+VFJPHrO7tcrZK
FvU4zAO6m4r04mgrM0o/GfR26kd8mGpLII/gE/b7LhtbL5JRjtNikPgUr7c=
-----END CERTIFICATE-----
Generated at Tue Oct 22 00:46:27 2024 by rpki-client on console-fra.rpki-client.org