Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/065cf5b5-b079-4d2c-84e1-8b31330331bb.roa
File:                     065cf5b5-b079-4d2c-84e1-8b31330331bb.roa (raw, json)
Hash identifier:          NtzT3siLvO/LliFs3Cful3GQb0yaW+0HBNrB/Sa6pJo=
Subject key identifier:   0B:82:C6:2B:F0:90:05:D5:96:36:28:96:4B:28:62:C2:D1:C5:7E:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0ACED4B190ED1FA2596B57E8123685C373F8F278
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/065cf5b5-b079-4d2c-84e1-8b31330331bb.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2d:4000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ce:d4:b1:90:ed:1f:a2:59:6b:57:e8:12:36:85:c3:73:f8:f2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=219b5bfcb18285b9d8476dedc088c2c52a4553445dd8840e01590abe0cac7ab9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:c5:e9:37:4a:c0:5f:83:83:b1:d2:fe:4f:
                    67:74:8f:40:03:8a:41:d0:9e:66:12:eb:3a:6e:76:
                    fd:b5:ff:f0:ab:2f:0f:60:6b:42:85:ba:d9:06:38:
                    1d:22:7c:73:97:6a:ba:6c:bb:4b:81:65:f4:88:0b:
                    c7:98:a2:4f:53:02:27:50:0f:86:a9:de:0b:47:11:
                    2a:b1:2a:d9:5d:2c:a8:d0:d8:39:d9:2c:e6:3f:53:
                    79:32:f4:a5:f6:23:19:d3:bf:c2:97:03:97:60:35:
                    f8:72:f9:92:50:ad:1f:fc:76:d5:23:6b:88:09:d8:
                    f3:08:1a:98:8d:9f:d3:05:54:1e:fa:16:33:50:4f:
                    b5:ab:f0:45:10:56:c7:62:d5:0a:ac:8a:ad:22:7a:
                    f3:ab:92:bf:9c:d6:36:00:0c:19:09:c0:66:be:31:
                    66:ba:92:97:c1:cf:74:cc:8f:8a:d1:07:bc:2a:2c:
                    da:e5:95:79:d7:1b:5e:9e:c3:b6:ab:88:eb:60:30:
                    5c:9f:c4:a0:22:3a:e9:e4:bc:9e:8f:d0:eb:98:7e:
                    25:a3:e5:ef:fe:2e:44:21:a0:4c:04:50:29:de:be:
                    d0:02:54:cc:12:28:7d:ae:c9:3a:bb:d2:b0:4f:49:
                    0d:db:2a:05:37:09:fc:9f:ba:e7:b8:1a:87:8d:3c:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:82:C6:2B:F0:90:05:D5:96:36:28:96:4B:28:62:C2:D1:C5:7E:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/065cf5b5-b079-4d2c-84e1-8b31330331bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2d:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b8:e6:40:b2:c4:d3:c5:48:07:e9:d9:b8:37:bf:76:17:a8:af:
         37:03:4c:fb:48:86:76:55:a3:d4:fc:36:d7:74:0b:b2:51:b3:
         a9:d3:70:27:5d:94:29:4e:c0:b6:81:83:47:7d:aa:aa:52:35:
         55:70:57:44:d3:7c:36:de:7c:8f:6b:32:7b:46:55:eb:14:a7:
         4f:fb:03:57:22:97:0c:9a:d3:73:16:63:83:97:03:7f:f1:b3:
         fb:03:29:c9:0e:70:07:b9:15:09:5b:08:1c:82:48:a1:30:30:
         fa:1f:76:de:0c:56:2f:34:6f:0a:21:09:c0:68:21:af:af:9c:
         93:a0:ab:af:b3:de:18:f7:f9:ad:22:82:69:52:a1:ff:41:2b:
         5b:fd:47:38:1f:fe:1f:ca:42:74:1e:a8:55:a0:a1:eb:a8:e8:
         fc:51:9c:17:f0:01:f3:98:32:f0:22:a1:bb:d0:85:f3:f3:72:
         2f:08:aa:91:02:3e:50:88:b8:d9:10:4d:00:0a:ac:9d:7f:5d:
         ad:10:b0:af:a6:b4:94:e7:ee:85:c8:0f:3e:90:4a:10:fa:50:
         c7:52:94:77:ed:6e:9c:4f:69:4c:af:9a:19:56:ce:29:f0:76:
         d7:3a:f2:7f:d7:53:1c:21:22:12:fd:50:0a:16:c9:72:31:1f:
         69:92:f5:7e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUCs7UsZDtH6JZa1foEjaFw3P48ngwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMTliNWJmY2IxODI4NWI5ZDg0NzZkZWRjMDg4YzJjNTJh
NDU1MzQ0NWRkODg0MGUwMTU5MGFiZTBjYWM3YWI5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1icXpN0rAX4ODsdL+T2d0j0ADikHQnmYS6zpudv21//Cr
Lw9ga0KFutkGOB0ifHOXarpsu0uBZfSIC8eYok9TAidQD4ap3gtHESqxKtldLKjQ
2DnZLOY/U3ky9KX2IxnTv8KXA5dgNfhy+ZJQrR/8dtUja4gJ2PMIGpiNn9MFVB76
FjNQT7Wr8EUQVsdi1Qqsiq0ievOrkr+c1jYADBkJwGa+MWa6kpfBz3TMj4rRB7wq
LNrllXnXG16ew7ariOtgMFyfxKAiOunkvJ6P0OuYfiWj5e/+LkQhoEwEUCnevtAC
VMwSKH2uyTq70rBPSQ3bKgU3Cfyfuue4GoeNPBcpAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUC4LGK/CQBdWWNiiWSyhiwtHFfhcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA2NWNmNWI1LWIwNzktNGQyYy04NGUxLThiMzEzMzAzMzFiYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8tQDANBgkqhkiG9w0BAQsFAAOCAQEAuOZAssTTxUgH6dm4N792F6iv
NwNM+0iGdlWj1Pw213QLslGzqdNwJ12UKU7AtoGDR32qqlI1VXBXRNN8Nt58j2sy
e0ZV6xSnT/sDVyKXDJrTcxZjg5cDf/Gz+wMpyQ5wB7kVCVsIHIJIoTAw+h923gxW
LzRvCiEJwGghr6+ck6Crr7PeGPf5rSKCaVKh/0ErW/1HOB/+H8pCdB6oVaCh66jo
/FGcF/AB85gy8CKhu9CF8/NyLwiqkQI+UIi42RBNAAqsnX9drRCwr6a0lOfuhcgP
PpBKEPpQx1KUd+1unE9pTK+aGVbOKfB21zryf9dTHCEiEv1QChbJcjEfaZL1fg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:39 2024 by rpki-client on console-fra.rpki-client.org