Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/078e354f-c8be-45c8-97ba-83079c2aab84.roa
File:                     078e354f-c8be-45c8-97ba-83079c2aab84.roa (raw, json)
Hash identifier:          8cdYAh7MKbFvX0qwIAiklLydaVfUqo1FkFIea7vfLh0=
Subject key identifier:   D6:0C:79:B8:26:FC:47:5E:B5:39:7F:7B:85:6C:5B:E2:75:85:DF:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7341804B35FC2AF8B761E2B7D4CA2FC397027F0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/078e354f-c8be-45c8-97ba-83079c2aab84.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:41:80:4b:35:fc:2a:f8:b7:61:e2:b7:d4:ca:2f:c3:97:02:7f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=7663e9d231af316b26dab343d10d8092aa3b477168992ae1051f8859277a51f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:72:ff:ef:13:80:f5:54:c2:da:d2:42:04:
                    56:6a:2a:c5:54:fc:eb:60:18:e2:4d:77:d5:da:22:
                    fa:c7:b1:80:d9:68:5a:62:1c:90:2b:fe:ad:3c:68:
                    2a:77:82:93:c6:38:f6:3c:aa:03:74:cb:ef:a0:57:
                    22:b0:60:86:52:a1:b1:73:b4:3b:df:5a:28:2d:f5:
                    f2:dd:27:cd:13:0f:b3:b0:ba:0c:de:47:ef:89:8b:
                    9d:4f:e1:0a:05:99:04:38:e2:c2:2f:e6:fb:dc:ed:
                    78:40:ab:68:0e:56:1e:3f:53:12:61:db:47:9f:64:
                    02:d5:55:85:47:29:24:5f:5a:f1:df:77:5b:d6:fa:
                    e5:78:7a:38:3f:c5:98:05:9f:be:a2:50:18:22:ab:
                    5e:78:ad:ee:e0:2a:4e:44:f4:1d:c6:c4:0c:37:a9:
                    a6:ef:68:7f:c8:ad:79:b4:8b:1e:a9:ef:50:7e:9c:
                    bd:51:4d:2e:e9:ec:84:96:e3:ac:ef:17:53:fc:93:
                    d9:ef:b9:c1:3d:b1:83:c4:a6:5e:63:f4:13:29:8b:
                    3e:ba:9b:25:70:45:e2:7a:67:3b:16:ce:95:50:83:
                    66:88:10:fd:b6:d3:9a:7c:10:9d:b1:61:2d:9f:b5:
                    02:8e:dc:05:46:dc:8b:79:ca:7b:56:4f:33:60:4b:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0C:79:B8:26:FC:47:5E:B5:39:7F:7B:85:6C:5B:E2:75:85:DF:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/078e354f-c8be-45c8-97ba-83079c2aab84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:5a:be:ca:f0:e3:58:d3:10:d5:63:30:85:97:dc:6f:6f:64:
         61:96:0c:91:34:cd:95:4c:01:8a:7c:3c:ce:da:b9:da:e8:31:
         c0:dd:97:b2:5c:1b:3d:63:5d:a2:2d:59:8a:95:74:3f:27:b8:
         2a:fe:83:ef:a3:56:85:4e:45:9d:5e:da:92:70:52:68:14:a7:
         5a:3b:b0:8f:c8:d2:9c:1e:03:50:ea:e9:40:5a:71:47:75:b1:
         2b:55:34:41:21:98:fb:61:71:79:2d:c3:5c:24:cc:3b:9e:40:
         20:ef:c6:70:12:d3:ad:3e:2b:3f:18:9b:85:f8:98:d2:5d:0d:
         96:02:69:52:1c:bb:aa:61:d5:33:8a:0a:4f:66:11:63:c5:5d:
         b7:59:36:09:12:a2:de:1c:8d:90:46:03:69:0f:6a:87:80:bc:
         75:aa:19:e3:d9:19:d5:ef:41:34:18:f6:1f:96:7a:ba:27:a6:
         d2:05:80:bf:12:42:95:a6:11:78:59:69:a9:96:63:64:dd:36:
         e0:f4:37:de:47:3d:1b:f1:9c:52:7f:7d:22:aa:9e:a5:32:f9:
         1b:7d:53:36:66:aa:55:dd:a8:00:4d:df:a0:75:16:8a:9b:72:
         f3:19:29:65:a7:98:4a:df:8b:a4:6a:57:90:55:e2:8d:05:63:
         89:47:9e:4d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUc0GASzX8Kvi3YeK31Movw5cCfw0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NjYzZTlkMjMxYWYzMTZiMjZkYWIzNDNkMTBkODA5MmFh
M2I0NzcxNjg5OTJhZTEwNTFmODg1OTI3N2E1MWY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCTwXL/7xOA9VTC2tJCBFZqKsVU/OtgGOJNd9XaIvrHsYDZ
aFpiHJAr/q08aCp3gpPGOPY8qgN0y++gVyKwYIZSobFztDvfWigt9fLdJ80TD7Ow
ugzeR++Ji51P4QoFmQQ44sIv5vvc7XhAq2gOVh4/UxJh20efZALVVYVHKSRfWvHf
d1vW+uV4ejg/xZgFn76iUBgiq154re7gKk5E9B3GxAw3qabvaH/IrXm0ix6p71B+
nL1RTS7p7ISW46zvF1P8k9nvucE9sYPEpl5j9BMpiz66myVwReJ6ZzsWzpVQg2aI
EP2205p8EJ2xYS2ftQKO3AVG3It5yntWTzNgS8ItAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1gx5uCb8R161OX97hWxb4nWF310wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA3OGUzNTRmLWM4YmUtNDVjOC05N2JhLTgzMDc5YzJhYWI4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABGgtgwDQYJKoZIhvcNAQELBQADggEBAMBavsrw41jTENVjMIWX3G9vZGGW
DJE0zZVMAYp8PM7audroMcDdl7JcGz1jXaItWYqVdD8nuCr+g++jVoVORZ1e2pJw
UmgUp1o7sI/I0pweA1Dq6UBacUd1sStVNEEhmPthcXktw1wkzDueQCDvxnAS060+
Kz8Ym4X4mNJdDZYCaVIcu6ph1TOKCk9mEWPFXbdZNgkSot4cjZBGA2kPaoeAvHWq
GePZGdXvQTQY9h+WeronptIFgL8SQpWmEXhZaamWY2TdNuD0N95HPRvxnFJ/fSKq
nqUy+Rt9UzZmqlXdqABN36B1FoqbcvMZKWWnmErfi6RqV5BV4o0FY4lHnk0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:39 2024 by rpki-client on console-fra.rpki-client.org