Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bb31f22-737a-41b2-b6e7-10eae5506e35.roa
File:                     0bb31f22-737a-41b2-b6e7-10eae5506e35.roa (raw, json)
Hash identifier:          ZZqmISdTkuFpXZZ7uharMj2Xks3G9ZAp9/ksdtf0pc0=
Subject key identifier:   61:2A:B6:32:B8:1B:AF:6F:D7:DE:25:24:AA:17:2F:65:0B:88:13:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D34317F0739F584C6B4C967C79D149435D86960
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bb31f22-737a-41b2-b6e7-10eae5506e35.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:34:31:7f:07:39:f5:84:c6:b4:c9:67:c7:9d:14:94:35:d8:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=8cae990509b165132abfca2b57da2eccdc220c72bbd3a94a4b7d5f023ad9b078, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:97:6e:13:e1:64:df:78:da:39:27:5b:ac:
                    68:35:a3:0e:8a:01:8d:bc:2b:92:89:86:f1:0c:d2:
                    2c:67:7c:8d:d8:46:cd:c8:f6:d3:02:05:a5:7d:f0:
                    27:f9:c6:bc:45:2d:1c:9f:92:51:1c:76:f1:5d:40:
                    b9:96:5f:ee:27:0e:2d:47:8a:14:0f:c2:5d:1a:be:
                    95:65:e8:8a:e0:43:b4:97:b4:c1:35:11:5c:61:89:
                    dd:99:e1:06:72:d2:b0:1a:18:bb:10:0a:0a:65:bf:
                    ff:4e:38:5c:fa:0e:45:11:3f:a9:cc:e7:2a:dc:52:
                    1d:c0:fc:6a:78:de:3d:9e:ec:07:5a:c3:4c:e7:91:
                    0a:00:13:16:e4:ae:fc:0b:50:88:f0:a1:73:32:1a:
                    57:69:c2:64:71:7c:e6:29:b6:9c:2d:7d:bd:08:8a:
                    5b:73:aa:e8:a0:4e:fd:d4:f3:5e:30:96:e1:40:c2:
                    78:35:06:b6:19:5b:00:9d:d4:79:c5:44:7a:f8:12:
                    e0:65:9f:cd:ba:27:51:4a:58:a3:0c:7b:b2:86:dc:
                    7f:94:17:ef:7c:04:62:67:1c:82:69:2d:73:c5:1f:
                    40:3e:d5:d5:b1:f0:fa:64:68:fa:62:99:40:88:35:
                    27:94:65:85:32:ff:5a:c9:4e:88:d7:7a:4c:3e:1d:
                    78:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2A:B6:32:B8:1B:AF:6F:D7:DE:25:24:AA:17:2F:65:0B:88:13:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bb31f22-737a-41b2-b6e7-10eae5506e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:33:88:aa:da:cd:8b:f0:f3:42:f2:d1:b6:63:42:a5:40:75:
         ba:09:97:14:82:9a:ca:50:28:63:38:aa:5e:1d:b6:84:ed:89:
         67:93:15:a1:80:72:94:50:fa:c6:5a:4d:ef:a6:05:22:22:5a:
         b4:ab:74:11:fa:f4:0b:a0:a8:30:6e:84:68:f8:4d:e2:67:50:
         54:2d:b2:ec:f5:e1:46:54:4e:5b:14:27:b3:11:a8:0a:b4:1b:
         f4:ab:e4:68:b0:00:cb:fc:34:34:e5:ba:4f:d1:8c:1a:39:e3:
         0e:73:03:c0:fa:7c:9d:f9:06:9f:31:a2:08:09:54:00:ac:6f:
         c1:66:97:d2:93:05:90:cb:40:9d:80:53:47:1f:a7:d1:2d:37:
         97:4d:1c:c1:81:e2:c5:db:ad:c5:7c:a3:45:0f:fb:66:b8:49:
         fb:e3:db:e1:55:b4:35:2b:9f:22:9d:3c:cd:6c:54:15:50:aa:
         1c:57:c0:76:82:1b:35:7b:ef:88:cd:d2:49:69:6f:cf:55:5a:
         e3:4d:c9:0c:b1:74:27:2c:7f:4a:49:24:50:25:04:56:fc:14:
         26:c6:04:e1:c6:9a:9e:bc:2f:e2:7d:69:ed:9b:03:b1:97:9d:
         73:98:d8:3d:19:57:51:b8:79:a7:25:38:ef:cc:7c:a1:91:98:
         5b:eb:35:89
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULTQxfwc59YTGtMlnx50UlDXYaWAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4Y2FlOTkwNTA5YjE2NTEzMmFiZmNhMmI1N2RhMmVjY2Rj
MjIwYzcyYmJkM2E5NGE0YjdkNWYwMjNhZDliMDc4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYAZduE+Fk33jaOSdbrGg1ow6KAY28K5KJhvEM0ixnfI3Y
Rs3I9tMCBaV98Cf5xrxFLRyfklEcdvFdQLmWX+4nDi1HihQPwl0avpVl6IrgQ7SX
tME1EVxhid2Z4QZy0rAaGLsQCgplv/9OOFz6DkURP6nM5yrcUh3A/Gp43j2e7Ada
w0znkQoAExbkrvwLUIjwoXMyGldpwmRxfOYptpwtfb0IiltzquigTv3U814wluFA
wng1BrYZWwCd1HnFRHr4EuBln826J1FKWKMMe7KG3H+UF+98BGJnHIJpLXPFH0A+
1dWx8PpkaPpimUCINSeUZYUy/1rJTojXekw+HXgfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYSq2Mrgbr2/X3iUkqhcvZQuIE9gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBiYjMxZjIyLTczN2EtNDFiMi1iNmU3LTEwZWFlNTUwNmUzNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABGguIwDQYJKoZIhvcNAQELBQADggEBABwziKrazYvw80Ly0bZjQqVAdboJ
lxSCmspQKGM4ql4dtoTtiWeTFaGAcpRQ+sZaTe+mBSIiWrSrdBH69AugqDBuhGj4
TeJnUFQtsuz14UZUTlsUJ7MRqAq0G/Sr5GiwAMv8NDTluk/RjBo54w5zA8D6fJ35
Bp8xoggJVACsb8Fml9KTBZDLQJ2AU0cfp9EtN5dNHMGB4sXbrcV8o0UP+2a4Sfvj
2+FVtDUrnyKdPM1sVBVQqhxXwHaCGzV774jN0klpb89VWuNNyQyxdCcsf0pJJFAl
BFb8FCbGBOHGmp68L+J9ae2bA7GXnXOY2D0ZV1G4eaclOO/MfKGRmFvrNYk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:17 2024 by rpki-client on console-ams.rpki-client.org