Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bdd090e-2ef9-4295-9613-e1778d300625.roa
File:                     0bdd090e-2ef9-4295-9613-e1778d300625.roa (raw, json)
Hash identifier:          Bh2k07/xIcv37hMdFjU68SpF3BBzSsZqpkezLE7xQwU=
Subject key identifier:   C4:8E:5F:C5:76:E7:07:54:4B:F7:AA:F4:1D:80:4D:37:FA:19:61:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77CB3304ED84C0A07F8915452873CA036778BDCE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bdd090e-2ef9-4295-9613-e1778d300625.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        15.194.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cb:33:04:ed:84:c0:a0:7f:89:15:45:28:73:ca:03:67:78:bd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=4d7e8500015f809cd88393f4ce9b1b1f97731da12fff3637f23e0ef8876f50f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:6c:09:b0:3e:bc:8e:79:6a:de:2c:3a:54:
                    bc:d9:fe:d1:96:e3:92:29:99:0d:95:7c:d9:0b:7e:
                    db:47:ac:ba:ca:5e:d3:ce:15:ff:6e:ef:aa:d3:03:
                    0e:75:60:42:01:6e:21:96:7d:00:c8:6e:15:2f:30:
                    99:5e:68:9b:4b:22:90:65:91:0d:80:e3:06:ea:28:
                    fa:60:c2:ca:01:9d:ee:a2:a8:a6:f2:53:05:54:b1:
                    1f:33:82:a1:ed:27:77:be:3b:08:dc:90:05:6f:86:
                    0c:1b:33:1b:9b:e3:9f:01:3d:30:d2:c7:01:38:23:
                    55:29:13:a0:e1:ed:99:1b:e7:d2:e7:79:04:b3:65:
                    e5:30:cf:4a:45:39:7b:1f:d6:68:55:14:67:88:3e:
                    e3:0f:6b:0f:1a:a5:fd:0f:93:ac:74:bc:ee:c5:ee:
                    c5:3e:58:75:4f:16:83:9d:04:f2:35:c3:91:15:b7:
                    a7:bc:9c:14:09:c1:78:ae:58:bf:36:fc:65:48:be:
                    b2:24:91:6d:13:9f:c6:36:63:e6:88:67:d0:1c:55:
                    dd:40:fc:c1:c8:d6:c7:cb:61:db:c9:d6:06:f8:de:
                    4d:d9:d9:35:4e:54:6e:c9:2f:65:57:ba:6c:e9:3e:
                    6c:b6:2d:10:f9:f7:77:e4:81:f2:22:c6:e0:1c:90:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8E:5F:C5:76:E7:07:54:4B:F7:AA:F4:1D:80:4D:37:FA:19:61:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bdd090e-2ef9-4295-9613-e1778d300625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:77:99:6b:0b:99:91:e6:eb:e8:78:b6:89:53:2b:04:b7:
         7e:a2:c9:24:f7:c2:9e:17:1b:2d:e6:2a:ee:5e:a5:43:e1:d3:
         0e:54:21:d5:9d:db:29:a4:1f:c1:d0:ca:7d:b6:86:ac:37:43:
         bc:e3:22:0d:46:e7:83:4f:5b:bb:75:f5:44:61:9c:ae:f7:10:
         b0:23:81:86:66:9f:c2:20:b7:91:b9:75:5a:0d:78:f8:06:e8:
         e3:a9:40:d2:9f:39:58:1d:78:11:7a:41:43:f6:36:87:d2:89:
         a7:31:e8:60:ea:26:d7:e4:66:44:bd:3e:0c:df:c2:b7:ca:21:
         21:f0:fa:f7:5b:16:31:f2:26:8f:ca:9f:da:2c:d7:3e:58:a5:
         a6:ee:38:b1:33:6d:8f:e1:b9:82:48:fa:69:7e:e7:3c:aa:61:
         32:37:44:08:fe:a0:01:33:33:da:3b:d5:3b:0d:bf:93:a5:2b:
         d2:ef:20:d6:34:03:d1:4a:1f:9b:5c:28:23:22:fc:a1:e4:df:
         d6:65:e1:81:21:8e:ca:d9:60:51:fe:2e:c6:d3:bb:d1:41:1f:
         e4:24:b4:a2:51:c1:a3:1b:0e:bb:0f:0a:e1:66:4a:7a:64:f9:
         11:05:a1:01:8b:70:75:36:31:c2:47:ed:67:9b:b4:dd:58:8a:
         bd:65:d2:3a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUd8szBO2EwKB/iRVFKHPKA2d4vc4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAyMDAwMDAwWhcNMjQxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZDdlODUwMDAxNWY4MDljZDg4MzkzZjRjZTliMWIxZjk3
NzMxZGExMmZmZjM2MzdmMjNlMGVmODg3NmY1MGYwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDmQmwJsD68jnlq3iw6VLzZ/tGW45IpmQ2VfNkLfttHrLrK
XtPOFf9u76rTAw51YEIBbiGWfQDIbhUvMJleaJtLIpBlkQ2A4wbqKPpgwsoBne6i
qKbyUwVUsR8zgqHtJ3e+OwjckAVvhgwbMxub458BPTDSxwE4I1UpE6Dh7Zkb59Ln
eQSzZeUwz0pFOXsf1mhVFGeIPuMPaw8apf0Pk6x0vO7F7sU+WHVPFoOdBPI1w5EV
t6e8nBQJwXiuWL82/GVIvrIkkW0Tn8Y2Y+aIZ9AcVd1A/MHI1sfLYdvJ1gb43k3Z
2TVOVG7JL2VXumzpPmy2LRD593fkgfIixuAckIuJAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUxI5fxXbnB1RL96r0HYBNN/oZYQQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBiZGQwOTBlLTJlZjktNDI5NS05NjEzLWUxNzc4ZDMwMDYyNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAPwjANBgkqhkiG9w0BAQsFAAOCAQEAgHx3mWsLmZHm6+h4tolTKwS3fqLJ
JPfCnhcbLeYq7l6lQ+HTDlQh1Z3bKaQfwdDKfbaGrDdDvOMiDUbng09bu3X1RGGc
rvcQsCOBhmafwiC3kbl1Wg14+Abo46lA0p85WB14EXpBQ/Y2h9KJpzHoYOom1+Rm
RL0+DN/Ct8ohIfD691sWMfImj8qf2izXPlilpu44sTNtj+G5gkj6aX7nPKphMjdE
CP6gATMz2jvVOw2/k6Ur0u8g1jQD0Uofm1woIyL8oeTf1mXhgSGOytlgUf4uxtO7
0UEf5CS0olHBoxsOuw8K4WZKemT5EQWhAYtwdTYxwkftZ5u03ViKvWXSOg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:40 2024 by rpki-client on console-fra.rpki-client.org