Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa
File:                     15dd7280-6c64-4c5f-9920-b8e295ae5383.roa (raw, json)
Hash identifier:          eAePssGbDei7y8CFaXEvMmelzTn03GS317zygJ++bKE=
Subject key identifier:   5B:21:E2:ED:42:7D:AD:C7:67:A1:09:B4:E2:53:34:6C:32:82:22:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62D9331C69FC77DABC8CE93D0F1B5D34247A93B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d9:33:1c:69:fc:77:da:bc:8c:e9:3d:0f:1b:5d:34:24:7a:93:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=65f1eae2148f16eda7b923dd9c84aa8b1711115213dddb8c3c913a268f1f3a42, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:36:66:91:0f:75:94:74:97:93:fc:db:19:
                    6b:bd:7c:2f:d1:ec:16:0b:9d:1e:93:d6:19:6e:a7:
                    7a:a0:f8:b2:54:0a:fa:02:7f:3d:49:e3:7c:59:79:
                    ba:b9:70:80:15:59:96:e8:d4:51:15:00:ef:57:2a:
                    66:f1:74:0a:96:15:d7:2c:19:76:18:91:fe:4a:e5:
                    6c:83:12:60:ca:bb:26:09:06:a6:7a:51:f2:52:4e:
                    6d:2d:48:20:54:d4:00:02:d0:cd:5c:d6:a3:83:ab:
                    50:07:04:92:26:40:83:3f:d7:a5:f9:cf:67:85:76:
                    57:85:90:c1:d7:e3:a3:9d:3d:f6:26:cf:63:21:85:
                    4d:42:d9:f8:94:64:95:21:9e:54:39:ad:90:ff:a5:
                    5e:84:01:bd:78:ab:bd:43:82:6d:f8:1d:7a:86:80:
                    77:86:6c:a4:83:de:f2:b4:59:d2:b3:cd:44:6c:36:
                    6e:85:75:86:41:4f:56:0c:52:b7:2a:d9:88:ea:6e:
                    92:1d:43:55:46:18:e4:a2:47:16:9e:27:c5:0d:a9:
                    be:ba:1d:96:5c:f3:26:06:3c:73:59:50:b7:f6:ee:
                    a0:bd:b1:97:59:cd:2a:97:07:82:54:9d:4d:db:c6:
                    f9:12:4e:98:b5:d9:37:47:f1:0f:5d:23:1f:6f:be:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:21:E2:ED:42:7D:AD:C7:67:A1:09:B4:E2:53:34:6C:32:82:22:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5f:6c:66:65:28:e2:e0:e9:90:13:1f:aa:e0:e6:bc:a9:2a:
         d8:27:3c:dc:34:d6:87:e3:e4:27:9e:8f:52:97:f7:e1:22:53:
         65:3a:ed:d3:e1:cf:89:2a:c8:e1:38:0f:96:f4:a5:34:5d:b6:
         d0:77:5a:ed:5e:55:c9:6b:72:38:37:38:6f:a8:79:ae:f3:b8:
         f1:b9:60:c0:31:bd:b6:16:87:57:ec:50:62:17:43:99:e1:8a:
         f7:51:b5:a2:ab:4d:06:f1:0c:26:98:5e:ba:39:e7:7b:e6:40:
         a8:0c:0f:b3:4c:a3:bd:e5:d3:0a:99:6f:56:49:94:a6:97:12:
         9a:43:8f:cd:9a:b4:82:a8:18:47:76:7b:39:16:c1:8e:98:80:
         99:99:6f:a5:b2:b8:cc:ff:2f:b8:ea:f1:11:92:71:b3:d8:77:
         47:17:62:71:a4:fd:65:89:79:96:1c:f8:0d:a3:3e:9e:d8:6e:
         dc:e4:eb:a6:4c:a5:1b:30:be:85:10:ed:5a:cf:87:d8:1e:f0:
         a2:b0:87:00:2f:23:f5:f0:b5:22:d3:1b:a7:e2:c1:57:fb:25:
         8f:da:47:9a:cb:6b:a0:27:68:91:0b:42:ae:ce:c0:cb:d4:8d:
         1a:55:21:50:ad:5d:10:35:9d:c3:94:91:bf:3b:f3:91:e0:09:
         04:e1:83:25
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYtkzHGn8d9q8jOk9DxtdNCR6k7gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NWYxZWFlMjE0OGYxNmVkYTdiOTIzZGQ5Yzg0YWE4YjE3
MTExMTUyMTNkZGRiOGMzYzkxM2EyNjhmMWYzYTQyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYaTZmkQ91lHSXk/zbGWu9fC/R7BYLnR6T1hlup3qg+LJU
CvoCfz1J43xZebq5cIAVWZbo1FEVAO9XKmbxdAqWFdcsGXYYkf5K5WyDEmDKuyYJ
BqZ6UfJSTm0tSCBU1AAC0M1c1qODq1AHBJImQIM/16X5z2eFdleFkMHX46OdPfYm
z2MhhU1C2fiUZJUhnlQ5rZD/pV6EAb14q71Dgm34HXqGgHeGbKSD3vK0WdKzzURs
Nm6FdYZBT1YMUrcq2YjqbpIdQ1VGGOSiRxaeJ8UNqb66HZZc8yYGPHNZULf27qC9
sZdZzSqXB4JUnU3bxvkSTpi12TdH8Q9dIx9vvi1rAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWyHi7UJ9rcdnoQm04lM0bDKCIjAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE1ZGQ3MjgwLTZjNjQtNGM1Zi05OTIwLWI4ZTI5NWFlNTM4My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTekwDQYJKoZIhvcNAQELBQADggEBAEhfbGZlKOLg6ZATH6rg5rypKtgn
PNw01ofj5Ceej1KX9+EiU2U67dPhz4kqyOE4D5b0pTRdttB3Wu1eVclrcjg3OG+o
ea7zuPG5YMAxvbYWh1fsUGIXQ5nhivdRtaKrTQbxDCaYXro553vmQKgMD7NMo73l
0wqZb1ZJlKaXEppDj82atIKoGEd2ezkWwY6YgJmZb6WyuMz/L7jq8RGScbPYd0cX
YnGk/WWJeZYc+A2jPp7Ybtzk66ZMpRswvoUQ7VrPh9ge8KKwhwAvI/XwtSLTG6fi
wVf7JY/aR5rLa6AnaJELQq7OwMvUjRpVIVCtXRA1ncOUkb8785HgCQThgyU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:43 2024 by rpki-client on console-fra.rpki-client.org