Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17392cac-2ffa-4bbe-b29b-48b0dc375b57.roa
File:                     17392cac-2ffa-4bbe-b29b-48b0dc375b57.roa (raw, json)
Hash identifier:          378psPRg/4Zl7FJMo4Ooj3Cyfahp2trfS+g1OTTSZHc=
Subject key identifier:   B7:EE:27:0C:98:63:E6:96:D7:11:E7:E3:48:58:93:46:AC:3B:B4:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11CA0D600E294FD74CBA4D25FC20C9748F19A66C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17392cac-2ffa-4bbe-b29b-48b0dc375b57.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        66.152.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ca:0d:60:0e:29:4f:d7:4c:ba:4d:25:fc:20:c9:74:8f:19:a6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=5528aefe947320ea281670d97025bcc21947d4478e4444f77284999c317daba1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:0c:22:72:2d:d5:30:52:f2:ae:2d:b8:9e:
                    d2:51:e7:57:b5:5b:12:6d:0e:c0:00:2e:93:ce:6c:
                    89:c9:2b:07:74:42:72:df:07:51:53:56:fd:7b:ab:
                    f4:1b:46:68:d7:82:df:f7:03:06:30:c3:8f:61:87:
                    6e:c9:6c:3f:52:3e:9b:6b:a7:2a:fe:57:0e:e1:bf:
                    48:bf:a0:b7:9f:f7:97:ad:ee:17:34:da:58:7b:51:
                    ee:56:de:76:f3:d9:50:43:c3:68:8c:1b:d1:4b:9d:
                    2f:a4:14:b4:ad:ca:d3:5b:6b:f0:90:d7:20:b5:bb:
                    b0:d2:dd:a5:73:a4:ce:1e:5d:39:a6:e2:db:de:60:
                    88:ee:24:27:fb:53:72:62:b2:98:93:ea:da:b8:38:
                    6b:e7:6d:76:ae:10:47:c9:8b:4f:3f:84:b4:88:8f:
                    b0:f5:e6:b6:12:72:7f:34:5d:75:a2:3a:b0:1a:96:
                    ed:0b:d7:ab:f5:98:e3:69:09:bc:fb:b5:3d:7d:fc:
                    0b:7d:7a:94:36:25:18:a4:1c:fd:bd:cf:a0:8f:40:
                    67:64:d2:dc:10:3e:47:aa:c5:4c:b5:87:76:dc:88:
                    fe:66:67:4f:d0:21:3e:9e:91:4c:a2:02:91:aa:7d:
                    f7:38:a1:ba:40:f4:d9:17:3e:1a:bd:fc:12:73:5b:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EE:27:0C:98:63:E6:96:D7:11:E7:E3:48:58:93:46:AC:3B:B4:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17392cac-2ffa-4bbe-b29b-48b0dc375b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.152.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:06:27:5f:3f:c2:51:15:fc:44:05:89:7c:4f:ba:38:65:a6:
         fd:e8:a2:37:a3:46:79:28:9e:c7:61:d1:b4:1b:ae:ae:c3:57:
         5d:c4:99:1b:60:5b:f5:7d:45:b2:ed:bd:c1:d2:ad:a2:85:f2:
         41:e1:78:51:ef:7a:8b:0c:b8:b2:a4:ef:24:33:a8:5e:aa:f6:
         70:e1:e1:d9:30:18:a9:32:75:c8:26:35:30:f6:05:66:27:7b:
         78:f9:37:b9:da:52:fa:00:ee:fe:94:f0:43:4b:8c:1b:69:8d:
         45:64:d6:7c:78:25:9d:e3:f3:99:e8:93:c4:48:64:7c:12:ea:
         62:69:56:54:86:73:d2:4a:86:0d:75:b3:17:71:89:2a:16:4a:
         c9:b2:22:ce:d9:c9:24:a1:75:4f:1c:9f:d0:9b:15:c1:77:7b:
         b3:b9:60:70:7f:dc:fb:04:9e:49:b3:9e:06:cc:fd:9b:b4:9e:
         45:74:cf:94:77:cf:d0:e8:b1:fe:a6:dd:43:b5:db:82:09:83:
         2e:a7:dd:5d:7a:62:98:04:a7:9b:f4:11:f0:d4:8c:a5:40:1f:
         09:93:90:f0:0e:f3:0b:92:7b:2d:0e:4f:26:e6:20:fc:8f:13:
         26:03:61:f6:ad:44:07:25:ed:c2:13:ef:86:b9:c3:d9:bc:7a:
         75:3a:be:c7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEcoNYA4pT9dMuk0l/CDJdI8ZpmwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NTI4YWVmZTk0NzMyMGVhMjgxNjcwZDk3MDI1YmNjMjE5
NDdkNDQ3OGU0NDQ0Zjc3Mjg0OTk5YzMxN2RhYmExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtegwici3VMFLyri24ntJR51e1WxJtDsAALpPObInJKwd0
QnLfB1FTVv17q/QbRmjXgt/3AwYww49hh27JbD9SPptrpyr+Vw7hv0i/oLef95et
7hc02lh7Ue5W3nbz2VBDw2iMG9FLnS+kFLStytNba/CQ1yC1u7DS3aVzpM4eXTmm
4tveYIjuJCf7U3JispiT6tq4OGvnbXauEEfJi08/hLSIj7D15rYScn80XXWiOrAa
lu0L16v1mONpCbz7tT19/At9epQ2JRikHP29z6CPQGdk0twQPkeqxUy1h3bciP5m
Z0/QIT6ekUyiApGqffc4obpA9NkXPhq9/BJzW6GFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUt+4nDJhj5pbXEefjSFiTRqw7tB4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE3MzkyY2FjLTJmZmEtNGJiZS1iMjliLTQ4YjBkYzM3NWI1Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVCmKAwDQYJKoZIhvcNAQELBQADggEBAIMGJ18/wlEV/EQFiXxPujhlpv3o
ojejRnkonsdh0bQbrq7DV13EmRtgW/V9RbLtvcHSraKF8kHheFHveosMuLKk7yQz
qF6q9nDh4dkwGKkydcgmNTD2BWYne3j5N7naUvoA7v6U8ENLjBtpjUVk1nx4JZ3j
85nok8RIZHwS6mJpVlSGc9JKhg11sxdxiSoWSsmyIs7ZySShdU8cn9CbFcF3e7O5
YHB/3PsEnkmzngbM/Zu0nkV0z5R3z9Dosf6m3UO124IJgy6n3V16YpgEp5v0EfDU
jKVAHwmTkPAO8wuSey0OTybmIPyPEyYDYfatRAcl7cIT74a5w9m8enU6vsc=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:20 2024 by rpki-client on console-fra.rpki-client.org