Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/179e0062-9843-48fa-ac1d-7e27eeb796c1.roa
File:                     179e0062-9843-48fa-ac1d-7e27eeb796c1.roa (raw, json)
Hash identifier:          FDUrYGE+5k1ahwNYKOp6uXJFc0WEILUAGFPxgBUYlYY=
Subject key identifier:   5A:C5:05:60:A4:E7:18:3B:01:A0:93:BC:99:30:08:1E:C8:EF:B2:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       957E68AEFDB2153A4569411F1075BD708A4176
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/179e0062-9843-48fa-ac1d-7e27eeb796c1.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        152.227.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            95:7e:68:ae:fd:b2:15:3a:45:69:41:1f:10:75:bd:70:8a:41:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=f47db7df43883dbab8f63e0f69c186eecad8ab25104151f1752c84d73a2212cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:d3:5e:c7:80:04:cf:c3:65:55:44:89:58:
                    5a:6c:d3:46:f0:e8:cc:2a:92:e4:d0:55:5a:bf:aa:
                    f5:74:99:a7:db:c7:43:a7:3d:07:d1:e8:26:bd:08:
                    45:3d:d0:49:51:f1:21:ee:57:0d:8b:d9:dd:7c:ec:
                    b7:d0:51:ac:ec:0b:5b:6d:79:91:e3:f8:c1:ef:ee:
                    89:38:cf:21:c9:37:0e:f9:4f:aa:32:6e:f5:42:f7:
                    5b:dc:62:d3:6b:71:cc:f9:a8:6f:e9:0d:8b:b8:99:
                    2c:c6:f9:65:03:ea:8c:a9:49:f3:af:40:53:01:ae:
                    94:d8:a8:e3:0b:9b:cc:61:ee:64:de:c4:e1:2f:8d:
                    d1:01:5d:d1:d8:b8:92:43:09:cc:c9:e5:e3:88:fb:
                    6c:53:b3:f1:48:36:e2:e3:17:1b:ad:82:4e:f5:c9:
                    4d:eb:d4:0d:63:6a:f4:af:ef:1a:b1:8c:89:07:0c:
                    2b:73:3d:62:30:68:bf:59:c5:c8:93:42:e2:72:43:
                    48:4f:0d:41:17:59:fa:ac:fd:9d:bc:c1:f6:e5:7f:
                    f9:2d:41:68:57:49:5d:ce:2d:16:4d:31:7d:8f:7b:
                    54:e2:b9:e7:9e:58:13:53:5b:de:7d:5a:85:d7:b0:
                    3c:a3:6b:53:e5:a7:bc:0f:fb:88:4a:f8:19:51:bc:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C5:05:60:A4:E7:18:3B:01:A0:93:BC:99:30:08:1E:C8:EF:B2:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/179e0062-9843-48fa-ac1d-7e27eeb796c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c0:31:ea:af:fa:64:19:bc:5d:11:5f:40:88:bf:c4:b5:cd:46:
         1f:2b:6d:36:15:aa:63:b0:51:fa:32:3a:0b:d1:96:5a:ab:65:
         49:a5:57:03:d8:9b:b8:46:ce:2c:dc:f4:da:56:fd:27:9b:7e:
         88:c6:f4:18:0c:ab:fc:7f:70:68:a0:95:2c:e9:a1:7f:09:30:
         6d:48:f9:e4:91:46:22:0d:eb:fa:a2:d8:c9:1c:8c:53:6a:d7:
         71:1f:05:c8:af:d6:15:ae:69:04:59:cf:35:a5:14:86:a1:c6:
         4a:49:43:23:6e:ff:fd:af:dc:a3:7f:5d:c7:56:bf:5a:4d:c0:
         c8:50:11:eb:73:5f:e7:d9:13:b5:71:0c:0b:74:3b:e1:b3:b7:
         8f:be:cb:88:57:6d:7f:47:1e:5a:5c:81:3a:69:b0:0a:16:ba:
         eb:3d:b1:cd:8f:8c:d9:31:47:8a:e3:2e:a1:48:00:85:6d:dd:
         07:5b:91:f3:be:48:e1:5c:68:f0:d7:88:c3:8f:f4:39:2e:8e:
         b6:b1:aa:d0:cf:62:f9:b7:8b:79:25:33:13:3f:3b:a1:62:34:
         65:23:8c:6d:d3:50:e4:99:2b:f3:f3:5e:a4:01:09:89:84:f1:
         f4:c5:e5:62:da:7f:37:da:91:19:08:a6:6d:3e:82:47:ce:03:
         e7:f9:ca:72
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUAJV+aK79shU6RWlBHxB1vXCKQXYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNDdkYjdkZjQzODgzZGJhYjhmNjNlMGY2OWMxODZlZWNh
ZDhhYjI1MTA0MTUxZjE3NTJjODRkNzNhMjIxMmNmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5E9Nex4AEz8NlVUSJWFps00bw6MwqkuTQVVq/qvV0mafb
x0OnPQfR6Ca9CEU90ElR8SHuVw2L2d187LfQUazsC1tteZHj+MHv7ok4zyHJNw75
T6oybvVC91vcYtNrccz5qG/pDYu4mSzG+WUD6oypSfOvQFMBrpTYqOMLm8xh7mTe
xOEvjdEBXdHYuJJDCczJ5eOI+2xTs/FINuLjFxutgk71yU3r1A1javSv7xqxjIkH
DCtzPWIwaL9ZxciTQuJyQ0hPDUEXWfqs/Z28wfblf/ktQWhXSV3OLRZNMX2Pe1Ti
ueeeWBNTW959WoXXsDyja1Plp7wP+4hK+BlRvHNVAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUWsUFYKTnGDsBoJO8mTAIHsjvsvYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE3OWUwMDYyLTk4NDMtNDhmYS1hYzFkLTdlMjdlZWI3OTZjMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCY4zANBgkqhkiG9w0BAQsFAAOCAQEAwDHqr/pkGbxdEV9AiL/Etc1GHytt
NhWqY7BR+jI6C9GWWqtlSaVXA9ibuEbOLNz02lb9J5t+iMb0GAyr/H9waKCVLOmh
fwkwbUj55JFGIg3r+qLYyRyMU2rXcR8FyK/WFa5pBFnPNaUUhqHGSklDI27//a/c
o39dx1a/Wk3AyFAR63Nf59kTtXEMC3Q74bO3j77LiFdtf0ceWlyBOmmwCha66z2x
zY+M2TFHiuMuoUgAhW3dB1uR875I4Vxo8NeIw4/0OS6OtrGq0M9i+beLeSUzEz87
oWI0ZSOMbdNQ5Jkr8/NepAEJiYTx9MXlYtp/N9qRGQimbT6CR84D5/nKcg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:04 2024 by rpki-client on console-fra.rpki-client.org