Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a05282-c7fc-4bec-b3db-2b1e5d02f539.roa
File:                     17a05282-c7fc-4bec-b3db-2b1e5d02f539.roa (raw, json)
Hash identifier:          6fJBMqy/rvdzbrKRXQ4Oty+8Bme60WNBUUl8R99keEM=
Subject key identifier:   5E:F7:98:3F:58:66:73:C5:35:B7:ED:65:9F:81:27:52:A2:F1:56:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E8C7C64FBC76D31C8993E17D03A44A5D09F9B6F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a05282-c7fc-4bec-b3db-2b1e5d02f539.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        165.113.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8c:7c:64:fb:c7:6d:31:c8:99:3e:17:d0:3a:44:a5:d0:9f:9b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=525e9f1d1767ec8be757e6f759929b391912dd845b80dba5caece2872cdc327c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:fc:44:5c:d1:7e:af:d0:4b:57:4b:17:5f:
                    77:9a:ac:dc:9b:39:52:56:eb:91:3d:ce:61:b7:f3:
                    5a:a4:6b:2e:33:c7:af:ac:1e:84:20:aa:60:d6:c3:
                    7d:6b:69:13:67:93:ab:fb:10:81:76:12:5e:31:c4:
                    f7:f4:ba:cc:91:0f:bc:f8:c3:c5:e7:d2:ae:e2:74:
                    08:d2:54:2c:77:44:fb:55:05:13:b9:27:48:fd:dd:
                    8c:8c:38:35:cc:a8:d2:b0:6b:17:45:31:8c:d6:1f:
                    25:97:e1:47:88:00:21:57:a4:2e:ab:1b:1e:ba:81:
                    2a:7a:b4:e7:dd:d9:3d:f9:ca:26:0a:56:71:15:d0:
                    9f:b8:35:2c:4a:86:21:49:18:f4:79:57:65:1d:96:
                    5a:f8:5c:62:d8:14:c0:83:2c:96:ba:10:79:e2:77:
                    02:c4:97:e5:f6:69:40:ee:98:f9:cc:93:be:92:8e:
                    cf:b1:08:7f:a2:93:35:bb:38:b3:27:e8:1b:76:72:
                    ae:62:36:f1:cc:3c:4e:a6:00:da:0d:b0:a7:d7:a1:
                    fb:30:ff:dc:28:00:28:ee:44:6f:70:21:dc:a5:dd:
                    e1:3d:da:27:e0:0e:f9:44:68:25:2e:8d:55:92:09:
                    ca:42:80:a4:d1:f6:85:61:e5:dd:68:6d:1b:9a:10:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:98:3F:58:66:73:C5:35:B7:ED:65:9F:81:27:52:A2:F1:56:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a05282-c7fc-4bec-b3db-2b1e5d02f539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:ef:a0:84:08:ce:43:41:51:4a:7b:08:83:1c:1c:13:fb:36:
         9d:3b:90:c2:ea:17:82:99:a0:27:16:63:50:f2:a9:80:8d:51:
         97:9d:9a:40:4e:2e:80:ab:52:2e:bf:84:7b:fb:ca:5f:63:b2:
         bb:09:bb:e8:f5:5a:65:5e:77:32:29:93:29:18:50:ee:06:8a:
         8a:a6:33:09:ca:85:26:6a:e6:a9:df:e5:ae:5f:86:20:ce:e4:
         1d:f1:62:e1:d1:3a:01:52:d6:32:0e:e2:c2:19:e2:fe:3b:d5:
         d5:0e:32:87:4e:9e:e8:74:fc:23:95:a3:01:66:15:ea:f0:ca:
         98:22:83:9b:45:c0:f0:60:e5:4c:75:82:04:c9:93:3a:fc:b1:
         fa:3b:37:e8:3a:ab:61:c2:37:ab:4a:85:70:77:a7:91:c2:44:
         3c:48:a7:e7:13:f6:6e:d1:4d:05:44:5f:13:38:b7:b2:a4:58:
         44:9c:1a:ea:36:23:ad:5b:59:26:6d:50:4c:74:2b:29:37:16:
         72:fd:48:a7:f2:42:20:a1:f1:25:b3:1b:ae:73:e9:2e:9d:1c:
         0b:65:ce:bb:72:7f:c6:15:d7:f7:56:7d:e8:0d:c1:ef:35:35:
         6b:a2:c8:b3:3b:19:31:65:c8:f2:8d:55:98:40:a2:d0:87:2c:
         70:92:bf:b8
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUXox8ZPvHbTHImT4X0DpEpdCfm28wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MjVlOWYxZDE3NjdlYzhiZTc1N2U2Zjc1OTkyOWIzOTE5
MTJkZDg0NWI4MGRiYTVjYWVjZTI4NzJjZGMzMjdjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDO5vxEXNF+r9BLV0sXX3earNybOVJW65E9zmG381qkay4z
x6+sHoQgqmDWw31raRNnk6v7EIF2El4xxPf0usyRD7z4w8Xn0q7idAjSVCx3RPtV
BRO5J0j93YyMODXMqNKwaxdFMYzWHyWX4UeIACFXpC6rGx66gSp6tOfd2T35yiYK
VnEV0J+4NSxKhiFJGPR5V2Udllr4XGLYFMCDLJa6EHnidwLEl+X2aUDumPnMk76S
js+xCH+ikzW7OLMn6Bt2cq5iNvHMPE6mANoNsKfXofsw/9woACjuRG9wIdyl3eE9
2ifgDvlEaCUujVWSCcpCgKTR9oVh5d1obRuaEL4/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUXveYP1hmc8U1t+1ln4EnUqLxVuMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE3YTA1MjgyLWM3ZmMtNGJlYy1iM2RiLTJiMWU1ZDAyZjUzOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwClcTANBgkqhkiG9w0BAQsFAAOCAQEAXO+ghAjOQ0FRSnsIgxwcE/s2nTuQ
wuoXgpmgJxZjUPKpgI1Rl52aQE4ugKtSLr+Ee/vKX2Oyuwm76PVaZV53MimTKRhQ
7gaKiqYzCcqFJmrmqd/lrl+GIM7kHfFi4dE6AVLWMg7iwhni/jvV1Q4yh06e6HT8
I5WjAWYV6vDKmCKDm0XA8GDlTHWCBMmTOvyx+js36DqrYcI3q0qFcHenkcJEPEin
5xP2btFNBURfEzi3sqRYRJwa6jYjrVtZJm1QTHQrKTcWcv1Ip/JCIKHxJbMbrnPp
Lp0cC2XOu3J/xhXX91Z96A3B7zU1a6LIszsZMWXI8o1VmECi0IcscJK/uA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:44 2024 by rpki-client on console-fra.rpki-client.org