Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa
File:                     1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa (raw, json)
Hash identifier:          5NNXJ/e4uJ3O08kTiQAr1QWYvzCkLyPhJKuYvJj/P2A=
Subject key identifier:   21:1C:F7:11:14:7A:6D:7A:7C:58:3A:22:36:9A:15:FE:9F:09:E5:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78CA9BE48167BEBA6219A4C81EC9A5C452CFCF45
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.5.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ca:9b:e4:81:67:be:ba:62:19:a4:c8:1e:c9:a5:c4:52:cf:cf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=43c83204a9720504d4b5991e68fee2032599044def2f0a088d9906d9aeb0323c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2f:77:11:13:fe:6a:04:23:4e:bf:ae:12:10:
                    69:af:84:81:08:27:15:ec:c4:6b:b1:f5:75:42:22:
                    b6:dd:75:3a:c1:de:61:57:73:8a:07:cc:e9:b3:83:
                    86:81:20:58:02:9c:9a:43:0b:93:44:c2:b2:a8:82:
                    17:f4:5f:7b:00:34:82:29:5f:86:d6:9c:51:ac:50:
                    4d:d1:94:c8:8a:15:5f:22:cd:99:c4:2a:52:f0:60:
                    ae:be:db:df:11:3a:57:d4:c7:85:dc:3f:5b:18:08:
                    f6:0f:02:ff:e6:e4:5e:98:ac:7b:7f:01:08:d5:62:
                    76:fc:90:8d:d3:e5:d8:ea:be:e4:ad:fc:fa:09:05:
                    96:e1:52:dd:3a:a2:cc:c6:c2:23:7b:95:88:a7:b8:
                    df:5e:2d:d3:ef:36:05:6e:e0:0d:e5:9f:c8:39:66:
                    49:59:69:aa:c1:8a:31:1c:81:5b:c5:16:d5:15:81:
                    92:d5:b4:64:83:63:c0:d0:67:f7:9c:f6:8c:af:4d:
                    19:7c:21:dc:00:b4:40:c6:15:f0:73:9a:20:56:58:
                    e4:0f:19:38:d3:21:80:3c:a9:61:c7:d6:51:91:1f:
                    3d:60:66:bc:3a:1c:bb:65:5c:c7:f9:09:c5:b2:6d:
                    b6:bc:81:c6:eb:b4:b3:71:ac:d6:47:e5:1b:66:d5:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1C:F7:11:14:7A:6D:7A:7C:58:3A:22:36:9A:15:FE:9F:09:E5:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.5.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:4f:27:66:88:88:5e:48:22:b9:29:02:54:bc:d9:30:62:18:
         8a:e3:d9:c4:0e:8a:45:b1:b7:7d:4c:8f:69:49:67:a8:44:d2:
         fa:5b:06:a4:46:78:4f:7c:ba:62:45:4b:a2:7b:92:cd:33:c6:
         9f:5d:80:26:c5:6d:4b:f8:66:c9:e8:8f:18:0d:0f:25:48:fb:
         b9:1c:7c:bc:5c:43:33:95:d9:6c:78:55:bb:33:3a:f3:60:5b:
         84:6f:e1:8d:c6:ae:e5:58:4a:dc:d6:43:db:a4:7f:e0:e1:08:
         3d:be:47:3e:78:87:94:5a:7d:68:10:b8:d7:fb:7c:51:d4:63:
         81:53:fe:d9:fb:4e:81:79:8a:3d:ff:2d:e4:f7:df:f6:4d:bc:
         3d:a7:4f:02:37:97:72:9e:bc:b8:3b:88:92:f9:a4:45:6e:b6:
         f4:e6:e4:20:e9:44:31:6a:ee:4b:2b:67:cb:a0:61:3d:ca:75:
         49:73:08:d7:68:12:dc:78:b3:8c:a8:1f:f0:96:c5:54:4a:7c:
         18:de:00:d7:ea:62:1b:e4:ef:cf:78:16:b2:e7:27:ee:b8:18:
         43:44:c3:ef:53:b4:34:e7:4e:2e:85:3d:a3:29:17:0e:93:be:
         03:86:68:a7:26:50:e6:ee:a6:49:21:48:f2:be:6b:e9:0b:fd:
         79:05:dc:7e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUeMqb5IFnvrpiGaTIHsmlxFLPz0UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0M2M4MzIwNGE5NzIwNTA0ZDRiNTk5MWU2OGZlZTIwMzI1
OTkwNDRkZWYyZjBhMDg4ZDk5MDZkOWFlYjAzMjNjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpL3cRE/5qBCNOv64SEGmvhIEIJxXsxGux9XVCIrbddTrB
3mFXc4oHzOmzg4aBIFgCnJpDC5NEwrKoghf0X3sANIIpX4bWnFGsUE3RlMiKFV8i
zZnEKlLwYK6+298ROlfUx4XcP1sYCPYPAv/m5F6YrHt/AQjVYnb8kI3T5djqvuSt
/PoJBZbhUt06oszGwiN7lYinuN9eLdPvNgVu4A3ln8g5ZklZaarBijEcgVvFFtUV
gZLVtGSDY8DQZ/ec9oyvTRl8IdwAtEDGFfBzmiBWWOQPGTjTIYA8qWHH1lGRHz1g
Zrw6HLtlXMf5CcWybba8gcbrtLNxrNZH5Rtm1TD1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUIRz3ERR6bXp8WDoiNpoV/p8J5cEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFiMGZmMWY5LTY2YzYtNDIzOC05MDhkLTc4ZWY1YmFiMjBiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2BTANBgkqhkiG9w0BAQsFAAOCAQEAdU8nZoiIXkgiuSkCVLzZMGIYiuPZ
xA6KRbG3fUyPaUlnqETS+lsGpEZ4T3y6YkVLonuSzTPGn12AJsVtS/hmyeiPGA0P
JUj7uRx8vFxDM5XZbHhVuzM682BbhG/hjcau5VhK3NZD26R/4OEIPb5HPniHlFp9
aBC41/t8UdRjgVP+2ftOgXmKPf8t5Pff9k28PadPAjeXcp68uDuIkvmkRW629Obk
IOlEMWruSytny6BhPcp1SXMI12gS3HizjKgf8JbFVEp8GN4A1+piG+Tvz3gWsucn
7rgYQ0TD71O0NOdOLoU9oykXDpO+A4ZopyZQ5u6mSSFI8r5r6Qv9eQXcfg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:45 2024 by rpki-client on console-fra.rpki-client.org