Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d56fe37-9a19-4ecf-a106-b03b8ea71b74.roa
File:                     1d56fe37-9a19-4ecf-a106-b03b8ea71b74.roa (raw, json)
Hash identifier:          iiBjtCV+P4h+1vR7TDSf1nxRQRFLmLOhcAr81Msc+pg=
Subject key identifier:   0B:80:2D:16:C8:40:71:BE:17:FB:EF:B4:96:33:18:BF:3A:C5:E1:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1625CF3AAAC3683E4CE84D64D685C40F21ECDD9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d56fe37-9a19-4ecf-a106-b03b8ea71b74.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        206.125.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:25:cf:3a:aa:c3:68:3e:4c:e8:4d:64:d6:85:c4:0f:21:ec:dd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=687817ad420ad5c72787b7ec2ec3ca84e74f8aa19ce0c3dab47ecbe1de2b9037, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:50:8f:e0:ee:4b:84:b9:67:06:95:44:2b:
                    ec:83:92:4b:02:07:be:fd:91:32:99:f9:c6:ae:3f:
                    e3:d3:4d:b6:65:e4:c7:0b:7c:94:d0:0c:9e:b9:3e:
                    3f:57:85:8f:29:d9:7b:2c:bf:63:32:d4:f8:38:b4:
                    76:f8:13:11:a9:ea:39:43:97:ad:0d:59:cc:f2:78:
                    a6:3e:f0:7f:1c:21:29:3f:66:d7:aa:4b:a6:37:67:
                    db:48:df:c5:1b:b4:fe:a3:0a:78:b8:14:6d:b1:3e:
                    bb:cd:50:cd:db:af:bb:66:41:6e:7c:7c:6d:c7:16:
                    be:ab:35:f0:3d:32:37:70:a9:37:dc:eb:b5:7f:55:
                    30:b2:b8:09:44:71:d2:9d:9c:90:36:a0:23:95:69:
                    55:a2:d8:ac:55:fa:1c:d4:f2:50:02:73:c3:f0:6c:
                    21:2f:8a:cb:86:de:98:f2:e9:b7:d7:7a:d4:00:99:
                    8a:69:e7:ab:af:23:67:35:c6:e1:4c:e7:50:34:2a:
                    31:e8:4f:50:71:50:23:be:a3:7d:58:fc:15:07:6e:
                    e5:21:07:0f:ce:cd:37:28:34:d5:ff:6f:89:6f:58:
                    d9:bc:e5:c3:af:48:d0:60:ad:2a:27:0d:41:74:79:
                    c7:70:82:26:7c:e7:a2:26:e8:93:99:ff:3a:8d:03:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:80:2D:16:C8:40:71:BE:17:FB:EF:B4:96:33:18:BF:3A:C5:E1:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d56fe37-9a19-4ecf-a106-b03b8ea71b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:97:03:ae:39:e0:83:23:15:62:86:bc:61:82:30:0c:bc:
         3c:de:99:b0:ac:1c:63:4f:ea:f7:8d:ea:17:86:3f:40:ab:da:
         17:58:25:f6:5c:b1:94:0f:7a:f3:3a:3d:24:70:d3:bb:4d:1c:
         1d:94:90:cf:e3:8d:6a:c3:21:6d:e2:68:33:f8:07:65:b7:79:
         49:bb:d5:63:77:7f:58:15:4e:57:65:21:c7:7c:fb:6a:44:33:
         8e:9e:ca:02:3b:3d:ba:11:3c:2c:4d:4a:38:9a:a7:f3:6f:dc:
         99:2b:31:61:06:c9:e9:c0:cd:f2:6d:32:7f:20:2d:10:9f:66:
         e7:38:5e:db:bd:d4:26:be:36:cc:a8:76:7e:2d:aa:c4:8d:18:
         11:e4:76:92:e5:e6:80:37:05:5e:54:46:5d:aa:8d:fa:30:b2:
         af:7b:2b:50:7c:d7:70:3d:59:63:cc:11:7d:10:d8:e0:57:c5:
         f1:ef:61:a6:95:61:2a:b7:84:d8:c0:b0:be:94:8d:ee:b4:d9:
         14:6e:66:d6:a8:e4:30:ec:70:58:b1:9b:d5:c7:6c:0e:5d:01:
         ac:f4:28:d1:c8:9d:bf:ab:33:71:41:96:29:b2:b9:8f:71:16:
         1e:89:44:07:0e:9f:93:8c:1f:5b:3c:76:30:64:1f:1d:96:f4:
         34:e6:f7:e4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFiXPOqrDaD5M6E1k1oXEDyHs3ZowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ODc4MTdhZDQyMGFkNWM3Mjc4N2I3ZWMyZWMzY2E4NGU3
NGY4YWExOWNlMGMzZGFiNDdlY2JlMWRlMmI5MDM3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpDFCP4O5LhLlnBpVEK+yDkksCB779kTKZ+cauP+PTTbZl
5McLfJTQDJ65Pj9XhY8p2Xssv2My1Pg4tHb4ExGp6jlDl60NWczyeKY+8H8cISk/
ZteqS6Y3Z9tI38UbtP6jCni4FG2xPrvNUM3br7tmQW58fG3HFr6rNfA9MjdwqTfc
67V/VTCyuAlEcdKdnJA2oCOVaVWi2KxV+hzU8lACc8PwbCEvisuG3pjy6bfXetQA
mYpp56uvI2c1xuFM51A0KjHoT1BxUCO+o31Y/BUHbuUhBw/OzTcoNNX/b4lvWNm8
5cOvSNBgrSonDUF0ecdwgiZ856Im6JOZ/zqNA9z1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUC4AtFshAcb4X+++0ljMYvzrF4RQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFkNTZmZTM3LTlhMTktNGVjZi1hMTA2LWIwM2I4ZWE3MWI3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPOfSgwDQYJKoZIhvcNAQELBQADggEBAArClwOuOeCDIxVihrxhgjAMvDze
mbCsHGNP6veN6heGP0Cr2hdYJfZcsZQPevM6PSRw07tNHB2UkM/jjWrDIW3iaDP4
B2W3eUm71WN3f1gVTldlIcd8+2pEM46eygI7PboRPCxNSjiap/Nv3JkrMWEGyenA
zfJtMn8gLRCfZuc4Xtu91Ca+Nsyodn4tqsSNGBHkdpLl5oA3BV5URl2qjfowsq97
K1B813A9WWPMEX0Q2OBXxfHvYaaVYSq3hNjAsL6Uje602RRuZtao5DDscFixm9XH
bA5dAaz0KNHInb+rM3FBlimyuY9xFh6JRAcOn5OMH1s8djBkHx2W9DTm9+Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:46 2024 by rpki-client on console-fra.rpki-client.org