Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e13601b-8c9c-42cf-bf89-fa8419e640eb.roa
File:                     1e13601b-8c9c-42cf-bf89-fa8419e640eb.roa (raw, json)
Hash identifier:          2J5cBquqOT5pLkgqdOLPB5Sz2nrSQ27YTwU2lfXxGR0=
Subject key identifier:   D2:C9:50:95:93:44:C4:DF:93:70:9F:16:48:85:60:5F:9C:18:93:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       186AFE1BF06FCF980DD9F478EB805C2B8C9FE87A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e13601b-8c9c-42cf-bf89-fa8419e640eb.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        15.219.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6a:fe:1b:f0:6f:cf:98:0d:d9:f4:78:eb:80:5c:2b:8c:9f:e8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=3e13fef9919db53f032a82237408fd2794068b4752789be23f379ac01396a77d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:9e:01:80:90:1a:f2:80:c5:c7:b9:31:6b:
                    94:3e:e9:e4:67:37:60:95:e2:7a:6a:ca:02:25:b4:
                    70:2f:b9:dd:06:31:f8:fb:3f:41:dc:7b:7e:09:5f:
                    9a:0d:96:fd:c1:8f:86:0e:0f:37:6a:83:58:1b:7a:
                    7b:e1:cb:d3:c4:62:23:32:f3:9b:69:dd:0a:22:fc:
                    97:6e:82:15:a5:c8:ca:b1:db:c9:32:ad:25:b2:b2:
                    1f:7d:74:1d:d6:6a:8b:39:45:34:f5:f4:66:77:14:
                    18:89:be:ee:6e:00:5f:c4:95:68:8a:28:6c:bb:d8:
                    14:91:db:1a:bf:4c:26:c8:2b:b5:2e:96:cd:df:8b:
                    b2:7c:0b:d4:b3:19:2e:cd:a0:bf:5d:1f:36:4c:f0:
                    aa:35:e2:12:22:24:58:12:9f:89:da:19:30:15:d9:
                    ca:f9:06:b9:4d:ef:17:c1:46:91:26:51:ee:be:04:
                    45:e3:8d:c9:1c:c3:c2:3a:0f:c2:01:ff:bf:ae:3d:
                    e6:74:7f:9f:21:70:51:d9:92:2a:bf:fd:67:c0:7f:
                    a8:8e:b9:02:a3:52:64:b9:45:28:db:ee:b2:46:ef:
                    d9:79:83:24:51:97:27:20:5d:c6:28:5b:c4:16:df:
                    d7:b8:61:71:d2:1e:05:7d:b1:d5:d4:fc:c3:9e:55:
                    97:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C9:50:95:93:44:C4:DF:93:70:9F:16:48:85:60:5F:9C:18:93:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e13601b-8c9c-42cf-bf89-fa8419e640eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:b0:61:66:95:f9:ea:be:2e:b8:f5:1d:a5:b7:24:e0:8b:e9:
         2a:77:1f:0d:90:c2:38:ec:5b:59:2e:32:37:55:10:2e:dd:e6:
         3c:74:05:83:c3:95:1a:69:cc:8b:15:ff:e9:9d:5c:5b:b1:af:
         de:d1:cd:0a:02:a3:c2:08:14:54:6c:6a:ea:69:29:ff:c8:9c:
         7a:1a:11:17:0e:03:ec:57:e5:b4:2d:7b:3a:57:d4:23:18:b6:
         69:a7:72:d8:4c:52:23:81:37:a7:ff:65:8a:18:07:2d:70:36:
         a9:1d:93:6f:3f:1e:ce:2b:a5:7a:97:cc:59:75:cc:33:c7:72:
         7b:14:c7:f8:72:d4:f5:c5:55:3c:69:ed:43:39:fb:cc:84:5a:
         12:7f:32:88:a4:94:18:67:cb:f6:a6:f7:17:5e:a3:9e:97:f3:
         13:3e:cc:b2:0f:04:1c:a9:4f:9c:df:64:e6:53:cf:20:81:37:
         a4:c9:db:2b:d4:6f:29:59:39:68:42:50:3e:46:47:b8:ab:41:
         80:c4:f9:4b:71:20:da:17:74:a8:de:66:a5:67:3f:df:a4:de:
         3b:3e:b5:a5:45:5b:86:ad:45:1b:32:3a:1c:71:00:f5:b2:1c:
         1d:21:68:aa:61:b4:b2:09:16:36:e2:e1:f4:bc:8d:60:5c:6b:
         84:60:7f:39
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUGGr+G/Bvz5gN2fR464BcK4yf6HowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZTEzZmVmOTkxOWRiNTNmMDMyYTgyMjM3NDA4ZmQyNzk0
MDY4YjQ3NTI3ODliZTIzZjM3OWFjMDEzOTZhNzdkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2/J4BgJAa8oDFx7kxa5Q+6eRnN2CV4npqygIltHAvud0G
Mfj7P0Hce34JX5oNlv3Bj4YODzdqg1gbenvhy9PEYiMy85tp3Qoi/JdughWlyMqx
28kyrSWysh99dB3Waos5RTT19GZ3FBiJvu5uAF/ElWiKKGy72BSR2xq/TCbIK7Uu
ls3fi7J8C9SzGS7NoL9dHzZM8Ko14hIiJFgSn4naGTAV2cr5BrlN7xfBRpEmUe6+
BEXjjckcw8I6D8IB/7+uPeZ0f58hcFHZkiq//WfAf6iOuQKjUmS5RSjb7rJG79l5
gyRRlycgXcYoW8QW39e4YXHSHgV9sdXU/MOeVZfbAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU0slQlZNExN+TcJ8WSIVgX5wYk3wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFlMTM2MDFiLThjOWMtNDJjZi1iZjg5LWZhODQxOWU2NDBlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP2zANBgkqhkiG9w0BAQsFAAOCAQEAMLBhZpX56r4uuPUdpbck4IvpKncf
DZDCOOxbWS4yN1UQLt3mPHQFg8OVGmnMixX/6Z1cW7Gv3tHNCgKjwggUVGxq6mkp
/8icehoRFw4D7FfltC17OlfUIxi2aady2ExSI4E3p/9lihgHLXA2qR2Tbz8eziul
epfMWXXMM8dyexTH+HLU9cVVPGntQzn7zIRaEn8yiKSUGGfL9qb3F16jnpfzEz7M
sg8EHKlPnN9k5lPPIIE3pMnbK9RvKVk5aEJQPkZHuKtBgMT5S3Eg2hd0qN5mpWc/
36TeOz61pUVbhq1FGzI6HHEA9bIcHSFoqmG0sgkWNuLh9LyNYFxrhGB/OQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:46 2024 by rpki-client on console-fra.rpki-client.org