Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e832b9e-57ad-489d-8780-bfafdf24e7cc.roa
File:                     2e832b9e-57ad-489d-8780-bfafdf24e7cc.roa (raw, json)
Hash identifier:          7+h9tfIGtg9eGvTff2ojjes5RMVe0Mv9JraG1fx4DfM=
Subject key identifier:   C2:78:93:76:AA:31:97:48:1F:8E:F9:5B:68:6F:DA:8F:00:F6:79:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       212E280616FF5B29F626D99FFE0AFD12A4D8D3D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e832b9e-57ad-489d-8780-bfafdf24e7cc.roa
Signing time:             Mon 02 Dec 2024 00:00:00 +0000
ROA not before:           Mon 02 Dec 2024 00:00:00 +0000
ROA not after:            Mon 06 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        150.247.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2e:28:06:16:ff:5b:29:f6:26:d9:9f:fe:0a:fd:12:a4:d8:d3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  2 00:00:00 2024 GMT
            Not After : Jan  6 23:59:59 2025 GMT
        Subject: serialNumber=76015c7077dc49747250b358f1481723a88b636a46a175df4cd265581a527158, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:c3:93:b6:69:04:ab:f3:e2:ed:f3:4c:97:
                    12:ce:db:2a:9e:cb:ab:de:b2:84:3f:2b:82:5f:ed:
                    5c:a9:e4:42:3a:0b:1c:d2:c2:ce:8f:ea:93:34:c8:
                    fb:44:69:f4:e7:bb:88:66:f5:97:1f:6d:85:82:c4:
                    db:88:4c:78:b4:a8:d3:e9:07:13:71:27:2a:ed:3b:
                    ff:95:2f:ed:13:e5:f1:88:3c:af:7d:de:46:3c:84:
                    c5:01:36:8d:1d:ff:78:6f:26:b3:79:ad:54:ef:a0:
                    5e:df:0d:a7:90:3a:3c:23:15:db:f9:a5:3a:f0:f7:
                    72:0f:03:a0:b2:aa:1e:61:34:ec:71:38:e0:ef:33:
                    33:aa:fd:82:29:dd:dd:08:55:fd:3a:d7:74:58:c0:
                    30:10:8b:e3:80:cc:40:d1:5d:0a:59:2d:d3:29:25:
                    52:50:28:ef:32:27:f3:48:11:82:91:21:7c:8b:25:
                    29:92:7f:8e:95:eb:1b:f9:e6:01:98:ce:d4:e5:38:
                    07:04:81:62:1d:a2:8c:98:04:d7:51:a7:34:ab:5d:
                    7c:83:64:ca:cc:a0:f4:c0:77:91:2a:5f:82:4a:a7:
                    b2:84:97:b0:2c:94:c0:dc:32:8e:29:e9:ea:e9:b7:
                    5c:7f:01:ee:c6:15:d2:d9:d7:86:ee:94:2b:14:27:
                    40:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:78:93:76:AA:31:97:48:1F:8E:F9:5B:68:6F:DA:8F:00:F6:79:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e832b9e-57ad-489d-8780-bfafdf24e7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.247.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:4f:fc:c7:47:87:ee:1e:a8:be:12:68:34:50:4a:f4:42:23:
         2b:b4:ef:77:cc:5d:1b:be:bf:00:3c:79:f6:44:7f:41:56:db:
         c5:bb:a8:e8:12:d1:75:66:a8:fa:f1:d6:6c:ab:68:94:59:7a:
         c7:d6:03:89:ef:d0:b0:29:c0:67:16:ca:93:ec:22:e7:34:3f:
         99:a2:23:8a:e0:c3:61:8e:7e:36:85:a4:93:8b:dc:1c:c0:cf:
         7d:e8:d2:86:ee:fa:9f:13:59:d0:2b:a8:04:06:5c:76:6a:aa:
         f0:41:03:c4:f3:23:23:58:f3:ff:05:9c:ee:f8:7f:f8:07:b7:
         fc:15:77:da:08:72:fa:ef:5a:54:12:0b:4d:d0:bc:34:45:16:
         42:bf:59:6b:21:bc:4f:71:1b:82:74:03:d3:f0:86:9d:80:81:
         67:99:ad:d7:6b:f5:30:15:61:19:49:8f:ae:d2:6b:d0:d4:7f:
         f0:04:55:e3:d9:7e:4f:08:41:73:4d:1b:62:00:10:47:b9:b4:
         5a:cb:62:53:d5:6a:37:e3:4c:be:e6:2a:9e:34:2b:95:00:7e:
         86:4b:c2:97:b6:62:78:55:c9:86:9a:f4:cb:1d:a8:ed:33:b4:
         e0:35:db:64:90:17:ca:5a:4d:d9:3f:b9:47:d5:f7:d7:93:0e:
         9c:2e:67:06
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIS4oBhb/Wyn2Jtmf/gr9EqTY09cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAyMDAwMDAwWhcNMjUwMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NjAxNWM3MDc3ZGM0OTc0NzI1MGIzNThmMTQ4MTcyM2E4
OGI2MzZhNDZhMTc1ZGY0Y2QyNjU1ODFhNTI3MTU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzi8OTtmkEq/Pi7fNMlxLO2yqey6vesoQ/K4Jf7Vyp5EI6
CxzSws6P6pM0yPtEafTnu4hm9ZcfbYWCxNuITHi0qNPpBxNxJyrtO/+VL+0T5fGI
PK993kY8hMUBNo0d/3hvJrN5rVTvoF7fDaeQOjwjFdv5pTrw93IPA6Cyqh5hNOxx
OODvMzOq/YIp3d0IVf0613RYwDAQi+OAzEDRXQpZLdMpJVJQKO8yJ/NIEYKRIXyL
JSmSf46V6xv55gGYztTlOAcEgWIdooyYBNdRpzSrXXyDZMrMoPTAd5EqX4JKp7KE
l7AslMDcMo4p6erpt1x/Ae7GFdLZ14bulCsUJ0DrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwniTdqoxl0gfjvlbaG/ajwD2eRYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJlODMyYjllLTU3YWQtNDg5ZC04NzgwLWJmYWZkZjI0ZTdjYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACW9yAwDQYJKoZIhvcNAQELBQADggEBAJRP/MdHh+4eqL4SaDRQSvRCIyu0
73fMXRu+vwA8efZEf0FW28W7qOgS0XVmqPrx1myraJRZesfWA4nv0LApwGcWypPs
Iuc0P5miI4rgw2GOfjaFpJOL3BzAz33o0obu+p8TWdArqAQGXHZqqvBBA8TzIyNY
8/8FnO74f/gHt/wVd9oIcvrvWlQSC03QvDRFFkK/WWshvE9xG4J0A9Pwhp2AgWeZ
rddr9TAVYRlJj67Sa9DUf/AEVePZfk8IQXNNG2IAEEe5tFrLYlPVajfjTL7mKp40
K5UAfoZLwpe2YnhVyYaa9MsdqO0ztOA122SQF8paTdk/uUfV99eTDpwuZwY=
-----END CERTIFICATE-----
Generated at Thu Dec 26 01:22:50 2024 by rpki-client on console-fra.rpki-client.org