Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f4d103f-6ee9-44f6-a14f-1cca3b77ed78.roa
File:                     2f4d103f-6ee9-44f6-a14f-1cca3b77ed78.roa (raw, json)
Hash identifier:          DkZRzh6YYFDtdZ+08wppaCWJakulh8ZrlrYQVN6tG9s=
Subject key identifier:   76:61:1F:F7:82:F0:80:F9:4E:AB:BC:F2:29:C0:77:C7:2E:DB:1E:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CDB93B27DF4CD518194F32E80A7C40ACA466F75
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f4d103f-6ee9-44f6-a14f-1cca3b77ed78.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        69.210.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:db:93:b2:7d:f4:cd:51:81:94:f3:2e:80:a7:c4:0a:ca:46:6f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=9a3cdcfc28ed8002f8fa7a80794fede770fee1c6b608b180a3a20855e3af81e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:c4:de:4c:a0:8a:2e:3f:73:f7:93:0f:f7:
                    e4:1b:54:10:03:27:5d:4f:5c:df:f5:06:cd:6b:78:
                    45:04:1d:19:5e:ae:20:f4:a3:0b:7f:6d:ae:0a:f9:
                    aa:54:46:92:13:c7:98:e3:50:36:cb:c9:c4:5f:03:
                    be:bd:51:15:b5:4a:8f:1e:8f:bb:5b:a7:8d:c2:ec:
                    85:a1:46:5e:21:da:2c:8e:ea:02:eb:a6:bf:f5:a1:
                    b1:1f:15:90:10:d6:5e:12:e4:07:37:6b:83:52:7c:
                    2d:eb:ed:13:96:dc:bd:e9:d9:d0:4c:c0:bf:f3:66:
                    18:9d:90:09:56:86:ee:31:99:56:86:0d:d6:21:c6:
                    1e:62:dc:80:7a:f3:0f:7c:43:a1:56:8d:12:fb:f7:
                    ed:2a:c8:5b:38:2c:64:85:3d:7b:c3:9b:59:2e:ca:
                    56:dc:90:ff:58:07:d3:9e:a9:91:a0:91:e8:5d:ea:
                    4f:43:78:82:18:24:df:dd:e7:6e:0a:4e:38:ab:9f:
                    1a:12:2e:42:37:c9:0c:79:eb:b2:df:be:35:e6:84:
                    eb:df:55:37:e7:ac:c8:04:46:ee:8d:31:be:66:c1:
                    9e:ab:5d:ba:2d:f8:96:06:b1:ef:dd:f4:7b:95:bd:
                    d4:e9:ae:5d:5f:31:fd:24:42:2e:df:8f:f3:09:60:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:61:1F:F7:82:F0:80:F9:4E:AB:BC:F2:29:C0:77:C7:2E:DB:1E:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f4d103f-6ee9-44f6-a14f-1cca3b77ed78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.210.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:c0:00:61:75:d1:1b:45:b4:d3:3d:a0:02:7f:17:b5:c2:
         0c:2c:6b:06:29:5c:6a:0a:d4:a7:0b:33:80:0e:fc:bf:4a:9b:
         d2:07:ad:b2:89:9c:a6:0d:3d:c2:9d:b8:ff:f2:df:e7:d3:5a:
         a5:a3:72:aa:97:bc:47:49:5e:74:45:a0:aa:e8:d7:45:51:9d:
         7a:33:71:f2:2d:58:72:05:f7:f3:2e:81:48:50:36:a2:aa:ba:
         1c:ee:19:8e:82:79:b6:e9:ed:ca:ff:3a:bd:62:7f:18:5b:62:
         1e:4c:a3:36:93:9e:9d:ba:c7:4e:fa:c2:c2:5b:43:0d:c2:c9:
         1b:23:c3:da:3d:2c:cd:93:0c:50:7b:96:94:b6:3f:4f:22:8e:
         cc:9d:e1:e0:02:5a:ce:f5:15:16:c9:af:ab:85:8a:46:9e:54:
         42:6e:de:39:20:7a:45:80:dc:a4:07:96:36:06:73:d5:9f:9a:
         a6:9a:1a:8d:b9:29:af:dc:fe:9d:87:a6:f3:8f:9b:62:4b:8d:
         57:99:6c:13:10:ac:50:79:5a:fd:66:d2:f7:a1:6b:51:2a:f3:
         de:d1:cf:42:8d:fa:7d:f7:23:e4:74:a0:5e:5e:b4:24:88:d3:
         91:17:50:11:b4:39:ba:42:59:e5:85:56:1e:16:48:d0:38:60:
         b8:e6:33:77
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTNuTsn30zVGBlPMugKfECspGb3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YTNjZGNmYzI4ZWQ4MDAyZjhmYTdhODA3OTRmZWRlNzcw
ZmVlMWM2YjYwOGIxODBhM2EyMDg1NWUzYWY4MWU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnq8TeTKCKLj9z95MP9+QbVBADJ11PXN/1Bs1reEUEHRle
riD0owt/ba4K+apURpITx5jjUDbLycRfA769URW1So8ej7tbp43C7IWhRl4h2iyO
6gLrpr/1obEfFZAQ1l4S5Ac3a4NSfC3r7ROW3L3p2dBMwL/zZhidkAlWhu4xmVaG
DdYhxh5i3IB68w98Q6FWjRL79+0qyFs4LGSFPXvDm1kuylbckP9YB9OeqZGgkehd
6k9DeIIYJN/d524KTjirnxoSLkI3yQx567LfvjXmhOvfVTfnrMgERu6NMb5mwZ6r
Xbot+JYGse/d9HuVvdTprl1fMf0kQi7fj/MJYPnFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdmEf94LwgPlOq7zyKcB3xy7bHrUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJmNGQxMDNmLTZlZTktNDRmNi1hMTRmLTFjY2EzYjc3ZWQ3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJF0ngwDQYJKoZIhvcNAQELBQADggEBAAwzwABhddEbRbTTPaACfxe1wgws
awYpXGoK1KcLM4AO/L9Km9IHrbKJnKYNPcKduP/y3+fTWqWjcqqXvEdJXnRFoKro
10VRnXozcfItWHIF9/MugUhQNqKquhzuGY6Cebbp7cr/Or1ifxhbYh5MozaTnp26
x076wsJbQw3CyRsjw9o9LM2TDFB7lpS2P08ijsyd4eACWs71FRbJr6uFikaeVEJu
3jkgekWA3KQHljYGc9WfmqaaGo25Ka/c/p2HpvOPm2JLjVeZbBMQrFB5Wv1m0veh
a1Eq897Rz0KN+n33I+R0oF5etCSI05EXUBG0ObpCWeWFVh4WSNA4YLjmM3c=
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:54 2024 by rpki-client on console-ams.rpki-client.org