Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32987375-7151-4898-b031-8c1d31813bd7.roa
File:                     32987375-7151-4898-b031-8c1d31813bd7.roa (raw, json)
Hash identifier:          FtKrMExjJzFK7Ox/WkfLvY6/BsPl52BRls92JBgGJtE=
Subject key identifier:   6E:50:1D:F6:DF:96:EC:2E:65:C4:08:E4:65:B6:11:DC:E6:EC:4C:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44AD97EE607631799C67651D1CBDC1083FA64FA9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32987375-7151-4898-b031-8c1d31813bd7.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        75.3.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ad:97:ee:60:76:31:79:9c:67:65:1d:1c:bd:c1:08:3f:a6:4f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=4c105b3ba473d888782302e0b48d8cdd787d61ffbc6a9396228d0c2bf50c5cd1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:3e:4c:e8:09:34:e6:ec:11:51:9b:7f:7b:
                    25:0c:08:23:14:bc:d0:b2:ce:72:82:16:6a:4c:b3:
                    de:68:00:46:07:90:1e:54:cd:7b:2a:78:45:a6:cc:
                    c0:e3:ac:20:11:d8:f4:2e:55:95:50:2a:9d:52:82:
                    45:89:d1:40:65:4f:9b:18:7d:2f:0e:f1:d6:4b:4c:
                    75:44:69:17:1a:32:dc:ef:2a:1b:44:6b:ae:b9:b2:
                    c3:1d:a7:fe:a7:42:37:86:68:f1:ed:dd:90:79:80:
                    72:5a:b1:70:c2:e6:75:d6:37:f0:6d:76:27:67:05:
                    78:b9:c5:eb:dc:80:06:f5:c8:39:43:8a:f2:43:70:
                    12:c9:2e:35:f0:17:cc:26:4f:c0:17:25:6c:31:65:
                    a6:87:60:5d:ef:97:2a:da:b5:06:60:01:cc:7a:17:
                    b1:78:f0:8e:8f:2e:0d:8b:0e:bc:b5:e1:a2:83:22:
                    f2:8f:77:1b:5c:bc:b3:7a:27:53:fc:58:36:a6:15:
                    16:83:19:d9:a8:4a:0f:dc:5f:f4:9f:09:14:97:1d:
                    5a:87:32:65:8c:8b:3c:33:54:6f:2c:de:2d:35:85:
                    a4:b8:d5:69:a5:a9:a5:fb:d1:f0:85:71:34:d5:17:
                    a0:ec:a7:51:f7:c7:3d:14:a4:3c:dc:2e:04:30:e7:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:50:1D:F6:DF:96:EC:2E:65:C4:08:E4:65:B6:11:DC:E6:EC:4C:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32987375-7151-4898-b031-8c1d31813bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:83:98:e2:df:c5:a8:09:e9:87:c0:19:a2:4c:81:c5:de:2a:
         c4:d9:58:47:e9:10:c1:96:d4:14:03:78:8f:b1:1b:ca:78:9b:
         ba:b5:ad:1e:a0:1c:09:8b:b6:f3:82:2e:b2:3d:f3:96:7c:1f:
         e6:f2:a1:61:2e:41:10:85:66:7f:4b:f0:36:0b:a0:db:4d:4b:
         5d:86:8b:5e:47:e2:f2:d8:70:5b:f3:3e:cd:18:cd:02:28:3d:
         c8:92:4f:0c:e8:5d:c8:ea:1b:ed:e7:0f:8e:0b:e3:34:46:24:
         c4:21:4d:f8:35:b1:be:59:0c:00:6b:aa:19:92:89:f9:de:6f:
         4f:e8:a0:bc:11:6c:0a:a5:f2:0d:c0:f8:d2:e9:a8:4f:98:eb:
         9b:73:da:ae:ec:63:cc:f5:00:63:be:09:db:6d:c9:24:81:80:
         96:37:0e:fe:1b:a1:1f:90:4c:30:b0:e8:bd:4b:01:0b:f1:8b:
         a8:ad:1b:e8:47:8b:d8:38:28:1f:a0:f9:a3:e7:22:ae:86:75:
         79:91:12:1c:61:30:cd:5e:c5:71:f7:11:7b:09:9b:b9:ad:f8:
         2d:e9:de:58:3f:ad:0c:13:de:94:55:bd:31:4d:b8:33:00:ed:
         bf:89:34:fa:d9:2b:39:95:35:96:7f:f1:f6:70:29:e7:91:30:
         d5:a6:6b:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURK2X7mB2MXmcZ2UdHL3BCD+mT6kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0YzEwNWIzYmE0NzNkODg4NzgyMzAyZTBiNDhkOGNkZDc4
N2Q2MWZmYmM2YTkzOTYyMjhkMGMyYmY1MGM1Y2QxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJgz5M6Ak05uwRUZt/eyUMCCMUvNCyznKCFmpMs95oAEYH
kB5UzXsqeEWmzMDjrCAR2PQuVZVQKp1SgkWJ0UBlT5sYfS8O8dZLTHVEaRcaMtzv
KhtEa665ssMdp/6nQjeGaPHt3ZB5gHJasXDC5nXWN/BtdidnBXi5xevcgAb1yDlD
ivJDcBLJLjXwF8wmT8AXJWwxZaaHYF3vlyratQZgAcx6F7F48I6PLg2LDry14aKD
IvKPdxtcvLN6J1P8WDamFRaDGdmoSg/cX/SfCRSXHVqHMmWMizwzVG8s3i01haS4
1WmlqaX70fCFcTTVF6Dsp1H3xz0UpDzcLgQw59APAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUblAd9t+W7C5lxAjkZbYR3ObsTDgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMyOTg3Mzc1LTcxNTEtNDg5OC1iMDMxLThjMWQzMTgxM2JkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZLA4AwDQYJKoZIhvcNAQELBQADggEBALGDmOLfxagJ6YfAGaJMgcXeKsTZ
WEfpEMGW1BQDeI+xG8p4m7q1rR6gHAmLtvOCLrI985Z8H+byoWEuQRCFZn9L8DYL
oNtNS12Gi15H4vLYcFvzPs0YzQIoPciSTwzoXcjqG+3nD44L4zRGJMQhTfg1sb5Z
DABrqhmSifneb0/ooLwRbAql8g3A+NLpqE+Y65tz2q7sY8z1AGO+CdttySSBgJY3
Dv4boR+QTDCw6L1LAQvxi6itG+hHi9g4KB+g+aPnIq6GdXmREhxhMM1exXH3EXsJ
m7mt+C3p3lg/rQwT3pRVvTFNuDMA7b+JNPrZKzmVNZZ/8fZwKeeRMNWma2w=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:52 2024 by rpki-client on console-fra.rpki-client.org