Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa
File:                     375a6ca2-770f-45e1-a8af-10c7303818a0.roa (raw, json)
Hash identifier:          6YwjIdrl50fY/Nn/iGs2vDYn/sqZKlAdUCsh6L6YmKc=
Subject key identifier:   1F:A1:AE:91:05:D7:66:92:37:95:89:E4:CA:17:9C:DC:B6:D9:5B:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0947CA4C2A8630D3AEF57940181E7568067F4F72
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        163.119.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:47:ca:4c:2a:86:30:d3:ae:f5:79:40:18:1e:75:68:06:7f:4f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=206b1588c8bcc2ea3f4dfa669e87d6c4e186415c37b2c7f9f7479dd88e23dd0f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:01:0d:e2:5f:2c:e7:31:37:f3:08:52:9d:
                    88:60:b4:ff:37:2a:9a:d7:a5:07:f8:96:8a:0a:77:
                    2d:91:17:3d:bc:60:18:ec:25:46:f0:7c:3b:e2:7d:
                    0e:e9:cb:2b:5f:c0:91:36:3b:6c:e2:64:fc:0b:d1:
                    ce:aa:8b:55:d2:fa:2f:fd:8c:14:6e:75:b2:82:44:
                    88:e3:21:93:f7:b6:bb:20:5e:ee:ef:cc:f0:ed:8a:
                    ce:27:e2:f7:4b:d5:8d:e8:4b:73:70:17:b1:c6:62:
                    f7:52:7b:f6:35:d1:6c:04:e0:a4:82:e6:41:a3:15:
                    dc:40:1e:4b:32:07:bb:d4:56:5c:ef:2c:c9:89:bd:
                    76:e6:97:dd:a8:d0:cd:2f:f8:aa:ee:95:d6:49:14:
                    39:01:44:2d:86:d0:61:cf:96:d1:e1:01:5f:79:d2:
                    ae:0d:21:a9:4c:e2:b5:12:c9:d2:63:eb:e1:29:68:
                    2e:58:71:1c:20:1a:d2:0c:73:09:36:17:55:9e:7d:
                    c2:30:11:c6:89:6a:b6:bb:9c:9b:48:03:69:af:72:
                    03:29:aa:8f:02:57:9a:b7:bb:b3:29:b7:01:29:f6:
                    ff:6d:c9:d8:a1:b4:4f:ca:f7:3d:21:8a:08:17:0f:
                    1a:82:2b:30:73:b4:8d:24:42:dc:5c:5d:54:a9:d9:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:AE:91:05:D7:66:92:37:95:89:E4:CA:17:9C:DC:B6:D9:5B:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.119.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         10:14:50:6d:b4:fb:d5:37:f3:5e:f9:13:09:b6:32:fa:09:7f:
         ed:c0:ad:a0:25:c1:4e:8e:3a:df:d5:98:d3:77:18:cd:90:7b:
         49:d6:56:9b:32:ce:0e:00:ca:cf:6c:97:ab:94:93:2b:7a:4d:
         b0:50:25:cb:4d:e8:58:35:90:0f:e3:62:7c:c6:3e:57:56:f4:
         43:1f:b7:36:b5:52:ba:f3:3d:23:23:3c:4d:6f:5f:86:37:59:
         db:6b:ab:c5:66:62:fb:a8:37:d2:9a:01:c2:4e:83:82:de:1b:
         e6:82:af:5f:3a:f5:93:e2:0f:cb:df:36:de:83:46:23:13:50:
         93:68:99:7c:37:85:82:0c:c2:cb:2d:ea:ee:bd:5f:84:e9:d3:
         cb:94:69:32:6b:96:a7:c6:4f:78:ae:89:1a:99:86:c7:cb:c7:
         73:fc:a8:c5:7b:30:72:09:56:9e:72:85:cc:33:70:eb:51:3a:
         ee:f8:63:fa:f5:69:92:e7:c3:d2:d8:01:7d:72:ca:7c:ab:b6:
         cf:c4:fa:bd:85:a4:e5:26:75:3c:9a:7a:44:11:c5:8c:8d:4e:
         2c:9c:f7:c4:bc:62:12:96:f5:7e:9c:88:2c:ee:ec:b1:df:e5:
         6c:c4:74:f1:ee:78:7b:94:9f:d1:b0:d6:4b:31:30:53:a1:c5:
         06:65:a7:0f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCUfKTCqGMNOu9XlAGB51aAZ/T3IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMDZiMTU4OGM4YmNjMmVhM2Y0ZGZhNjY5ZTg3ZDZjNGUx
ODY0MTVjMzdiMmM3ZjlmNzQ3OWRkODhlMjNkZDBmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwJwEN4l8s5zE38whSnYhgtP83KprXpQf4looKdy2RFz28
YBjsJUbwfDvifQ7pyytfwJE2O2ziZPwL0c6qi1XS+i/9jBRudbKCRIjjIZP3trsg
Xu7vzPDtis4n4vdL1Y3oS3NwF7HGYvdSe/Y10WwE4KSC5kGjFdxAHksyB7vUVlzv
LMmJvXbml92o0M0v+KruldZJFDkBRC2G0GHPltHhAV950q4NIalM4rUSydJj6+Ep
aC5YcRwgGtIMcwk2F1WefcIwEcaJara7nJtIA2mvcgMpqo8CV5q3u7MptwEp9v9t
ydihtE/K9z0higgXDxqCKzBztI0kQtxcXVSp2YEXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUH6GukQXXZpI3lYnkyhec3LbZW8wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM3NWE2Y2EyLTc3MGYtNDVlMS1hOGFmLTEwYzczMDM4MThhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAejd4AwDQYJKoZIhvcNAQELBQADggEBABAUUG20+9U38175Ewm2MvoJf+3A
raAlwU6OOt/VmNN3GM2Qe0nWVpsyzg4Ays9sl6uUkyt6TbBQJctN6Fg1kA/jYnzG
PldW9EMftza1UrrzPSMjPE1vX4Y3Wdtrq8VmYvuoN9KaAcJOg4LeG+aCr1869ZPi
D8vfNt6DRiMTUJNomXw3hYIMwsst6u69X4Tp08uUaTJrlqfGT3iuiRqZhsfLx3P8
qMV7MHIJVp5yhcwzcOtROu74Y/r1aZLnw9LYAX1yynyrts/E+r2FpOUmdTyaekQR
xYyNTiyc98S8YhKW9X6ciCzu7LHf5WzEdPHueHuUn9Gw1ksxMFOhxQZlpw8=
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:56 2024 by rpki-client on console-ams.rpki-client.org