Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b9c7d19-e464-4edb-8a42-a98aa3e6b596.roa
File:                     3b9c7d19-e464-4edb-8a42-a98aa3e6b596.roa (raw, json)
Hash identifier:          r/OXmZcCEflUwuw2CZvI/9WxTZScwKt9++NZ82+AkBs=
Subject key identifier:   65:85:B6:B5:D1:BB:65:77:8E:C5:EF:43:C1:1B:32:D9:4D:88:0B:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05F69CAAB7549E4EF59163A85A541693D433A9C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b9c7d19-e464-4edb-8a42-a98aa3e6b596.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        198.14.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f6:9c:aa:b7:54:9e:4e:f5:91:63:a8:5a:54:16:93:d4:33:a9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=9be228f2b1a82d36612d34a735bebdbb71d1894803d3edde27128ef2375c990f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:51:c0:0e:d5:8f:f4:6c:3e:c6:97:8b:b9:
                    7e:dc:2b:1b:9c:a6:9c:d0:e0:f5:e7:39:1e:08:ad:
                    a7:b2:a0:2f:88:c8:fb:08:97:e6:b3:22:ed:3d:88:
                    d4:aa:46:49:f6:4d:c1:53:53:5b:ac:0e:ad:79:78:
                    b7:72:16:c3:c1:d6:72:bb:28:06:dc:fd:7f:6e:61:
                    0e:28:7e:3b:48:dc:c2:f3:3f:e9:e7:89:70:10:e0:
                    32:8e:af:15:90:63:02:49:d2:f3:df:29:ee:e9:c7:
                    0c:41:48:13:e1:85:fe:cc:ca:6f:41:f9:0f:bc:b9:
                    b5:10:e2:40:8f:ae:10:07:af:dd:6e:1f:0d:3c:3d:
                    3d:a0:c9:60:44:18:54:16:02:12:df:48:71:be:91:
                    c9:06:e7:f2:3c:ba:c5:7f:73:98:c4:78:00:0f:56:
                    d2:91:57:3a:6b:67:32:2f:af:34:7d:53:05:11:d8:
                    f2:81:37:53:85:2b:b0:69:d3:fb:1f:bb:9b:4d:5e:
                    f9:16:b2:bb:b3:1a:92:ad:f9:e3:07:b0:83:ba:9c:
                    4c:b8:c2:e6:08:39:35:ab:72:cd:52:37:14:56:88:
                    be:cc:d8:03:1f:5d:98:5b:14:86:26:18:1d:d7:52:
                    74:8e:e0:8f:3d:6c:34:b6:4a:fb:d7:af:25:3b:72:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:85:B6:B5:D1:BB:65:77:8E:C5:EF:43:C1:1B:32:D9:4D:88:0B:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b9c7d19-e464-4edb-8a42-a98aa3e6b596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:e3:ec:50:af:42:e7:e9:37:a1:e7:fb:ef:e7:f6:01:d8:90:
         ff:b3:33:34:e0:bb:d3:ee:17:96:26:55:58:87:52:91:f4:8d:
         7a:c5:c8:04:77:a4:86:21:34:7a:35:c3:0e:ab:ae:f8:63:17:
         3f:84:bb:57:fc:fa:e1:85:e4:af:0b:4d:42:bb:94:0e:e3:93:
         5d:26:2a:e4:8f:d4:f8:81:c1:f4:29:ad:71:a3:4b:f9:1c:32:
         17:8b:ee:a5:fc:94:ee:88:6c:6f:93:45:cf:e2:c4:85:47:8c:
         fc:be:dd:b1:6a:13:5a:cf:35:d1:50:02:b0:81:e6:74:90:87:
         f7:df:bd:05:ad:b7:9a:33:2a:47:b4:75:ab:1c:31:2e:9d:f9:
         cf:f1:a1:ba:f9:f3:7c:82:bd:14:15:c0:78:b1:49:d0:06:1d:
         45:6e:27:60:66:33:aa:29:62:79:53:a4:14:14:f6:35:7a:86:
         8e:c2:57:cd:ab:2c:5b:bf:a5:f5:1a:90:9a:a1:28:87:a2:de:
         95:30:78:b0:81:3c:be:1d:0e:03:e3:ca:75:d2:de:26:be:69:
         7c:d4:4d:29:92:70:89:37:9b:f8:9c:e7:8b:e3:b9:64:ac:c9:
         e1:38:14:51:65:70:f2:0f:ba:d7:3d:ee:2a:ab:0f:de:e1:0f:
         f2:64:a7:83
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBfacqrdUnk71kWOoWlQWk9QzqcUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAyMDAwMDAwWhcNMjQxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YmUyMjhmMmIxYTgyZDM2NjEyZDM0YTczNWJlYmRiYjcx
ZDE4OTQ4MDNkM2VkZGUyNzEyOGVmMjM3NWM5OTBmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDE6VHADtWP9Gw+xpeLuX7cKxucppzQ4PXnOR4IraeyoC+I
yPsIl+azIu09iNSqRkn2TcFTU1usDq15eLdyFsPB1nK7KAbc/X9uYQ4ofjtI3MLz
P+nniXAQ4DKOrxWQYwJJ0vPfKe7pxwxBSBPhhf7Mym9B+Q+8ubUQ4kCPrhAHr91u
Hw08PT2gyWBEGFQWAhLfSHG+kckG5/I8usV/c5jEeAAPVtKRVzprZzIvrzR9UwUR
2PKBN1OFK7Bp0/sfu5tNXvkWsruzGpKt+eMHsIO6nEy4wuYIOTWrcs1SNxRWiL7M
2AMfXZhbFIYmGB3XUnSO4I89bDS2SvvXryU7chb/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZYW2tdG7ZXeOxe9DwRsy2U2IC/0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNiOWM3ZDE5LWU0NjQtNGVkYi04YTQyLWE5OGFhM2U2YjU5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADGDgEwDQYJKoZIhvcNAQELBQADggEBAFzj7FCvQufpN6Hn++/n9gHYkP+z
MzTgu9PuF5YmVViHUpH0jXrFyAR3pIYhNHo1ww6rrvhjFz+Eu1f8+uGF5K8LTUK7
lA7jk10mKuSP1PiBwfQprXGjS/kcMheL7qX8lO6IbG+TRc/ixIVHjPy+3bFqE1rP
NdFQArCB5nSQh/ffvQWtt5ozKke0dascMS6d+c/xobr583yCvRQVwHixSdAGHUVu
J2BmM6opYnlTpBQU9jV6ho7CV82rLFu/pfUakJqhKIei3pUweLCBPL4dDgPjynXS
3ia+aXzUTSmScIk3m/ic54vjuWSsyeE4FFFlcPIPutc97iqrD97hD/Jkp4M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:56 2024 by rpki-client on console-ams.rpki-client.org