Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f657815-9ff9-4402-8e59-74db07414844.roa
File:                     4f657815-9ff9-4402-8e59-74db07414844.roa (raw, json)
Hash identifier:          O7Rqt6lDoNJ5en7FzZc0qZsLJpzLLXOlQ/DGsezXQxY=
Subject key identifier:   7E:F8:74:EC:6C:04:95:7A:CB:1A:73:C3:63:8E:7D:8D:00:18:FD:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FB8EB5D0C58145B618D6E947F656CB007DBA434
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f657815-9ff9-4402-8e59-74db07414844.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.43.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b8:eb:5d:0c:58:14:5b:61:8d:6e:94:7f:65:6c:b0:07:db:a4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=4b27f14dcad7cfb659e6b23506d62a9a2133ecf5175909fa088d243f747d8299, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:e9:5f:a6:3b:bc:04:48:ab:44:5e:86:f5:
                    50:31:57:a5:e2:26:f4:c3:c6:32:08:5e:d0:83:fa:
                    74:0d:71:2d:4e:4a:3f:00:ea:bc:5a:5d:ae:0b:c5:
                    5b:2f:d5:dd:fd:92:d5:18:09:1f:13:02:be:28:82:
                    11:1e:0f:9e:65:f9:61:ae:96:6e:00:7e:3b:34:1c:
                    be:b3:f8:c1:f6:b8:5c:9d:fe:0c:c6:3c:fe:a3:d4:
                    03:5c:49:ef:22:e0:f9:ad:e1:73:b1:c9:84:77:14:
                    af:d7:41:b2:3e:42:3b:a3:4d:06:8d:7b:22:61:b1:
                    29:91:b3:3a:72:57:cb:e3:fe:0b:50:76:ad:1a:ae:
                    7b:64:aa:4b:27:41:1c:ee:8d:8e:75:2f:be:e2:96:
                    d4:75:e1:26:24:ea:ae:dc:27:5c:1e:1a:8f:b6:9a:
                    36:e9:e6:b5:aa:9b:ad:8e:18:dd:0f:07:3e:6b:f4:
                    d9:68:58:41:54:cb:36:4b:a7:75:51:1d:76:57:87:
                    f9:d7:03:e9:4b:70:12:51:d9:24:95:d6:a0:cb:3d:
                    fe:c5:e5:74:ad:29:b8:4e:37:c1:b3:fc:54:a5:e8:
                    6b:3a:8a:73:5f:db:8c:bf:d2:55:9c:e8:f7:77:7f:
                    65:64:3b:15:97:14:42:90:d5:b1:d1:6d:de:a0:a4:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F8:74:EC:6C:04:95:7A:CB:1A:73:C3:63:8E:7D:8D:00:18:FD:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f657815-9ff9-4402-8e59-74db07414844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:94:5e:2a:85:08:78:83:60:89:66:94:df:77:42:50:9b:24:
         e0:20:3f:84:b8:dc:d2:8a:55:22:24:c5:11:01:ed:ff:8a:f0:
         78:db:eb:08:eb:27:2b:9f:9f:b0:7d:b0:22:5a:10:f0:9c:4f:
         2c:b7:24:86:e7:cc:21:c3:65:7c:ca:63:c1:fb:be:3b:b4:da:
         7e:07:be:f2:85:7f:94:3e:13:2e:6c:d1:46:b8:7f:37:6e:33:
         11:31:cb:71:bb:1e:d8:e0:f1:cd:7b:f7:e4:26:ab:4b:4e:9d:
         f0:9d:d4:3f:ad:b9:e3:d1:fc:19:71:96:a6:31:ab:c8:be:8a:
         63:4a:2f:f6:8d:fa:f4:b9:cf:2f:05:4f:df:75:9b:89:d9:7f:
         a1:02:d3:bb:33:19:5e:a4:ac:17:00:19:19:6e:47:29:9e:23:
         9d:97:a1:e2:60:5c:8a:9a:4d:1e:a4:c5:06:5a:f8:09:d3:2a:
         72:73:ea:5f:9a:ed:22:4d:79:2c:b3:9d:10:8d:a9:5d:18:a9:
         96:64:8c:21:d3:65:08:07:a7:dd:64:8b:5c:9a:ad:b9:d4:0c:
         a8:22:ea:4f:ed:17:c9:50:28:2b:10:c4:7c:70:26:bd:4c:c2:
         2d:2c:30:64:c8:0b:e0:5c:bb:d8:28:6f:3e:7f:12:ad:ff:aa:
         44:47:5c:05
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUT7jrXQxYFFthjW6Uf2VssAfbpDQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YjI3ZjE0ZGNhZDdjZmI2NTllNmIyMzUwNmQ2MmE5YTIx
MzNlY2Y1MTc1OTA5ZmEwODhkMjQzZjc0N2Q4Mjk5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZTulfpju8BEirRF6G9VAxV6XiJvTDxjIIXtCD+nQNcS1O
Sj8A6rxaXa4LxVsv1d39ktUYCR8TAr4oghEeD55l+WGulm4Afjs0HL6z+MH2uFyd
/gzGPP6j1ANcSe8i4Pmt4XOxyYR3FK/XQbI+QjujTQaNeyJhsSmRszpyV8vj/gtQ
dq0arntkqksnQRzujY51L77iltR14SYk6q7cJ1weGo+2mjbp5rWqm62OGN0PBz5r
9NloWEFUyzZLp3VRHXZXh/nXA+lLcBJR2SSV1qDLPf7F5XStKbhON8Gz/FSl6Gs6
inNf24y/0lWc6Pd3f2VkOxWXFEKQ1bHRbd6gpNPtAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUfvh07GwElXrLGnPDY459jQAY/SQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRmNjU3ODE1LTlmZjktNDQwMi04ZTU5LTc0ZGIwNzQxNDg0NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4KzANBgkqhkiG9w0BAQsFAAOCAQEACpReKoUIeINgiWaU33dCUJsk4CA/
hLjc0opVIiTFEQHt/4rweNvrCOsnK5+fsH2wIloQ8JxPLLckhufMIcNlfMpjwfu+
O7Tafge+8oV/lD4TLmzRRrh/N24zETHLcbse2ODxzXv35CarS06d8J3UP62549H8
GXGWpjGryL6KY0ov9o369LnPLwVP33Wbidl/oQLTuzMZXqSsFwAZGW5HKZ4jnZeh
4mBcippNHqTFBlr4CdMqcnPqX5rtIk15LLOdEI2pXRiplmSMIdNlCAen3WSLXJqt
udQMqCLqT+0XyVAoKxDEfHAmvUzCLSwwZMgL4Fy72ChvPn8Srf+qREdcBQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:02 2024 by rpki-client on console-ams.rpki-client.org