Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5342dd98-1ab1-46dd-8b66-87fbb2a4626a.roa
File:                     5342dd98-1ab1-46dd-8b66-87fbb2a4626a.roa (raw, json)
Hash identifier:          fV/6jb6hP5l03Os/KhfbZsGUSMUS24RSVEEI/7H5mQk=
Subject key identifier:   2D:4F:56:C5:F8:8C:5C:65:A9:53:A4:A4:83:11:1D:E4:32:77:6E:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A1127E743A5419AFB948F840192288D1C2380B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5342dd98-1ab1-46dd-8b66-87fbb2a4626a.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        40.48.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:11:27:e7:43:a5:41:9a:fb:94:8f:84:01:92:28:8d:1c:23:80:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=e93ed1c6209c1ba7905f858f22aea7bbfaa3b57b437dc4755e7bdf78daeef614, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:6c:c8:38:36:6e:7c:af:fd:7d:7b:30:49:
                    a9:62:f7:c1:2a:3e:3a:49:59:e6:b8:8e:05:7b:20:
                    86:e5:ab:52:76:94:ee:2c:70:9d:95:17:34:29:a1:
                    5d:22:c7:66:a4:81:b4:e6:6b:26:b7:bf:77:8b:ab:
                    8d:58:77:0b:ac:f7:b3:65:db:b1:57:76:a3:a1:c1:
                    bd:6f:a5:5c:e0:ee:e8:ba:99:b9:45:10:df:d8:1f:
                    f9:02:88:8a:42:00:cf:d2:86:b3:70:41:5c:80:46:
                    61:f9:24:d3:3f:e4:aa:f6:14:79:26:3e:e0:e4:fc:
                    8d:61:8e:62:95:51:f7:e9:06:33:78:f4:4f:45:dc:
                    a2:c1:ba:2c:34:25:8b:34:c7:80:87:77:d4:a8:b0:
                    78:d8:44:9a:fb:38:17:98:10:02:7f:48:f4:00:18:
                    60:d9:b2:fc:dc:d7:2b:e1:c2:4d:85:09:0e:6c:4d:
                    2e:9a:7a:9d:29:a9:66:da:38:5a:5c:fb:26:90:e9:
                    df:e2:cf:f7:d8:73:ee:f8:6b:a0:5b:06:23:88:ee:
                    01:c1:c5:52:a2:66:2f:e8:78:bb:eb:81:ad:d8:65:
                    7c:e6:9f:13:57:63:55:20:a4:f1:d4:60:19:2e:8b:
                    6d:5e:2b:b3:04:64:75:15:f8:e0:af:b8:97:6a:41:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4F:56:C5:F8:8C:5C:65:A9:53:A4:A4:83:11:1D:E4:32:77:6E:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5342dd98-1ab1-46dd-8b66-87fbb2a4626a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:00:a9:43:3f:eb:68:38:d4:58:b4:d7:e5:c5:8d:ca:8b:
         35:06:6c:f6:0f:a5:97:ea:3c:eb:fd:24:c7:e0:27:83:fa:f4:
         ae:c7:09:b5:f4:c1:91:9b:b1:8e:75:bc:2c:e4:19:da:99:4d:
         74:b8:19:b7:bd:a2:1e:8d:7b:d0:fc:23:6c:9a:51:a5:70:da:
         20:6f:3e:84:2b:b5:0c:7e:e2:8d:b1:5c:06:cd:de:3a:da:ee:
         c4:16:76:3e:91:7b:12:25:0d:86:5d:71:88:9f:f3:5e:0a:d9:
         d6:63:d3:04:87:7c:1e:15:bf:a9:9b:82:d3:a2:f3:f0:4e:73:
         4c:26:e8:8d:4d:e9:6a:01:45:ae:ef:8a:54:e7:9e:44:d0:3c:
         3f:2e:79:48:96:69:c6:c3:e2:db:52:66:41:36:1e:7e:d3:5e:
         73:a0:71:8a:47:c4:0b:5f:1a:c9:a2:c8:aa:3b:c0:5e:30:79:
         71:85:01:19:c9:35:11:76:53:92:22:da:02:de:55:06:c2:88:
         31:d6:d3:a3:23:6a:4f:fb:fa:94:44:a6:47:ec:d4:3b:1c:36:
         7c:28:42:78:02:8c:39:fb:16:a6:53:6b:63:f2:75:26:4b:40:
         b9:bf:96:4b:ff:70:d8:10:eb:f8:c6:86:13:cc:e0:1b:b8:53:
         50:75:a6:14
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWhEn50OlQZr7lI+EAZIojRwjgLAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlOTNlZDFjNjIwOWMxYmE3OTA1Zjg1OGYyMmFlYTdiYmZh
YTNiNTdiNDM3ZGM0NzU1ZTdiZGY3OGRhZWVmNjE0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAc2zIODZufK/9fXswSali98EqPjpJWea4jgV7IIblq1J2
lO4scJ2VFzQpoV0ix2akgbTmaya3v3eLq41Ydwus97Nl27FXdqOhwb1vpVzg7ui6
mblFEN/YH/kCiIpCAM/ShrNwQVyARmH5JNM/5Kr2FHkmPuDk/I1hjmKVUffpBjN4
9E9F3KLBuiw0JYs0x4CHd9SosHjYRJr7OBeYEAJ/SPQAGGDZsvzc1yvhwk2FCQ5s
TS6aep0pqWbaOFpc+yaQ6d/iz/fYc+74a6BbBiOI7gHBxVKiZi/oeLvrga3YZXzm
nxNXY1UgpPHUYBkui21eK7MEZHUV+OCvuJdqQUCrAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQULU9WxfiMXGWpU6SkgxEd5DJ3boswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUzNDJkZDk4LTFhYjEtNDZkZC04YjY2LTg3ZmJiMmE0NjI2YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAoMDANBgkqhkiG9w0BAQsFAAOCAQEAjIYAqUM/62g41Fi01+XFjcqLNQZs
9g+ll+o86/0kx+Ang/r0rscJtfTBkZuxjnW8LOQZ2plNdLgZt72iHo170PwjbJpR
pXDaIG8+hCu1DH7ijbFcBs3eOtruxBZ2PpF7EiUNhl1xiJ/zXgrZ1mPTBId8HhW/
qZuC06Lz8E5zTCbojU3pagFFru+KVOeeRNA8Py55SJZpxsPi21JmQTYeftNec6Bx
ikfEC18ayaLIqjvAXjB5cYUBGck1EXZTkiLaAt5VBsKIMdbToyNqT/v6lESmR+zU
Oxw2fChCeAKMOfsWplNrY/J1JktAub+WS/9w2BDr+MaGE8zgG7hTUHWmFA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:01 2024 by rpki-client on console-fra.rpki-client.org