Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/564972a5-9a8c-4ed3-bb5e-07073236d549.roa
File:                     564972a5-9a8c-4ed3-bb5e-07073236d549.roa (raw, json)
Hash identifier:          Nq0EIDilr2NsridyLwRViPUwceZZKIMiiHzvcacnVdg=
Subject key identifier:   79:38:38:78:EE:EE:0F:61:A2:B2:27:B3:F6:10:08:7F:7F:9B:89:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       40CA2EAF9DD6FB6ED2704B3BE58EE52EE0562537
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/564972a5-9a8c-4ed3-bb5e-07073236d549.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        162.208.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ca:2e:af:9d:d6:fb:6e:d2:70:4b:3b:e5:8e:e5:2e:e0:56:25:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=75cf2753168a2a12d9feada81a19e97201112b50f9031196876ecc90f75ab36a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:c8:c5:4e:4f:2d:08:35:6b:6d:05:a0:27:
                    6a:bf:dc:79:fb:bd:53:1a:30:a0:6b:68:73:c7:af:
                    5d:28:19:13:d4:88:4d:85:d3:87:fa:27:31:46:ba:
                    da:5a:58:8d:71:ae:29:4e:e8:4c:b5:94:dd:30:d4:
                    ea:6b:c1:de:56:82:74:62:52:2b:7e:e4:a7:57:92:
                    59:00:e9:83:a0:81:fd:7c:03:5a:fa:83:06:7a:2f:
                    65:66:a3:42:ff:63:5b:62:df:2d:fb:d7:d5:a4:1d:
                    7c:de:7f:88:ba:a0:9a:e6:33:06:2d:f8:e5:7d:fe:
                    60:55:dd:37:39:65:57:22:74:b2:70:b9:37:3e:04:
                    53:74:2f:23:9c:ca:77:98:ab:04:e4:08:5a:91:00:
                    6c:24:ea:1a:9b:07:d9:39:03:fb:3b:d1:20:b1:77:
                    08:f1:e3:e0:90:91:0d:8d:48:1f:56:27:5c:f6:4c:
                    2b:9c:94:67:07:16:df:b6:6a:ab:d2:25:18:5d:92:
                    b9:fc:81:f3:ec:e4:b0:88:5f:30:d4:35:fe:36:9f:
                    16:c4:61:be:34:2f:60:29:2d:59:58:56:b4:c5:32:
                    27:03:a4:1e:e2:88:37:6f:67:2c:22:98:fa:64:ec:
                    01:d9:0a:03:16:70:7b:61:9f:c6:9f:2a:d3:df:94:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:38:38:78:EE:EE:0F:61:A2:B2:27:B3:F6:10:08:7F:7F:9B:89:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/564972a5-9a8c-4ed3-bb5e-07073236d549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:41:09:9d:1f:e0:d2:99:d1:61:48:a5:52:72:e0:df:ec:be:
         e9:16:6f:cb:ee:52:97:6d:6e:11:35:66:99:bd:22:a0:50:47:
         7b:0a:38:a0:09:37:d9:23:2f:10:7e:5d:38:4c:e8:41:4b:3b:
         68:4c:0a:cc:5b:83:36:b2:54:2f:c0:f2:e0:25:f3:7c:63:b0:
         97:b5:f3:b9:a5:fb:63:af:7d:24:2d:9a:ce:db:1a:ef:b5:48:
         f5:4f:78:cc:01:a8:ca:e6:1c:ab:f0:ac:7d:5a:b5:bf:ed:fb:
         03:86:a7:5d:fb:e5:ba:b7:57:4e:18:a0:a4:58:94:32:0c:91:
         37:74:12:36:3c:50:bd:9e:fe:04:47:db:7a:4b:ab:ed:51:d3:
         da:43:1b:7c:aa:ca:b5:a4:82:a5:9b:19:b9:fc:76:17:46:80:
         e0:28:86:50:4b:c8:20:24:c6:3c:a5:81:0d:32:ca:d4:10:76:
         08:8f:06:46:23:e1:5c:d6:2a:fe:fb:0f:88:46:02:49:06:a1:
         30:2f:d6:12:9d:c3:15:1c:c7:18:c8:49:9f:74:a2:c6:89:e4:
         cc:4a:d6:36:9b:5e:4b:f7:a0:20:a3:65:ab:41:9a:38:c6:96:
         5b:0e:89:b7:a8:93:c2:db:83:6a:67:87:19:c9:61:27:db:2c:
         fc:c8:9e:8f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQMour53W+27ScEs75Y7lLuBWJTcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NWNmMjc1MzE2OGEyYTEyZDlmZWFkYTgxYTE5ZTk3MjAx
MTEyYjUwZjkwMzExOTY4NzZlY2M5MGY3NWFiMzZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCidMjFTk8tCDVrbQWgJ2q/3Hn7vVMaMKBraHPHr10oGRPU
iE2F04f6JzFGutpaWI1xrilO6Ey1lN0w1Oprwd5WgnRiUit+5KdXklkA6YOggf18
A1r6gwZ6L2Vmo0L/Y1ti3y3719WkHXzef4i6oJrmMwYt+OV9/mBV3Tc5ZVcidLJw
uTc+BFN0LyOcyneYqwTkCFqRAGwk6hqbB9k5A/s70SCxdwjx4+CQkQ2NSB9WJ1z2
TCuclGcHFt+2aqvSJRhdkrn8gfPs5LCIXzDUNf42nxbEYb40L2ApLVlYVrTFMicD
pB7iiDdvZywimPpk7AHZCgMWcHthn8afKtPflKp5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeTg4eO7uD2Gisiez9hAIf3+biTowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU2NDk3MmE1LTlhOGMtNGVkMy1iYjVlLTA3MDczMjM2ZDU0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACi0HowDQYJKoZIhvcNAQELBQADggEBAD5BCZ0f4NKZ0WFIpVJy4N/svukW
b8vuUpdtbhE1Zpm9IqBQR3sKOKAJN9kjLxB+XThM6EFLO2hMCsxbgzayVC/A8uAl
83xjsJe187ml+2OvfSQtms7bGu+1SPVPeMwBqMrmHKvwrH1atb/t+wOGp1375bq3
V04YoKRYlDIMkTd0EjY8UL2e/gRH23pLq+1R09pDG3yqyrWkgqWbGbn8dhdGgOAo
hlBLyCAkxjylgQ0yytQQdgiPBkYj4VzWKv77D4hGAkkGoTAv1hKdwxUcxxjISZ90
osaJ5MxK1jabXkv3oCCjZatBmjjGllsOibeok8Lbg2pnhxnJYSfbLPzIno8=
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:03 2024 by rpki-client on console-ams.rpki-client.org