Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64da19af-aece-4ba7-9ae1-57846512b6bf.roa
File:                     64da19af-aece-4ba7-9ae1-57846512b6bf.roa (raw, json)
Hash identifier:          qXBDImaFj7jQ14sHa3X3opW0opXDzBUvgLeyS4MYVdk=
Subject key identifier:   06:19:65:68:40:FA:E0:A5:D8:E8:FE:31:75:18:FE:3C:80:6F:3E:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63E53C2C9497260EF10ADA399FBD53D23346392B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64da19af-aece-4ba7-9ae1-57846512b6bf.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        130.176.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e5:3c:2c:94:97:26:0e:f1:0a:da:39:9f:bd:53:d2:33:46:39:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=e84a85c5eff9aea7ee392c22164ffef405488e918f5a52935a439f9a6860c266, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:1e:86:2e:38:99:ca:80:9b:08:28:86:48:
                    63:15:b6:a6:56:0f:05:5d:85:6f:cd:56:b1:d4:27:
                    69:c7:6f:ad:95:25:68:a9:3c:a4:9f:ef:db:0e:86:
                    01:d9:c8:25:23:bf:60:7f:70:c5:c1:a9:af:ed:86:
                    59:88:b1:90:ad:1b:91:b6:41:17:6c:df:22:34:30:
                    27:24:96:8d:49:88:81:1e:d9:16:0b:45:be:d6:00:
                    27:3a:34:6d:b5:ae:79:c2:8f:85:10:8d:c1:94:d8:
                    05:e0:ce:f9:62:17:ef:ed:c1:29:00:dc:bb:39:28:
                    4b:72:ff:99:2f:5c:5a:b5:ae:52:ed:c6:11:d2:ab:
                    5d:bd:e0:49:1f:2e:10:14:91:cb:fa:de:32:7b:0b:
                    ca:3f:82:a5:d4:f3:28:b7:13:d5:0f:e2:89:07:69:
                    58:4a:d0:e7:cd:0d:94:8d:a9:17:f7:0d:3c:72:33:
                    0d:b2:54:f3:be:68:5a:a7:59:92:45:67:d9:00:d2:
                    37:4e:46:ba:cb:e1:28:97:10:52:aa:7a:f6:75:63:
                    db:54:81:73:1c:af:51:fe:a3:00:78:71:00:1f:54:
                    f1:b0:51:d3:2c:74:cf:cc:f0:94:c6:1c:e4:01:8c:
                    9f:de:26:34:d3:e7:d7:0c:1d:cd:c3:f5:0a:83:19:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:19:65:68:40:FA:E0:A5:D8:E8:FE:31:75:18:FE:3C:80:6F:3E:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64da19af-aece-4ba7-9ae1-57846512b6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:ed:62:57:b8:a2:96:a4:4e:67:72:b1:7a:7c:6e:b4:89:cc:
         7f:43:03:50:e9:9a:8d:fa:0f:30:84:b3:93:86:58:d0:95:dd:
         8b:e5:45:e6:6d:c6:33:a2:9f:c0:8c:3f:9a:2c:c0:41:20:9c:
         04:28:88:17:c6:98:60:54:94:7f:7e:82:9c:03:02:5d:2c:8e:
         67:16:c7:6c:04:6f:13:d2:b9:fb:6b:b6:33:8e:36:62:f3:50:
         ae:dd:f3:29:ce:43:08:03:2d:d2:38:d2:2f:fc:bb:48:08:4c:
         dd:a3:fc:ed:01:46:2e:f9:ea:65:13:8e:48:98:ba:9a:e8:e7:
         65:ec:06:a2:27:9f:e9:c6:6c:13:ec:06:52:31:49:c8:78:b2:
         fd:7f:e3:09:01:6c:ac:b3:8a:a1:44:35:88:8b:f9:5b:a5:0b:
         e7:d0:13:5d:14:e8:7a:bd:14:f8:07:99:5a:50:88:72:86:1c:
         57:a3:fa:11:b8:cd:00:ea:48:d5:e8:d0:1c:db:fe:f2:b8:e0:
         c2:77:f2:32:fd:b3:a2:a1:27:12:8a:0d:2a:06:85:16:fe:14:
         0c:7d:d5:40:2c:1e:ea:8c:23:06:10:6b:df:c3:19:84:01:7d:
         c1:57:c2:ea:3e:60:10:81:60:49:8f:78:d5:ea:f3:67:53:a7:
         f3:6f:a4:f4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUY+U8LJSXJg7xCto5n71T0jNGOSswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlODRhODVjNWVmZjlhZWE3ZWUzOTJjMjIxNjRmZmVmNDA1
NDg4ZTkxOGY1YTUyOTM1YTQzOWY5YTY4NjBjMjY2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9AR6GLjiZyoCbCCiGSGMVtqZWDwVdhW/NVrHUJ2nHb62V
JWipPKSf79sOhgHZyCUjv2B/cMXBqa/thlmIsZCtG5G2QRds3yI0MCcklo1JiIEe
2RYLRb7WACc6NG21rnnCj4UQjcGU2AXgzvliF+/twSkA3Ls5KEty/5kvXFq1rlLt
xhHSq1294EkfLhAUkcv63jJ7C8o/gqXU8yi3E9UP4okHaVhK0OfNDZSNqRf3DTxy
Mw2yVPO+aFqnWZJFZ9kA0jdORrrL4SiXEFKqevZ1Y9tUgXMcr1H+owB4cQAfVPGw
UdMsdM/M8JTGHOQBjJ/eJjTT59cMHc3D9QqDGfN5AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUBhllaED64KXY6P4xdRj+PIBvPu4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY0ZGExOWFmLWFlY2UtNGJhNy05YWUxLTU3ODQ2NTEyYjZiZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCCsDANBgkqhkiG9w0BAQsFAAOCAQEAiO1iV7iilqROZ3KxenxutInMf0MD
UOmajfoPMISzk4ZY0JXdi+VF5m3GM6KfwIw/mizAQSCcBCiIF8aYYFSUf36CnAMC
XSyOZxbHbARvE9K5+2u2M442YvNQrt3zKc5DCAMt0jjSL/y7SAhM3aP87QFGLvnq
ZROOSJi6mujnZewGoief6cZsE+wGUjFJyHiy/X/jCQFsrLOKoUQ1iIv5W6UL59AT
XRToer0U+AeZWlCIcoYcV6P6EbjNAOpI1ejQHNv+8rjgwnfyMv2zoqEnEooNKgaF
Fv4UDH3VQCwe6owjBhBr38MZhAF9wVfC6j5gEIFgSY941erzZ1On82+k9A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:06 2024 by rpki-client on console-ams.rpki-client.org