Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a445471-61b1-4712-8591-4dec245edbea.roa
File:                     6a445471-61b1-4712-8591-4dec245edbea.roa (raw, json)
Hash identifier:          ZOhf2Wx49oXzoXEySElp6Yc9l/on4fdJNdwVtQQDSTQ=
Subject key identifier:   51:2E:52:7D:06:35:ED:E7:F6:EC:F7:89:86:E3:EA:45:8D:FC:A7:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4EE463176258FBA4C4E93C0703C6366B3C9F3524
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a445471-61b1-4712-8591-4dec245edbea.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        13.154.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e4:63:17:62:58:fb:a4:c4:e9:3c:07:03:c6:36:6b:3c:9f:35:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=a9dff7464af02f434f14558bfb3cee8bd6ca2aa19920d0df97c0411f5e88e221, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:fb:74:b7:16:53:20:5a:21:55:56:40:cf:
                    09:3d:93:ee:e0:2e:4e:ae:80:41:4d:3a:40:8c:00:
                    7e:0c:a1:88:ed:df:10:80:5f:b6:d9:ec:bb:47:24:
                    fc:02:46:ff:95:5a:20:68:b7:0b:bb:74:69:29:c4:
                    67:cc:cc:5d:97:a4:73:dc:15:9a:be:84:3a:8f:ce:
                    d7:3b:34:d6:94:ce:2c:2f:d7:cd:9e:96:39:de:64:
                    68:93:9b:dd:13:f5:96:ff:5f:cd:45:44:ac:4e:ef:
                    6a:5e:d7:27:da:c3:8e:35:70:cd:5f:42:e2:8c:ef:
                    99:4b:a6:a3:24:ef:76:01:95:6d:00:96:dc:40:5c:
                    7d:eb:5f:ae:22:18:b1:fc:75:de:00:a2:81:42:e6:
                    55:aa:fd:81:97:90:b1:ce:b7:4c:d5:82:c5:a9:46:
                    8f:a6:39:fa:24:2a:e9:a6:2c:71:22:83:4f:35:82:
                    63:44:79:76:81:ef:71:51:41:64:93:fc:b7:ca:b4:
                    b6:76:ed:36:5b:81:ce:4e:1f:76:70:d9:4d:62:28:
                    37:a8:ca:ed:0d:29:7d:c5:98:ce:da:31:6d:77:d5:
                    3d:b0:85:35:d9:62:86:4a:dc:f1:2c:67:fc:66:56:
                    68:8b:57:26:08:a6:8d:f6:4e:1e:32:9c:24:18:04:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2E:52:7D:06:35:ED:E7:F6:EC:F7:89:86:E3:EA:45:8D:FC:A7:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a445471-61b1-4712-8591-4dec245edbea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d9:61:c0:cd:ca:18:53:0d:67:10:b8:54:36:fe:21:24:3a:0c:
         69:3c:0d:b1:07:84:97:d3:1d:b2:4e:7b:40:95:b8:32:68:58:
         13:fd:75:dc:46:5d:1b:9f:c8:8d:5e:b0:e9:ea:c8:13:4a:2a:
         0c:65:af:a1:a1:34:76:dd:80:ec:78:93:5c:f6:27:1a:38:60:
         f5:18:c8:92:01:9b:d2:9c:b1:31:6a:0a:e2:a7:2d:b0:f1:54:
         d3:f9:43:71:08:d7:c7:c0:cd:ee:a7:2e:8d:d0:8b:3b:62:92:
         16:4c:7b:1e:69:cd:c6:fb:9f:4b:a7:6c:85:a3:d6:ee:db:f0:
         c3:81:18:44:08:49:04:2d:72:f6:fb:58:56:3a:35:82:f8:07:
         d2:08:2a:b9:94:2b:f4:c5:99:8a:f1:7f:17:e6:56:5f:84:94:
         70:43:00:3e:64:cc:f9:30:4d:bd:8c:b5:10:4b:33:f6:76:a8:
         5a:b2:0d:d7:5d:f9:60:ff:e7:6f:2c:a4:0b:f0:66:0f:59:3b:
         d1:2a:99:27:ca:cb:07:39:cf:9c:93:21:41:80:06:82:ea:ad:
         e3:16:a5:4f:bb:5c:f7:b8:dc:29:c1:8d:ab:d3:ae:46:df:ce:
         90:df:63:71:eb:9c:ec:71:cd:76:5f:33:14:97:18:66:d2:24:
         0b:11:93:b6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTuRjF2JY+6TE6TwHA8Y2azyfNSQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEzMDAwMDAwWhcNMjQxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhOWRmZjc0NjRhZjAyZjQzNGYxNDU1OGJmYjNjZWU4YmQ2
Y2EyYWExOTkyMGQwZGY5N2MwNDExZjVlODhlMjIxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfbPt0txZTIFohVVZAzwk9k+7gLk6ugEFNOkCMAH4MoYjt
3xCAX7bZ7LtHJPwCRv+VWiBotwu7dGkpxGfMzF2XpHPcFZq+hDqPztc7NNaUziwv
182eljneZGiTm90T9Zb/X81FRKxO72pe1yfaw441cM1fQuKM75lLpqMk73YBlW0A
ltxAXH3rX64iGLH8dd4AooFC5lWq/YGXkLHOt0zVgsWpRo+mOfokKummLHEig081
gmNEeXaB73FRQWST/LfKtLZ27TZbgc5OH3Zw2U1iKDeoyu0NKX3FmM7aMW131T2w
hTXZYoZK3PEsZ/xmVmiLVyYIpo32Th4ynCQYBOkjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUUS5SfQY17ef27PeJhuPqRY38p7EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZhNDQ1NDcxLTYxYjEtNDcxMi04NTkxLTRkZWMyNDVlZGJlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwANmjANBgkqhkiG9w0BAQsFAAOCAQEA2WHAzcoYUw1nELhUNv4hJDoMaTwN
sQeEl9Mdsk57QJW4MmhYE/113EZdG5/IjV6w6erIE0oqDGWvoaE0dt2A7HiTXPYn
Gjhg9RjIkgGb0pyxMWoK4qctsPFU0/lDcQjXx8DN7qcujdCLO2KSFkx7HmnNxvuf
S6dshaPW7tvww4EYRAhJBC1y9vtYVjo1gvgH0ggquZQr9MWZivF/F+ZWX4SUcEMA
PmTM+TBNvYy1EEsz9naoWrIN1135YP/nbyykC/BmD1k70SqZJ8rLBznPnJMhQYAG
guqt4xalT7tc97jcKcGNq9OuRt/OkN9jceuc7HHNdl8zFJcYZtIkCxGTtg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:42 2024 by rpki-client on console-ams.rpki-client.org