Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d0f5e8e-46d7-4b7c-99df-ba9bfecfb6ce.roa
File:                     6d0f5e8e-46d7-4b7c-99df-ba9bfecfb6ce.roa (raw, json)
Hash identifier:          m7cV+jBEWRwnZfTHMOCijSsCmTyjQHOrXVrx4ip8mcI=
Subject key identifier:   ED:4A:19:21:CC:61:A7:71:D6:7D:DD:2C:BB:EC:FD:34:66:B2:26:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D18E4F4A593401818746EF4A38512D2D795AEF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d0f5e8e-46d7-4b7c-99df-ba9bfecfb6ce.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        136.8.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:18:e4:f4:a5:93:40:18:18:74:6e:f4:a3:85:12:d2:d7:95:ae:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=f550d72367a59e2d0a7690cb7ea52cc5841185b6d029ecfb7ce113be182f8fa7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:3f:47:b1:b3:d6:ea:53:3e:26:6c:61:52:
                    67:3c:f5:5b:d3:6c:55:d7:9c:d2:2c:c6:62:8d:52:
                    3a:99:42:12:8d:34:3e:3a:fc:8f:14:9d:cd:d5:5c:
                    95:1c:36:86:ab:68:cd:f9:cb:ab:9b:17:92:76:54:
                    61:9e:6d:2a:ce:c1:72:b9:13:64:fc:66:42:a1:5a:
                    4f:7e:13:aa:c4:21:7d:32:9f:af:7f:f7:91:3f:fe:
                    46:7d:a0:1e:2a:d8:e3:ae:1d:00:7c:20:63:34:5b:
                    e1:f9:f2:74:80:62:fd:e5:24:42:a6:6c:50:d6:48:
                    82:f7:31:fc:8c:73:7f:33:0c:28:e9:06:30:db:c3:
                    47:51:a1:19:49:d7:04:34:56:44:1b:c4:c9:3b:46:
                    1f:ad:f9:af:ce:1e:54:e3:d3:6a:73:54:3a:d7:74:
                    25:24:93:e3:96:6b:84:5b:76:1b:3c:13:47:ba:d3:
                    3e:93:1f:2c:d4:67:f9:fc:c2:03:d3:e2:3e:d2:56:
                    5f:43:9c:f0:23:08:80:3e:37:8f:9c:56:c6:2e:f4:
                    36:9a:90:0b:a1:1a:64:09:01:9e:5b:41:29:32:42:
                    38:2b:f2:85:6e:86:f2:4b:35:ae:ef:c2:3a:9c:1e:
                    cf:65:48:6f:41:1d:fc:0e:e4:67:66:7e:7f:06:c0:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4A:19:21:CC:61:A7:71:D6:7D:DD:2C:BB:EC:FD:34:66:B2:26:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d0f5e8e-46d7-4b7c-99df-ba9bfecfb6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.8.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ce:26:a9:c9:bd:78:71:26:a7:c8:78:d2:02:a1:d2:0f:f5:96:
         00:e2:02:92:95:13:48:48:fb:44:90:cf:f5:5a:81:07:64:7f:
         75:18:09:db:be:3a:18:3a:7b:1a:48:9f:7c:f3:48:2e:ce:08:
         37:c8:38:d5:ba:9b:3c:7e:23:45:73:9c:ab:1d:5b:15:14:54:
         4c:34:f9:96:2b:5b:75:d9:34:ef:e8:7e:6a:b7:25:d7:1c:2b:
         6f:9f:65:90:9e:da:c7:63:27:2a:7e:53:86:ac:a9:ca:6d:08:
         5a:10:1e:51:ea:19:68:87:b8:27:8b:0c:bf:cc:21:f3:48:0d:
         c2:e8:4d:de:03:c8:fa:28:62:ce:c6:21:b7:f7:35:ce:6b:a6:
         fa:75:24:73:1e:74:ff:7d:c6:ac:ac:ed:dc:2c:7d:ad:a9:dd:
         86:c6:63:ae:61:f2:b2:1f:f9:da:ee:b7:25:3b:b5:a5:3f:fd:
         96:4f:da:ea:f6:f8:52:31:f5:ae:2c:55:e5:6c:5f:ed:8c:50:
         c1:6b:ea:77:1b:60:75:48:42:3b:2e:78:1a:dd:a0:d8:12:6c:
         8c:6c:8d:2f:f2:e3:71:6c:73:9a:e9:ac:32:2a:93:46:90:b8:
         40:13:b8:e5:ca:93:b3:a2:6f:8b:ff:a3:40:78:4a:c3:45:a4:
         bd:3b:3a:8a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHRjk9KWTQBgYdG70o4US0teVrvkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAyMDAwMDAwWhcNMjQxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNTUwZDcyMzY3YTU5ZTJkMGE3NjkwY2I3ZWE1MmNjNTg0
MTE4NWI2ZDAyOWVjZmI3Y2UxMTNiZTE4MmY4ZmE3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7JT9HsbPW6lM+JmxhUmc89VvTbFXXnNIsxmKNUjqZQhKN
ND46/I8Unc3VXJUcNoaraM35y6ubF5J2VGGebSrOwXK5E2T8ZkKhWk9+E6rEIX0y
n69/95E//kZ9oB4q2OOuHQB8IGM0W+H58nSAYv3lJEKmbFDWSIL3MfyMc38zDCjp
BjDbw0dRoRlJ1wQ0VkQbxMk7Rh+t+a/OHlTj02pzVDrXdCUkk+OWa4Rbdhs8E0e6
0z6THyzUZ/n8wgPT4j7SVl9DnPAjCIA+N4+cVsYu9DaakAuhGmQJAZ5bQSkyQjgr
8oVuhvJLNa7vwjqcHs9lSG9BHfwO5Gdmfn8GwFGhAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU7UoZIcxhp3HWfd0su+z9NGayJhowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZkMGY1ZThlLTQ2ZDctNGI3Yy05OWRmLWJhOWJmZWNmYjZjZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCICDANBgkqhkiG9w0BAQsFAAOCAQEAziapyb14cSanyHjSAqHSD/WWAOIC
kpUTSEj7RJDP9VqBB2R/dRgJ2746GDp7GkiffPNILs4IN8g41bqbPH4jRXOcqx1b
FRRUTDT5litbddk07+h+arcl1xwrb59lkJ7ax2MnKn5Thqypym0IWhAeUeoZaIe4
J4sMv8wh80gNwuhN3gPI+ihizsYht/c1zmum+nUkcx50/33GrKzt3Cx9randhsZj
rmHysh/52u63JTu1pT/9lk/a6vb4UjH1rixV5Wxf7YxQwWvqdxtgdUhCOy54Gt2g
2BJsjGyNL/LjcWxzmumsMiqTRpC4QBO45cqTs6Jvi/+jQHhKw0WkvTs6ig==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:43 2024 by rpki-client on console-ams.rpki-client.org