Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa
File:                     721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa (raw, json)
Hash identifier:          0EplP8oVjLhEMJ/MdXdjpIK713WTw/39YxGBpwCqbQk=
Subject key identifier:   54:6B:16:AB:29:80:2A:7A:3F:81:C8:EF:9F:62:94:16:EB:A4:9A:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       581891FB6658FA55355D58E9108B5641F85B4660
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        107.176.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:18:91:fb:66:58:fa:55:35:5d:58:e9:10:8b:56:41:f8:5b:46:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=1d16f4905ac0bad1a1456708ce6c01d2c30b14b99abab0d631cfcbe7b56044d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:e9:61:45:80:14:7b:21:28:fe:1e:75:75:
                    de:fd:25:f6:1b:84:06:33:55:b0:a7:ac:6a:40:ea:
                    a1:c7:4a:cf:78:d6:0f:41:51:c5:2e:2b:99:87:74:
                    07:9c:d8:97:83:c8:15:6a:27:ed:42:4c:8e:88:98:
                    07:49:97:a3:b1:91:ae:85:af:18:f9:b1:b9:e7:0d:
                    5a:cb:97:34:6c:6d:d7:82:7c:3d:99:b5:19:16:4d:
                    4c:c2:66:25:bc:26:f4:a6:59:95:85:bd:53:44:67:
                    a0:5f:e6:3e:17:1d:a4:c0:09:d6:bc:1b:da:99:e8:
                    71:02:f3:b0:98:d5:f5:d8:1e:41:ab:7d:70:19:bf:
                    4f:74:2d:52:42:5b:f1:19:b0:84:83:3c:72:ae:e9:
                    9c:9e:79:5b:26:d9:0b:93:36:a2:72:a4:df:35:d8:
                    8e:95:26:51:70:da:a6:44:fc:77:a7:d3:a1:c5:d7:
                    82:91:fd:be:be:26:42:a9:ce:3c:6c:d0:df:28:84:
                    0f:b9:23:f1:e8:5a:d6:20:47:07:60:9c:a2:41:a3:
                    ec:67:16:d0:14:b3:4f:04:6d:31:4a:25:5d:ce:b3:
                    9b:9c:6a:fa:1f:65:aa:c1:f3:28:f6:ec:a2:54:c0:
                    9e:fd:86:9e:a5:b5:a4:26:71:8c:09:c4:20:dd:6e:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6B:16:AB:29:80:2A:7A:3F:81:C8:EF:9F:62:94:16:EB:A4:9A:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.176.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a6:af:dd:b6:a7:54:03:c2:99:f9:84:46:72:80:31:16:1e:88:
         97:44:7b:48:89:0d:63:11:2f:22:be:a5:0b:31:b5:5a:56:02:
         63:ee:43:c9:f9:b8:4e:a2:ef:50:c1:3c:e2:b8:e5:4a:00:16:
         39:4c:20:bc:4d:27:cb:6a:f9:44:15:3e:c7:ac:e0:d6:bd:cb:
         88:b1:7a:16:89:0d:21:6c:e0:05:40:6c:fa:13:0c:cb:30:a1:
         93:fe:3d:3b:3f:d1:ef:97:dc:da:47:bd:95:9a:19:03:51:ee:
         71:38:90:19:ba:53:a8:d0:29:72:56:c2:a7:15:25:9e:0a:f8:
         58:f9:c5:c1:da:ff:15:23:3b:eb:d6:55:34:85:f8:6f:df:b4:
         c2:ba:4b:bf:12:e0:d7:39:c7:70:0f:4b:c0:a6:89:d6:ce:95:
         0a:37:01:d3:a2:1f:da:61:60:26:99:54:e9:2e:16:26:37:1e:
         fb:46:f0:dd:ae:92:87:f4:57:c4:bc:aa:01:a0:6f:62:29:a2:
         9f:70:62:4b:a9:3e:de:b9:73:73:a9:3b:f2:ac:cc:5a:3a:52:
         b8:13:6c:dc:7b:a7:41:17:47:1f:34:26:41:28:c2:9e:e7:f3:
         0d:ec:4e:c5:59:10:a4:50:2b:33:d1:a3:dd:5b:aa:99:fb:85:
         79:3a:ae:b3
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWBiR+2ZY+lU1XVjpEItWQfhbRmAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA2MDAwMDAwWhcNMjQxMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AxZDE2ZjQ5MDVhYzBiYWQxYTE0NTY3MDhjZTZjMDFkMmMz
MGIxNGI5OWFiYWIwZDYzMWNmY2JlN2I1NjA0NGQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoMOlhRYAUeyEo/h51dd79JfYbhAYzVbCnrGpA6qHHSs94
1g9BUcUuK5mHdAec2JeDyBVqJ+1CTI6ImAdJl6Oxka6Frxj5sbnnDVrLlzRsbdeC
fD2ZtRkWTUzCZiW8JvSmWZWFvVNEZ6Bf5j4XHaTACda8G9qZ6HEC87CY1fXYHkGr
fXAZv090LVJCW/EZsISDPHKu6ZyeeVsm2QuTNqJypN812I6VJlFw2qZE/Hen06HF
14KR/b6+JkKpzjxs0N8ohA+5I/HoWtYgRwdgnKJBo+xnFtAUs08EbTFKJV3Os5uc
avofZarB8yj27KJUwJ79hp6ltaQmcYwJxCDdbujtAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUVGsWqymAKno/gcjvn2KUFuukmiQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzcyMWFhN2JlLWQ0YjctNGQ0NC05N2QyLTZmYmMyMTQ0ZjQ1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwFrsDANBgkqhkiG9w0BAQsFAAOCAQEApq/dtqdUA8KZ+YRGcoAxFh6Il0R7
SIkNYxEvIr6lCzG1WlYCY+5Dyfm4TqLvUME84rjlSgAWOUwgvE0ny2r5RBU+x6zg
1r3LiLF6FokNIWzgBUBs+hMMyzChk/49Oz/R75fc2ke9lZoZA1HucTiQGbpTqNAp
clbCpxUlngr4WPnFwdr/FSM769ZVNIX4b9+0wrpLvxLg1znHcA9LwKaJ1s6VCjcB
06If2mFgJplU6S4WJjce+0bw3a6Sh/RXxLyqAaBvYimin3BiS6k+3rlzc6k78qzM
WjpSuBNs3HunQRdHHzQmQSjCnufzDexOxVkQpFArM9Gj3VuqmfuFeTqusw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:08 2024 by rpki-client on console-fra.rpki-client.org