Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77b4a6c4-6db8-4b2b-8293-b367fc2ded32.roa
File:                     77b4a6c4-6db8-4b2b-8293-b367fc2ded32.roa (raw, json)
Hash identifier:          3wAIJCJUePleyhYOBNkc2tkivppSCrtmu6Gz4fhb4+g=
Subject key identifier:   47:17:1C:9B:E7:A2:99:D9:21:9C:11:48:E7:97:07:F3:72:B8:63:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70E8304A2086CFAC4E07C984BF92C30E4A5FF8C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77b4a6c4-6db8-4b2b-8293-b367fc2ded32.roa
Signing time:             Mon 07 Oct 2024 00:00:00 +0000
ROA not before:           Mon 07 Oct 2024 00:00:00 +0000
ROA not after:            Mon 11 Nov 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        77.122.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e8:30:4a:20:86:cf:ac:4e:07:c9:84:bf:92:c3:0e:4a:5f:f8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:00:00 2024 GMT
            Not After : Nov 11 23:59:59 2024 GMT
        Subject: serialNumber=99d9c2ac5de3a3589ad8cfd9de2c23cda56dff2edc80452e4018ce1df876def5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:b3:12:9c:f0:98:c0:e2:72:58:a1:d9:e4:
                    eb:aa:73:d1:a5:ce:ed:c8:f9:f2:2d:92:21:a7:52:
                    7d:9e:62:ba:58:d8:47:45:31:40:ac:bc:ad:d7:e9:
                    14:37:13:b7:bc:78:5d:61:b4:44:35:56:47:da:0b:
                    ea:a7:b5:f1:51:c9:7a:cf:0f:08:50:70:56:46:81:
                    f5:f2:f7:03:c2:f0:95:ef:60:64:c7:c3:16:f3:6f:
                    c5:47:61:59:eb:e0:cf:10:04:e7:1d:30:14:60:19:
                    8e:6d:a8:c6:3a:1e:4b:67:37:67:91:d5:19:c3:8e:
                    2f:a2:78:42:22:0b:be:9c:cd:3e:1c:e2:8f:04:51:
                    ea:64:5b:9b:34:86:20:db:10:f3:6f:c6:2a:6d:79:
                    92:68:23:53:7d:9b:26:39:76:77:0f:b2:a6:f3:ae:
                    1b:36:a7:e2:f4:75:81:91:bd:0b:24:67:39:7d:70:
                    72:87:21:a3:75:b6:9a:72:db:10:47:0e:dd:b0:5f:
                    1b:9b:d0:ea:27:27:b2:6c:b5:ad:c0:fb:ac:2c:99:
                    47:27:48:95:ee:da:d1:b2:15:0f:2a:d7:22:52:69:
                    ab:18:ee:37:f9:97:63:87:c7:c5:c7:d4:e9:32:ea:
                    1e:e9:46:7c:a7:0a:2f:cf:05:f5:f3:1d:d7:24:cf:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:17:1C:9B:E7:A2:99:D9:21:9C:11:48:E7:97:07:F3:72:B8:63:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77b4a6c4-6db8-4b2b-8293-b367fc2ded32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.122.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:44:3b:46:00:31:76:6d:0e:6e:b4:e9:95:cb:af:41:af:
         d5:69:bd:ff:41:b0:48:89:c3:9a:55:08:3a:8c:68:b9:23:82:
         22:42:10:9f:ff:ac:66:52:ca:ce:b9:72:36:c0:be:8b:cc:b5:
         ea:fb:03:db:1a:81:7f:bc:33:b7:08:27:0f:d1:4f:7f:d8:98:
         13:bb:ff:e1:fd:c0:4c:8d:ce:83:eb:d5:30:aa:f8:f8:90:ef:
         f6:f6:4c:48:4e:f3:33:49:40:b7:5c:81:4b:39:f6:01:0f:04:
         06:b9:87:e5:f4:8f:76:c7:bf:3e:38:2f:15:a1:95:fd:f5:fc:
         fb:47:2c:43:dd:e4:33:02:4c:25:ca:fa:4a:e2:65:42:ff:dc:
         2a:cb:08:20:84:a9:eb:27:1f:72:4b:d7:8c:d3:85:ce:c0:5f:
         cb:78:f3:10:5a:4c:94:69:8f:af:fe:0f:1e:3a:32:76:96:59:
         2f:2d:3a:bb:b7:de:d8:87:c1:51:39:4e:48:cf:ef:63:be:7f:
         aa:b8:8e:f2:5c:0d:38:2f:c0:ad:5a:bc:25:82:f5:c2:38:75:
         ae:f2:8d:9e:ae:cc:a1:31:4b:9e:2e:a6:8c:36:24:bd:1a:28:
         9a:98:1c:b0:db:bb:c1:f2:f7:2f:ac:32:dd:48:54:40:89:7f:
         e2:00:06:18
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUcOgwSiCGz6xOB8mEv5LDDkpf+MgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDA3MDAwMDAwWhcNMjQxMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0A5OWQ5YzJhYzVkZTNhMzU4OWFkOGNmZDlkZTJjMjNjZGE1
NmRmZjJlZGM4MDQ1MmU0MDE4Y2UxZGY4NzZkZWY1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPb7MSnPCYwOJyWKHZ5Ouqc9Glzu3I+fItkiGnUn2eYrpY
2EdFMUCsvK3X6RQ3E7e8eF1htEQ1VkfaC+qntfFRyXrPDwhQcFZGgfXy9wPC8JXv
YGTHwxbzb8VHYVnr4M8QBOcdMBRgGY5tqMY6HktnN2eR1RnDji+ieEIiC76czT4c
4o8EUepkW5s0hiDbEPNvxipteZJoI1N9myY5dncPsqbzrhs2p+L0dYGRvQskZzl9
cHKHIaN1tppy2xBHDt2wXxub0OonJ7Jsta3A+6wsmUcnSJXu2tGyFQ8q1yJSaasY
7jf5l2OHx8XH1Oky6h7pRnynCi/PBfXzHdckzwmjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQURxccm+eimdkhnBFI55cH83K4Y3AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc3YjRhNmM0LTZkYjgtNGIyYi04MjkzLWIzNjdmYzJkZWQzMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBNejANBgkqhkiG9w0BAQsFAAOCAQEAog5EO0YAMXZtDm606ZXLr0Gv1Wm9
/0GwSInDmlUIOoxouSOCIkIQn/+sZlLKzrlyNsC+i8y16vsD2xqBf7wztwgnD9FP
f9iYE7v/4f3ATI3Og+vVMKr4+JDv9vZMSE7zM0lAt1yBSzn2AQ8EBrmH5fSPdse/
PjgvFaGV/fX8+0csQ93kMwJMJcr6SuJlQv/cKssIIISp6ycfckvXjNOFzsBfy3jz
EFpMlGmPr/4PHjoydpZZLy06u7fe2IfBUTlOSM/vY75/qriO8lwNOC/ArVq8JYL1
wjh1rvKNnq7MoTFLni6mjDYkvRoompgcsNu7wfL3L6wy3UhUQIl/4gAGGA==
-----END CERTIFICATE-----
Generated at Tue Oct 22 01:38:00 2024 by rpki-client on console-ams.rpki-client.org