Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b6ed431-392d-47d2-8139-6975a9738fd8.roa
File:                     7b6ed431-392d-47d2-8139-6975a9738fd8.roa (raw, json)
Hash identifier:          9FrO0StC3cGH9NZsuZODzrWgFZe7PKS11NSamZcKqS0=
Subject key identifier:   CA:EC:FA:9B:36:F6:D8:90:C2:2D:DB:D9:04:9B:42:18:A7:85:A7:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CC1869C609B07D74D83D7AEA7940C3616ECE6D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b6ed431-392d-47d2-8139-6975a9738fd8.roa
Signing time:             Wed 30 Oct 2024 00:00:00 +0000
ROA not before:           Wed 30 Oct 2024 00:00:00 +0000
ROA not after:            Wed 04 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.70.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c1:86:9c:60:9b:07:d7:4d:83:d7:ae:a7:94:0c:36:16:ec:e6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 30 00:00:00 2024 GMT
            Not After : Dec  4 23:59:59 2024 GMT
        Subject: serialNumber=f09e2029c639a6768610659329fcfe89eac815bc1e1bd1276254117f6801058b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:dd:1d:d1:a4:a9:1a:d3:32:10:8b:2c:ca:
                    2b:30:0d:62:27:ee:32:4a:c7:9f:3d:37:5e:68:12:
                    20:09:4a:d4:63:9d:ab:ed:5b:f1:83:20:8c:4d:a3:
                    40:93:5f:71:a9:67:a9:49:00:01:7c:81:f2:c2:48:
                    17:01:4e:fe:16:f9:76:d8:b9:54:13:d4:9c:4b:6c:
                    d4:64:33:fa:c5:5b:84:c0:61:a7:42:ae:87:70:16:
                    13:0f:9b:65:35:2f:05:e2:fa:ce:31:0c:23:a6:d5:
                    3d:5c:e6:26:9b:68:7d:f3:b0:1b:19:96:db:92:ac:
                    98:ab:85:b1:72:a2:19:4c:e9:69:26:b0:9e:52:34:
                    c4:e9:35:7e:3e:6f:90:f5:21:37:c3:96:58:61:fa:
                    a0:92:a6:61:b6:cf:c5:94:15:ba:92:2b:ce:3c:cb:
                    47:ac:ca:dc:c6:8b:3a:f2:93:41:6d:00:4d:21:de:
                    ce:86:23:ae:fa:f3:5e:4a:4b:b9:31:ad:e8:40:7c:
                    2e:6c:d0:5a:a8:f5:bc:40:0e:4e:3a:91:d5:d0:4c:
                    11:9b:9b:6a:65:e7:8f:7c:20:5a:f4:06:06:6a:86:
                    3d:b7:44:37:fc:0d:d4:bb:1c:bf:8c:d0:1f:9f:5d:
                    6d:f1:57:e5:7f:97:88:f2:4d:2a:36:26:79:3e:33:
                    cc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EC:FA:9B:36:F6:D8:90:C2:2D:DB:D9:04:9B:42:18:A7:85:A7:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b6ed431-392d-47d2-8139-6975a9738fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.70.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:26:85:2f:09:82:9a:70:c2:26:4a:88:13:41:40:06:54:37:
         3f:73:93:e5:5c:7a:8e:c5:75:b5:9d:9b:0f:42:26:71:dc:36:
         38:77:e9:19:12:86:6b:6e:69:cd:39:e7:9d:45:19:fc:7a:5d:
         2a:b4:7c:53:4b:0f:76:d4:86:b8:d3:b0:f3:a6:5d:e1:55:f7:
         66:57:98:73:47:f8:bc:b2:7b:81:ff:26:03:66:c1:13:e4:25:
         80:a8:4b:f8:8e:ba:15:f5:c1:ce:27:e6:81:d7:d6:02:de:06:
         d5:02:87:b5:ee:9d:07:28:da:ce:5b:20:16:a1:99:ac:bf:fa:
         1a:32:d4:bd:d9:2d:64:21:ba:d8:5e:2e:8f:f5:e9:bd:88:c3:
         ce:18:8f:31:aa:8a:e3:b2:17:b1:fc:8c:a9:84:56:86:7a:e8:
         6e:e8:a3:25:25:01:7f:c7:da:5a:36:26:6f:89:9e:42:09:08:
         8e:69:33:19:12:fa:33:53:58:0b:95:b4:1a:57:e7:c4:ad:ae:
         80:60:a8:85:60:93:b3:35:5a:10:3b:a8:46:a3:6c:8d:ab:63:
         76:4b:df:68:96:52:59:8a:d4:e2:d3:e3:7c:77:92:52:6e:02:
         79:bd:46:d8:3c:3e:64:04:97:63:99:ce:ac:fc:37:8c:6d:88:
         47:a1:dc:00
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbMGGnGCbB9dNg9eup5QMNhbs5tgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDMwMDAwMDAwWhcNMjQxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMDllMjAyOWM2MzlhNjc2ODYxMDY1OTMyOWZjZmU4OWVh
YzgxNWJjMWUxYmQxMjc2MjU0MTE3ZjY4MDEwNThiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkSN0d0aSpGtMyEIssyiswDWIn7jJKx589N15oEiAJStRj
navtW/GDIIxNo0CTX3GpZ6lJAAF8gfLCSBcBTv4W+XbYuVQT1JxLbNRkM/rFW4TA
YadCrodwFhMPm2U1LwXi+s4xDCOm1T1c5iabaH3zsBsZltuSrJirhbFyohlM6Wkm
sJ5SNMTpNX4+b5D1ITfDllhh+qCSpmG2z8WUFbqSK848y0esytzGizryk0FtAE0h
3s6GI676815KS7kxrehAfC5s0Fqo9bxADk46kdXQTBGbm2pl5498IFr0BgZqhj23
RDf8DdS7HL+M0B+fXW3xV+V/l4jyTSo2Jnk+M8ybAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUyuz6mzb22JDCLdvZBJtCGKeFp4owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdiNmVkNDMxLTM5MmQtNDdkMi04MTM5LTY5NzVhOTczOGZkOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQRjANBgkqhkiG9w0BAQsFAAOCAQEAfiaFLwmCmnDCJkqIE0FABlQ3P3OT
5Vx6jsV1tZ2bD0Imcdw2OHfpGRKGa25pzTnnnUUZ/HpdKrR8U0sPdtSGuNOw86Zd
4VX3ZleYc0f4vLJ7gf8mA2bBE+QlgKhL+I66FfXBzifmgdfWAt4G1QKHte6dByja
zlsgFqGZrL/6GjLUvdktZCG62F4uj/XpvYjDzhiPMaqK47IXsfyMqYRWhnrobuij
JSUBf8faWjYmb4meQgkIjmkzGRL6M1NYC5W0GlfnxK2ugGCohWCTszVaEDuoRqNs
jatjdkvfaJZSWYrU4tPjfHeSUm4Ceb1G2Dw+ZASXY5nOrPw3jG2IR6HcAA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:11 2024 by rpki-client on console-fra.rpki-client.org