Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c6d1f71-ca0a-44fe-8689-1129cdc5510d.roa
File:                     7c6d1f71-ca0a-44fe-8689-1129cdc5510d.roa (raw, json)
Hash identifier:          N1RybVSQE2hT97dkWNtBZ9EKQFVQ8t9ByNOKItlMtHg=
Subject key identifier:   9D:F7:35:F0:9C:F9:25:E9:61:69:B0:3D:43:D4:F2:0C:59:DD:1A:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A236FFCE74CBA12AFCB7F4C1EF2D9B56E8B0C5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c6d1f71-ca0a-44fe-8689-1129cdc5510d.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        96.45.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:23:6f:fc:e7:4c:ba:12:af:cb:7f:4c:1e:f2:d9:b5:6e:8b:0c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=3e4b530af91e7031155e685cdf9c80fa808ba995721ad486c8bbc769ddf74d85, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:66:e0:33:6b:55:0d:aa:c3:2b:02:66:db:
                    d0:f6:7d:62:51:25:c4:6b:4b:68:dd:57:0a:34:fd:
                    34:54:4c:3f:13:f4:76:9c:e7:6d:b4:2b:85:6e:c4:
                    65:35:86:3a:98:ed:eb:21:c0:b2:d8:65:69:1e:df:
                    2d:aa:d6:f5:0d:98:76:97:cb:ce:a5:a4:9b:51:d9:
                    fb:a4:bb:0f:8a:ed:88:d9:a0:dc:9b:e0:a1:4a:c8:
                    b6:5f:14:44:90:2b:57:ae:38:08:f9:35:63:1c:51:
                    d5:91:ff:20:f1:7a:d0:6d:dc:25:e1:13:9a:16:7c:
                    a0:51:2e:fe:c0:02:bb:7f:26:18:1b:63:3b:bb:90:
                    d9:f2:f4:9e:6f:29:27:30:2e:4b:7d:02:ab:00:59:
                    13:08:a6:b9:15:d4:30:4e:ec:b8:f8:22:dd:8c:10:
                    e5:8d:dc:f5:4f:78:7a:86:c3:1a:2c:2a:00:a8:90:
                    ff:43:28:d0:7f:a4:a5:37:c2:00:36:bd:b9:02:01:
                    2e:b9:7a:0d:8c:40:f7:8f:8a:1b:0b:f4:84:f6:b8:
                    98:95:45:e6:e0:06:32:66:d1:ce:18:e0:ea:6f:36:
                    14:eb:7d:3f:1b:37:6a:46:7f:5a:77:0c:2a:db:05:
                    a9:83:d5:4c:69:ee:eb:91:5c:48:79:04:de:d3:73:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F7:35:F0:9C:F9:25:E9:61:69:B0:3D:43:D4:F2:0C:59:DD:1A:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c6d1f71-ca0a-44fe-8689-1129cdc5510d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c7:ca:7d:32:33:91:60:4f:65:e5:4b:ca:c5:43:b7:17:d2:5e:
         b8:ea:8e:a9:47:ff:8d:4d:4b:4c:8f:02:05:a3:0a:e4:97:8a:
         1e:72:6d:ff:aa:cd:02:03:dc:6d:0a:d7:85:78:81:d8:0d:dd:
         2a:3c:8e:6d:4d:89:f8:44:26:a9:31:f5:21:08:cd:ae:a4:7c:
         0a:39:e8:83:c0:33:ec:5c:64:10:6e:a5:3e:0a:97:ea:30:29:
         30:70:1f:06:24:4f:a3:ee:6f:22:a6:3d:7c:68:61:93:c6:00:
         05:10:6d:96:de:ef:c2:41:67:a3:2d:41:88:d9:65:d6:03:c2:
         14:f1:9b:fd:42:c9:fc:4b:65:32:5a:29:fd:0c:63:dc:fb:63:
         4e:0f:9b:97:63:c8:12:68:b9:4e:92:86:44:62:95:46:17:d5:
         d6:92:98:f6:08:c5:40:c6:93:82:9e:74:84:0e:33:f0:18:ae:
         ac:a2:70:e1:2c:c2:c6:9c:41:81:bb:7f:b7:8f:9b:42:2d:ad:
         88:73:c2:37:ee:83:78:de:e7:70:a4:03:16:20:24:e7:6e:aa:
         b3:94:75:ce:28:28:11:10:6d:33:cf:9f:da:70:c8:8f:be:b7:
         0d:a9:74:52:49:58:5a:ac:a4:14:f7:ec:47:c2:8f:79:61:7a:
         84:00:b2:36
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKiNv/OdMuhKvy39MHvLZtW6LDFwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZTRiNTMwYWY5MWU3MDMxMTU1ZTY4NWNkZjljODBmYTgw
OGJhOTk1NzIxYWQ0ODZjOGJiYzc2OWRkZjc0ZDg1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+T2bgM2tVDarDKwJm29D2fWJRJcRrS2jdVwo0/TRUTD8T
9Hac5220K4VuxGU1hjqY7eshwLLYZWke3y2q1vUNmHaXy86lpJtR2fukuw+K7YjZ
oNyb4KFKyLZfFESQK1euOAj5NWMcUdWR/yDxetBt3CXhE5oWfKBRLv7AArt/Jhgb
Yzu7kNny9J5vKScwLkt9AqsAWRMIprkV1DBO7Lj4It2MEOWN3PVPeHqGwxosKgCo
kP9DKNB/pKU3wgA2vbkCAS65eg2MQPePihsL9IT2uJiVRebgBjJm0c4Y4OpvNhTr
fT8bN2pGf1p3DCrbBamD1Uxp7uuRXEh5BN7Tc0jJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnfc18Jz5JelhabA9Q9TyDFndGlswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdjNmQxZjcxLWNhMGEtNDRmZS04Njg5LTExMjljZGM1NTEwZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARgLaAwDQYJKoZIhvcNAQELBQADggEBAMfKfTIzkWBPZeVLysVDtxfSXrjq
jqlH/41NS0yPAgWjCuSXih5ybf+qzQID3G0K14V4gdgN3So8jm1NifhEJqkx9SEI
za6kfAo56IPAM+xcZBBupT4Kl+owKTBwHwYkT6PubyKmPXxoYZPGAAUQbZbe78JB
Z6MtQYjZZdYDwhTxm/1CyfxLZTJaKf0MY9z7Y04Pm5djyBJouU6ShkRilUYX1daS
mPYIxUDGk4KedIQOM/AYrqyicOEswsacQYG7f7ePm0ItrYhzwjfug3je53CkAxYg
JOduqrOUdc4oKBEQbTPPn9pwyI++tw2pdFJJWFqspBT37EfCj3lheoQAsjY=
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:13 2024 by rpki-client on console-ams.rpki-client.org