Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f2c37c5-eaa0-424a-ba1e-5ebd99f3b15c.roa
File:                     7f2c37c5-eaa0-424a-ba1e-5ebd99f3b15c.roa (raw, json)
Hash identifier:          Ma4ErPTa4cU7TU6x5GTYoNXxQarCAUMkcoyP5lXFSBM=
Subject key identifier:   46:A2:7C:F6:0A:AC:69:B9:7D:8E:1C:3C:36:03:44:D2:F0:07:88:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A1CA19B7948B2819A6C8A9F9C138268EF0C06F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f2c37c5-eaa0-424a-ba1e-5ebd99f3b15c.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        204.168.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1c:a1:9b:79:48:b2:81:9a:6c:8a:9f:9c:13:82:68:ef:0c:06:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=63b1a6689ae7cbd965f03f4a8c05d9c2a7527e944b50456321aad67b9fbef27e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:09:fc:df:6d:d5:bf:0b:c8:0b:bf:1d:2c:a1:
                    eb:bc:8c:88:8d:c1:94:ba:15:ea:5a:5a:a2:d8:d1:
                    c2:e9:24:ca:05:c8:5f:5f:e8:12:6c:be:1b:f1:c2:
                    2e:f0:ee:e4:f5:0e:80:ad:49:dd:78:5f:9c:ca:6d:
                    f2:70:e2:a2:3c:64:13:21:d3:65:c1:af:84:9d:0c:
                    ff:9a:0a:34:8d:59:fe:17:89:47:d4:a3:dd:e1:aa:
                    90:e4:15:31:da:d5:fd:e2:e1:d4:7c:87:cb:a5:fc:
                    df:c6:ab:a2:69:d7:56:15:b7:0f:42:3c:af:ec:91:
                    b0:05:bf:20:91:42:2c:83:b1:32:51:29:24:80:f9:
                    2f:e9:a1:bf:2a:10:48:21:df:13:a2:9f:7b:5d:a4:
                    cc:33:d4:28:88:e0:38:a3:e1:d0:3b:72:3a:07:bf:
                    8d:a1:19:c6:77:5e:23:99:d9:03:5c:b6:d7:c8:c6:
                    4b:70:df:7e:7e:39:92:80:ce:70:04:4f:43:87:5b:
                    db:c5:9c:c2:f5:69:42:de:7d:99:7c:99:d9:62:5c:
                    fe:d7:33:b6:0b:fe:4d:27:17:d9:ea:cd:45:1e:ed:
                    8a:39:b0:fb:ce:15:46:01:a9:eb:8b:bf:ef:59:89:
                    ac:7e:bd:9d:0e:db:c4:fa:87:77:e7:ab:72:cb:80:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A2:7C:F6:0A:AC:69:B9:7D:8E:1C:3C:36:03:44:D2:F0:07:88:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f2c37c5-eaa0-424a-ba1e-5ebd99f3b15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.168.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:36:10:18:80:af:1f:ad:cf:e3:3e:ce:52:16:e0:1a:43:
         17:e7:4d:c8:da:a7:43:aa:26:f9:7b:5a:66:a3:79:a6:6d:1c:
         67:aa:d5:96:5e:1a:25:64:0a:8b:ed:66:2a:59:49:81:ff:05:
         7f:53:e0:75:44:62:1f:f1:a7:82:44:0a:18:f9:e8:de:73:68:
         c7:8d:4a:3a:ae:6f:48:01:23:55:5a:09:4b:65:72:5b:86:ff:
         f9:b5:1a:48:fc:fe:e4:e2:98:ae:e2:c5:a5:b5:3e:6d:cd:a7:
         fb:91:c3:20:04:c0:ce:05:ca:17:e8:96:f8:64:d2:26:17:da:
         54:5b:07:c2:08:7e:86:15:72:1e:ba:a2:87:da:3c:07:6e:f8:
         55:a5:36:8d:dd:80:43:b9:fc:46:d2:43:cd:f7:87:26:7f:68:
         67:1a:41:4f:8e:7a:31:3e:23:e8:9a:c7:58:a7:f3:fd:a4:c9:
         76:3d:6a:61:8c:33:a5:d7:b2:b8:ea:27:c0:7f:00:97:a2:5b:
         c5:c9:f7:a9:c5:d0:1c:70:cf:bd:1e:a2:46:d6:63:a1:bd:82:
         17:d7:8b:8d:3d:23:fa:f5:f6:bc:58:26:37:30:51:ac:ba:d0:
         86:3b:7f:bc:53:7d:a5:9a:1e:aa:4f:27:a9:b5:77:2d:98:39:
         e0:d1:10:8a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUChyhm3lIsoGabIqfnBOCaO8MBvkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A2M2IxYTY2ODlhZTdjYmQ5NjVmMDNmNGE4YzA1ZDljMmE3
NTI3ZTk0NGI1MDQ1NjMyMWFhZDY3YjlmYmVmMjdlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD2CfzfbdW/C8gLvx0soeu8jIiNwZS6FepaWqLY0cLpJMoF
yF9f6BJsvhvxwi7w7uT1DoCtSd14X5zKbfJw4qI8ZBMh02XBr4SdDP+aCjSNWf4X
iUfUo93hqpDkFTHa1f3i4dR8h8ul/N/Gq6Jp11YVtw9CPK/skbAFvyCRQiyDsTJR
KSSA+S/pob8qEEgh3xOin3tdpMwz1CiI4Dij4dA7cjoHv42hGcZ3XiOZ2QNcttfI
xktw335+OZKAznAET0OHW9vFnML1aULefZl8mdliXP7XM7YL/k0nF9nqzUUe7Yo5
sPvOFUYBqeuLv+9Ziax+vZ0O28T6h3fnq3LLgD13AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURqJ89gqsabl9jhw8NgNE0vAHiHMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmMmMzN2M1LWVhYTAtNDI0YS1iYTFlLTVlYmQ5OWYzYjE1Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfMqAAwDQYJKoZIhvcNAQELBQADggEBACuUNhAYgK8frc/jPs5SFuAaQxfn
Tcjap0OqJvl7WmajeaZtHGeq1ZZeGiVkCovtZipZSYH/BX9T4HVEYh/xp4JEChj5
6N5zaMeNSjqub0gBI1VaCUtlcluG//m1Gkj8/uTimK7ixaW1Pm3Np/uRwyAEwM4F
yhfolvhk0iYX2lRbB8IIfoYVch66oofaPAdu+FWlNo3dgEO5/EbSQ833hyZ/aGca
QU+OejE+I+iax1in8/2kyXY9amGMM6XXsrjqJ8B/AJeiW8XJ96nF0Bxwz70eokbW
Y6G9ghfXi409I/r19rxYJjcwUay60IY7f7xTfaWaHqpPJ6m1dy2YOeDREIo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:32 2024 by rpki-client on console-fra.rpki-client.org