Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa
File:                     8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa (raw, json)
Hash identifier:          VaXvkIgx70+wqJ4n+74O4ixVxpkbYTvNNhXlL2R2V1Q=
Subject key identifier:   7A:CB:C6:94:71:7D:67:AF:39:21:21:E9:8C:94:A4:98:61:10:CA:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C8840A5FD82FA4C06A30A4AAE5D33FF02732529
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.232.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:88:40:a5:fd:82:fa:4c:06:a3:0a:4a:ae:5d:33:ff:02:73:25:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=841154f23e91abe3c1565272f70577883f4230ecf32a8ce2589da032b4c146d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:2e:eb:70:f5:d7:be:7c:90:65:6e:27:0a:
                    88:c5:5c:d5:b9:f0:6d:3c:dc:ba:d2:56:cd:45:1e:
                    f4:38:96:32:c5:ca:8b:7b:93:02:ea:9e:6e:a8:75:
                    91:c6:25:7a:a2:05:33:90:03:44:e6:53:5c:81:6e:
                    c6:6a:8d:2a:ba:fb:7e:b3:8c:2e:ca:11:d2:fc:5a:
                    de:3a:e0:bf:54:85:fe:b9:68:52:9a:39:7e:53:1f:
                    e1:75:52:82:93:0c:10:c7:cb:36:9b:e9:4e:24:aa:
                    9b:17:55:74:e2:72:c3:30:ed:61:08:73:c5:64:3f:
                    50:b4:63:f2:7d:86:dd:76:1a:d6:e8:91:18:61:98:
                    c6:81:55:a3:75:6c:1b:05:22:05:c8:5c:c7:6a:20:
                    f8:79:cd:f2:d2:98:c5:92:fb:ab:a7:78:5c:93:f3:
                    d6:83:66:a6:28:4a:e8:21:6e:0f:0a:b6:b5:ea:96:
                    66:85:c3:dd:7f:de:3f:a9:77:3a:c3:b3:ae:5e:8f:
                    1d:32:d0:07:da:e3:47:9c:83:61:6f:c3:74:5e:4c:
                    d7:c3:ea:d3:43:fb:2e:4a:ec:09:40:ca:30:70:a6:
                    d9:68:34:2e:f7:b2:46:81:ca:67:3a:b8:c3:0e:cf:
                    e5:9a:f9:68:9e:a3:54:fe:11:40:98:e3:34:8a:06:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:C6:94:71:7D:67:AF:39:21:21:E9:8C:94:A4:98:61:10:CA:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8709c129-ac02-4abb-ab24-ffcd6a0a5305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.232.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:da:27:81:7f:c8:b3:b4:7e:6f:ca:27:0d:c7:50:b7:1e:dc:
         78:16:26:40:86:c5:b3:7e:42:31:c5:ee:38:03:ac:24:bc:a9:
         bf:89:13:f1:d9:16:5a:a4:ec:0b:d3:b8:fe:c4:76:3b:df:62:
         a9:4c:25:5c:0b:fc:5b:a5:87:01:b1:80:07:84:d7:ce:ce:74:
         3d:f6:91:8d:ad:c7:c6:4b:8c:91:e8:54:f3:3b:6b:ec:9a:87:
         91:91:a4:8e:75:83:8b:91:0f:18:cc:18:00:cb:41:5c:fc:48:
         bf:ce:e8:60:78:0d:1d:c6:4d:e6:4e:3b:69:fd:4f:b3:f1:d6:
         6b:91:a0:6a:49:05:26:2a:e8:96:de:f9:69:8b:92:34:8c:f0:
         9d:07:0b:ad:56:2c:cd:2e:81:74:a1:d5:a7:35:a2:9b:4f:f5:
         07:e4:f8:a2:31:3e:ab:5f:a5:c3:fc:91:6f:61:1d:23:66:17:
         85:65:70:1b:0d:53:5f:b3:84:c4:8a:9e:80:d6:21:38:87:95:
         5f:3f:05:25:9c:42:7c:b8:6e:76:c4:45:bd:91:93:8b:a0:86:
         1c:04:31:5e:ad:ca:f4:80:29:ba:62:d2:f1:99:a8:05:27:63:
         76:60:f8:b9:be:54:28:a9:05:b9:6e:fe:2f:b0:05:7b:23:4d:
         dc:3b:a4:ef
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULIhApf2C+kwGowpKrl0z/wJzJSkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NDExNTRmMjNlOTFhYmUzYzE1NjUyNzJmNzA1Nzc4ODNm
NDIzMGVjZjMyYThjZTI1ODlkYTAzMmI0YzE0NmQ3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrny7rcPXXvnyQZW4nCojFXNW58G083LrSVs1FHvQ4ljLF
yot7kwLqnm6odZHGJXqiBTOQA0TmU1yBbsZqjSq6+36zjC7KEdL8Wt464L9Uhf65
aFKaOX5TH+F1UoKTDBDHyzab6U4kqpsXVXTicsMw7WEIc8VkP1C0Y/J9ht12Gtbo
kRhhmMaBVaN1bBsFIgXIXMdqIPh5zfLSmMWS+6uneFyT89aDZqYoSughbg8KtrXq
lmaFw91/3j+pdzrDs65ejx0y0Afa40ecg2Fvw3ReTNfD6tND+y5K7AlAyjBwptlo
NC73skaBymc6uMMOz+Wa+Wieo1T+EUCY4zSKBsmfAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUesvGlHF9Z685ISHpjJSkmGEQyvcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg3MDljMTI5LWFjMDItNGFiYi1hYjI0LWZmY2Q2YTBhNTMwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP6DANBgkqhkiG9w0BAQsFAAOCAQEAhtongX/Is7R+b8onDcdQtx7ceBYm
QIbFs35CMcXuOAOsJLypv4kT8dkWWqTsC9O4/sR2O99iqUwlXAv8W6WHAbGAB4TX
zs50PfaRja3HxkuMkehU8ztr7JqHkZGkjnWDi5EPGMwYAMtBXPxIv87oYHgNHcZN
5k47af1Ps/HWa5GgakkFJirolt75aYuSNIzwnQcLrVYszS6BdKHVpzWim0/1B+T4
ojE+q1+lw/yRb2EdI2YXhWVwGw1TX7OExIqegNYhOIeVXz8FJZxCfLhudsRFvZGT
i6CGHAQxXq3K9IApumLS8ZmoBSdjdmD4ub5UKKkFuW7+L7AFeyNN3Duk7w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:13 2024 by rpki-client on console-fra.rpki-client.org