Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa
File:                     88612825-39ba-446a-a645-27d9ef61fe28.roa (raw, json)
Hash identifier:          JY1XgiN/fOQ7sN82se7bC45+OrgE4cmEMabTJq1JcVk=
Subject key identifier:   C2:42:04:4F:A7:A4:39:4B:3E:C1:11:FC:8E:87:9F:FF:87:7A:A1:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E664D4883A05A1E929F2FA1A89A1C86E0F03EF6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        198.52.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:66:4d:48:83:a0:5a:1e:92:9f:2f:a1:a8:9a:1c:86:e0:f0:3e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=625a6cf21ee89dd99c6fda5a4106cebc1eff35222a65d42f9d5eb4820039abfa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:4c:a6:9b:dd:38:ce:f0:06:58:10:aa:c2:
                    ea:ee:b3:44:c0:6f:3b:a8:ef:03:80:6a:92:c7:a4:
                    12:74:15:24:58:ae:47:e5:78:28:4b:29:b2:67:c7:
                    58:ea:e7:ba:fd:b7:44:82:50:1e:b4:03:8d:04:03:
                    b2:84:99:c6:89:ae:cc:a9:48:84:9b:9c:03:80:2b:
                    38:17:1a:f4:f8:0c:15:cb:f9:ca:53:37:6f:b7:30:
                    7f:9e:24:92:f5:bd:b5:34:8e:2e:cb:dc:14:f7:95:
                    37:ca:69:12:72:61:58:24:a9:66:13:e3:93:7c:bc:
                    f8:d7:eb:19:86:05:55:c1:b0:ad:8d:dc:24:b9:c9:
                    f6:f7:d0:b2:9f:76:03:c4:dd:e0:e3:fd:58:56:42:
                    4d:20:a6:0e:50:b3:33:3c:96:78:29:e5:d7:03:9c:
                    8c:13:8c:91:80:6b:b6:39:c8:07:19:e2:45:49:20:
                    92:d5:2f:00:d6:30:59:ae:19:bf:e0:b5:60:12:b8:
                    b2:14:4b:5b:3c:23:23:2f:66:5d:19:21:68:84:c2:
                    dd:e9:b0:e3:95:0a:03:46:f1:d0:69:45:70:7e:60:
                    1b:dd:e3:1f:f0:0d:a3:cd:6b:d1:10:fb:69:16:d9:
                    32:34:be:8d:a2:ab:a3:a5:31:6b:97:93:7a:79:e4:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:42:04:4F:A7:A4:39:4B:3E:C1:11:FC:8E:87:9F:FF:87:7A:A1:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.52.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:40:57:2c:49:20:c8:5c:8b:45:70:db:bb:85:41:4f:4b:e1:
         2b:86:67:71:9a:af:87:bd:b7:d7:b9:5e:35:b5:8b:a3:44:9a:
         b1:42:24:6d:e2:66:4a:fe:9e:36:dc:93:f2:3b:fc:ea:e4:8e:
         84:26:ec:13:c2:e0:d9:64:88:9a:16:f2:bd:81:84:5b:2d:9f:
         dc:29:a8:94:ca:62:17:1b:79:a4:b7:d0:67:45:ed:1b:dc:de:
         0a:20:49:00:b1:06:b2:62:b2:c6:8a:16:03:15:df:ac:1c:39:
         ed:55:24:a8:3a:6d:bd:98:76:e8:fa:9d:05:88:48:d6:23:df:
         23:3d:eb:e9:b3:60:c3:e8:1a:33:9e:13:97:75:04:32:0b:d6:
         07:06:b5:40:c1:84:7d:4e:3b:aa:f3:cb:06:0f:b1:b6:f0:f9:
         ee:b3:3a:d2:0e:a2:ec:84:09:ca:45:de:40:8d:2b:54:af:db:
         6f:04:d8:5e:0b:52:0a:5c:31:25:fa:10:93:9b:27:98:b9:54:
         21:05:d0:08:97:a6:4c:9d:8e:a9:01:9c:d6:0d:fd:86:83:c8:
         5e:63:c8:0b:71:8a:29:d6:db:3d:33:02:bf:fb:c5:bf:1e:b2:
         9b:71:14:b1:22:d4:d9:55:28:8f:4f:23:b9:32:86:61:2f:7e:
         41:a8:ef:d9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULmZNSIOgWh6Sny+hqJochuDwPvYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAyMDAwMDAwWhcNMjQxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MjVhNmNmMjFlZTg5ZGQ5OWM2ZmRhNWE0MTA2Y2ViYzFl
ZmYzNTIyMmE2NWQ0MmY5ZDVlYjQ4MjAwMzlhYmZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7Ekymm904zvAGWBCqwurus0TAbzuo7wOAapLHpBJ0FSRY
rkfleChLKbJnx1jq57r9t0SCUB60A40EA7KEmcaJrsypSISbnAOAKzgXGvT4DBXL
+cpTN2+3MH+eJJL1vbU0ji7L3BT3lTfKaRJyYVgkqWYT45N8vPjX6xmGBVXBsK2N
3CS5yfb30LKfdgPE3eDj/VhWQk0gpg5QszM8lngp5dcDnIwTjJGAa7Y5yAcZ4kVJ
IJLVLwDWMFmuGb/gtWASuLIUS1s8IyMvZl0ZIWiEwt3psOOVCgNG8dBpRXB+YBvd
4x/wDaPNa9EQ+2kW2TI0vo2iq6OlMWuXk3p55FkzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwkIET6ekOUs+wRH8joef/4d6oZ8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg4NjEyODI1LTM5YmEtNDQ2YS1hNjQ1LTI3ZDllZjYxZmUyOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXGNGAwDQYJKoZIhvcNAQELBQADggEBAKdAVyxJIMhci0Vw27uFQU9L4SuG
Z3Gar4e9t9e5XjW1i6NEmrFCJG3iZkr+njbck/I7/OrkjoQm7BPC4NlkiJoW8r2B
hFstn9wpqJTKYhcbeaS30GdF7Rvc3gogSQCxBrJissaKFgMV36wcOe1VJKg6bb2Y
duj6nQWISNYj3yM96+mzYMPoGjOeE5d1BDIL1gcGtUDBhH1OO6rzywYPsbbw+e6z
OtIOouyECcpF3kCNK1Sv228E2F4LUgpcMSX6EJObJ5i5VCEF0AiXpkydjqkBnNYN
/YaDyF5jyAtxiinW2z0zAr/7xb8esptxFLEi1NlVKI9PI7kyhmEvfkGo79k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:14 2024 by rpki-client on console-fra.rpki-client.org