Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e882496-7c6c-46ed-95af-aa97743be0c7.roa
File:                     8e882496-7c6c-46ed-95af-aa97743be0c7.roa (raw, json)
Hash identifier:          yYNhK0lA8WpanAle33Pmd4ch5wqpVbS7MzRIhrwSAH8=
Subject key identifier:   F1:01:44:E3:83:27:01:75:C7:F8:EA:25:8F:12:0F:4A:16:C6:ED:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       129B31F4843E8B72C2F94D73CABAD78AB54A665E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e882496-7c6c-46ed-95af-aa97743be0c7.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9b:31:f4:84:3e:8b:72:c2:f9:4d:73:ca:ba:d7:8a:b5:4a:66:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=04e22744f480047a2d1d615aaf6560f4732728d388d23c18e8668af6edd17a18, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:57:d1:c9:3d:56:fa:fd:f9:ef:d7:d4:c1:
                    f6:16:d2:50:65:0e:c4:81:55:e5:7e:e2:45:19:76:
                    65:3a:a6:ff:e9:c2:f5:df:8f:04:a5:57:14:3b:c6:
                    e2:df:be:33:eb:eb:25:5a:34:52:64:91:96:e7:31:
                    e6:d2:8b:32:77:96:67:ef:ee:9f:ad:e5:e4:22:3d:
                    b0:d3:99:02:f0:c2:f2:65:74:eb:59:33:97:32:56:
                    4f:55:c8:39:e9:51:b1:12:6e:cf:51:e6:e0:c1:d8:
                    1b:64:47:87:54:cc:eb:e8:5a:db:27:27:f6:af:94:
                    f3:3a:6e:f7:48:d3:f2:05:cf:4e:05:b1:f9:c7:ee:
                    d2:73:dd:e8:c8:cc:09:59:4f:28:72:ff:b9:17:4f:
                    65:3f:c4:58:c3:cd:53:fa:df:c2:f4:af:5d:34:76:
                    9c:d9:0a:00:d5:2b:7f:a1:02:8a:47:97:59:4c:a1:
                    f5:70:22:e4:df:71:bd:8e:8c:d3:5a:94:da:20:10:
                    e8:b6:ea:77:2c:d0:cb:2d:d7:39:d3:71:66:d8:3e:
                    98:88:f8:0e:41:00:e0:d4:4f:09:23:cd:7b:21:3d:
                    24:5e:08:fb:0a:c1:67:78:c6:44:14:d8:44:c1:0d:
                    20:fc:71:bb:bd:db:97:ab:9b:cf:01:8f:b1:15:9e:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:01:44:E3:83:27:01:75:C7:F8:EA:25:8F:12:0F:4A:16:C6:ED:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e882496-7c6c-46ed-95af-aa97743be0c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:f4:4d:9c:7e:55:85:de:e3:08:1f:48:4a:37:42:45:93:0b:
         1c:6c:85:60:43:fa:f6:8a:41:d6:b8:a8:7e:87:aa:fd:bf:88:
         82:a6:93:d1:6f:d0:3e:b6:f9:80:6b:e4:ec:cb:9d:76:85:c8:
         2f:d2:e9:90:86:6b:35:2e:12:3b:ad:24:3f:b8:23:96:a2:01:
         d2:9d:72:09:bb:fd:d9:79:74:24:a9:2d:98:99:f8:cb:03:d6:
         df:ea:33:69:68:41:37:eb:bd:48:ef:6a:62:87:dd:86:7c:2d:
         45:f4:45:21:bf:d5:1f:e2:a6:b1:69:d2:ff:0e:cd:95:7f:64:
         90:f1:b5:7a:80:d9:1d:66:30:7c:6e:5f:80:a1:f5:5d:34:0f:
         df:50:73:05:f4:54:d6:60:b9:63:b4:b2:25:a2:06:1e:46:43:
         44:d1:b1:5b:2d:5f:3c:a9:41:4d:d4:dc:0c:e3:36:ae:1b:ed:
         84:ae:02:05:ea:63:09:35:5a:c7:e2:83:16:b8:ea:b6:62:32:
         a0:d1:12:fb:0a:28:55:f5:74:08:79:bb:65:25:89:f4:2f:34:
         6b:22:6e:19:0e:e3:f0:50:d4:36:70:ec:22:4e:0f:5b:d1:f9:
         a0:8b:58:8d:c2:b6:ab:a8:ac:fd:35:e7:12:c9:62:69:01:e1:
         8a:0d:05:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEpsx9IQ+i3LC+U1zyrrXirVKZl4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNGUyMjc0NGY0ODAwNDdhMmQxZDYxNWFhZjY1NjBmNDcz
MjcyOGQzODhkMjNjMThlODY2OGFmNmVkZDE3YTE4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHclfRyT1W+v3579fUwfYW0lBlDsSBVeV+4kUZdmU6pv/p
wvXfjwSlVxQ7xuLfvjPr6yVaNFJkkZbnMebSizJ3lmfv7p+t5eQiPbDTmQLwwvJl
dOtZM5cyVk9VyDnpUbESbs9R5uDB2BtkR4dUzOvoWtsnJ/avlPM6bvdI0/IFz04F
sfnH7tJz3ejIzAlZTyhy/7kXT2U/xFjDzVP638L0r100dpzZCgDVK3+hAopHl1lM
ofVwIuTfcb2OjNNalNogEOi26ncs0Mst1znTcWbYPpiI+A5BAODUTwkjzXshPSRe
CPsKwWd4xkQU2ETBDSD8cbu925erm88Bj7EVnmRPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8QFE44MnAXXH+OoljxIPShbG7UAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhlODgyNDk2LTdjNmMtNDZlZC05NWFmLWFhOTc3NDNiZTBjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABGgtMwDQYJKoZIhvcNAQELBQADggEBAM/0TZx+VYXe4wgfSEo3QkWTCxxs
hWBD+vaKQda4qH6Hqv2/iIKmk9Fv0D62+YBr5OzLnXaFyC/S6ZCGazUuEjutJD+4
I5aiAdKdcgm7/dl5dCSpLZiZ+MsD1t/qM2loQTfrvUjvamKH3YZ8LUX0RSG/1R/i
prFp0v8OzZV/ZJDxtXqA2R1mMHxuX4Ch9V00D99QcwX0VNZguWO0siWiBh5GQ0TR
sVstXzypQU3U3AzjNq4b7YSuAgXqYwk1Wsfigxa46rZiMqDREvsKKFX1dAh5u2Ul
ifQvNGsibhkO4/BQ1DZw7CJOD1vR+aCLWI3CtquorP015xLJYmkB4YoNBWw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:53 2024 by rpki-client on console-ams.rpki-client.org