Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa
File:                     9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa (raw, json)
Hash identifier:          p+BSYHeg0sKZPohwdJ2zYExxaHLUNs1wxkxPG7v6oYE=
Subject key identifier:   68:60:14:CC:BF:EF:75:2E:E9:88:17:CD:D7:E3:B3:F7:72:9F:2D:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30EAF437F8E1B9BA2DB6CEC6CCB8DB5A9223CFA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.157.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ea:f4:37:f8:e1:b9:ba:2d:b6:ce:c6:cc:b8:db:5a:92:23:cf:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=9782ed0edee60fc8ee746126ba7369030f459b5c3c4b6e079a12461a263b03e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:a4:8d:1b:99:21:df:29:70:3a:ab:ef:d2:
                    d8:04:e8:1f:2a:fd:6c:28:43:83:06:b7:11:ba:ce:
                    47:61:00:a0:59:3b:8f:dd:4f:34:b3:88:a1:49:cb:
                    72:50:0f:8e:b9:31:b7:41:5a:32:2f:98:8b:61:68:
                    e9:08:f1:e9:39:7f:e4:66:9d:5b:70:a8:56:e5:77:
                    f0:1c:9f:50:7e:50:d1:e8:5b:a0:79:02:ea:f8:16:
                    7e:20:e7:de:84:f1:08:30:4e:4c:a9:be:3a:d2:92:
                    ed:cd:29:55:2b:46:8b:e2:a6:b6:3b:ab:45:24:fd:
                    b1:48:ed:a6:42:46:0e:76:0c:96:f4:be:4f:1c:92:
                    b7:82:60:cc:4d:e8:8b:56:e3:1c:95:93:54:c1:39:
                    30:21:45:84:8b:9e:87:1b:08:88:01:57:19:18:96:
                    89:20:fc:80:ec:04:71:86:41:29:08:61:3a:e8:c4:
                    b2:eb:76:23:51:1a:f7:f4:8f:26:0b:06:ec:ec:f3:
                    bc:da:56:30:db:17:f5:35:6a:f1:0a:35:21:ca:2d:
                    90:6d:67:83:a9:4e:10:36:67:7c:24:dd:b1:9f:7f:
                    c6:96:bc:b1:17:bc:01:37:01:f8:c6:ef:54:67:57:
                    42:16:59:b3:58:9d:7d:bb:3d:58:a6:9a:b4:43:61:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:60:14:CC:BF:EF:75:2E:E9:88:17:CD:D7:E3:B3:F7:72:9F:2D:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         60:c9:3f:85:43:74:89:b9:81:1e:55:a9:17:f6:46:e8:69:29:
         fd:98:5b:74:b4:c4:00:a4:29:a4:0e:5b:73:24:af:20:33:a5:
         54:8a:0c:e9:01:34:52:b9:85:b9:ae:8f:05:76:0a:33:b3:08:
         f6:cd:05:f4:5c:2d:38:9f:12:18:d3:4a:16:ec:f9:ac:71:d3:
         4c:a2:77:ea:a6:4c:53:82:34:46:e5:8a:f2:fc:68:ec:eb:a6:
         8d:08:f2:cb:33:da:ce:ff:aa:32:5c:a5:e2:cf:22:5b:35:77:
         37:7b:48:06:8c:06:09:64:0f:69:9a:09:3a:d1:7c:6b:78:cf:
         d5:d4:37:2e:41:ea:5f:34:d6:70:aa:ba:df:12:61:0f:34:18:
         47:02:eb:e0:1a:26:1b:c2:6a:2d:13:be:81:30:e8:f5:09:2c:
         d3:8e:1e:93:ca:49:9d:2c:b3:0c:b6:ef:30:c7:bb:94:fb:fd:
         e3:a8:0f:9d:a3:93:e3:15:41:48:b3:77:24:49:d0:95:23:fa:
         d5:21:e0:c1:6a:8c:14:37:b5:95:5f:c0:4c:a2:7d:e3:11:42:
         55:3d:74:c0:d7:e2:dc:c1:79:d7:f7:02:ae:45:2a:4b:73:8e:
         ad:d5:5e:45:cf:2f:f0:9e:64:45:b0:dc:0f:38:a3:bb:a7:c6:
         8a:6c:44:ed
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMOr0N/jhubotts7GzLjbWpIjz6UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NzgyZWQwZWRlZTYwZmM4ZWU3NDYxMjZiYTczNjkwMzBm
NDU5YjVjM2M0YjZlMDc5YTEyNDYxYTI2M2IwM2U2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQRKSNG5kh3ylwOqvv0tgE6B8q/WwoQ4MGtxG6zkdhAKBZ
O4/dTzSziKFJy3JQD465MbdBWjIvmIthaOkI8ek5f+RmnVtwqFbld/Acn1B+UNHo
W6B5Aur4Fn4g596E8QgwTkypvjrSku3NKVUrRoviprY7q0Uk/bFI7aZCRg52DJb0
vk8ckreCYMxN6ItW4xyVk1TBOTAhRYSLnocbCIgBVxkYlokg/IDsBHGGQSkIYTro
xLLrdiNRGvf0jyYLBuzs87zaVjDbF/U1avEKNSHKLZBtZ4OpThA2Z3wk3bGff8aW
vLEXvAE3AfjG71RnV0IWWbNYnX27PVimmrRDYSULAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUaGAUzL/vdS7piBfN1+Oz93KfLa8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzljMGI1YjIxLWNiZmUtNDAxMy04MDU2LWVjMmU1YzU0MzQzYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4nTANBgkqhkiG9w0BAQsFAAOCAQEAYMk/hUN0ibmBHlWpF/ZG6Gkp/Zhb
dLTEAKQppA5bcySvIDOlVIoM6QE0UrmFua6PBXYKM7MI9s0F9FwtOJ8SGNNKFuz5
rHHTTKJ36qZMU4I0RuWK8vxo7OumjQjyyzPazv+qMlyl4s8iWzV3N3tIBowGCWQP
aZoJOtF8a3jP1dQ3LkHqXzTWcKq63xJhDzQYRwLr4BomG8JqLRO+gTDo9Qks044e
k8pJnSyzDLbvMMe7lPv946gPnaOT4xVBSLN3JEnQlSP61SHgwWqMFDe1lV/ATKJ9
4xFCVT10wNfi3MF51/cCrkUqS3OOrdVeRc8v8J5kRbDcDziju6fGimxE7Q==
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:54 2024 by rpki-client on console-fra.rpki-client.org