Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0c078c9-7b20-422b-9516-014927144bbb.roa
File:                     a0c078c9-7b20-422b-9516-014927144bbb.roa (raw, json)
Hash identifier:          IBNS+kGRNVjijwP1ZN1rpunD3Q8lEThEo99A/XzAWQM=
Subject key identifier:   39:DC:A1:AA:D1:13:22:D7:34:F9:2C:9E:73:1E:CD:2B:E9:53:44:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A83CFB1C1F22FAE47F27BB54E185649E0AF0436
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0c078c9-7b20-422b-9516-014927144bbb.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.119.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:83:cf:b1:c1:f2:2f:ae:47:f2:7b:b5:4e:18:56:49:e0:af:04:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=5e3ef36d55d7d97fc185afb7d5e2464ad087427f02ef123c2f8a0e39de85fdd6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:c8:6b:ff:a4:7d:40:42:26:22:ad:22:9f:
                    82:2d:6a:39:29:75:8d:d8:b7:21:d9:3c:f5:12:18:
                    8b:4c:f0:11:ed:81:25:7e:fc:5d:20:39:19:6c:a1:
                    77:11:b4:ea:a0:b8:37:67:d1:a6:5c:5a:96:5f:cc:
                    35:31:80:5a:f4:48:0e:98:9d:ce:1e:fb:f0:31:bc:
                    f0:a5:61:e8:37:cd:79:fc:c9:40:f0:fa:34:6c:6b:
                    7c:b3:2a:9e:39:46:f4:cb:3f:8a:d6:cd:fc:3c:e1:
                    3d:2b:07:7e:81:77:fc:92:79:75:dd:02:d2:90:06:
                    d2:c4:75:72:6c:0f:b4:de:9f:09:dc:c5:f9:41:bf:
                    11:9c:de:64:39:fb:84:33:ec:a9:a8:b5:d1:30:0e:
                    b4:9f:64:29:ad:bc:18:99:ab:3a:e7:f7:25:05:ed:
                    21:12:cc:50:d3:95:26:4a:3c:c9:f9:8a:df:e6:d8:
                    fa:ab:96:1e:3d:32:46:2d:2a:b5:3f:ee:95:ab:e9:
                    d9:36:71:9e:04:24:5f:ee:a7:b6:f6:36:e8:d8:53:
                    01:57:86:6e:cd:05:95:ff:a2:3a:46:6a:bd:52:3b:
                    38:52:98:4b:4a:8e:b9:d2:50:d5:de:bd:62:b3:6d:
                    72:b1:ee:97:ab:71:cc:63:dc:bc:5c:3a:5f:83:b5:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DC:A1:AA:D1:13:22:D7:34:F9:2C:9E:73:1E:CD:2B:E9:53:44:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0c078c9-7b20-422b-9516-014927144bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.119.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:32:e9:e8:7f:62:a0:eb:d0:2d:2b:42:81:99:9c:90:2e:71:
         42:54:ad:60:e9:82:46:63:63:f9:54:2c:42:59:9c:35:77:d4:
         06:f2:f7:40:1f:36:1c:fe:6b:30:75:b9:39:cf:d7:13:00:e4:
         ab:9d:98:73:05:44:d7:75:25:2f:97:78:0c:d8:91:c4:46:56:
         d8:fd:98:30:12:5e:11:2a:6d:e5:ae:49:6f:26:92:bf:a3:05:
         a2:47:34:42:d3:1a:43:60:c1:1a:4a:79:5c:90:0e:93:59:b1:
         1c:9f:2d:5f:0a:dc:16:51:29:0f:8c:c6:d6:7c:6e:1d:cc:82:
         50:af:81:0f:dc:be:8a:34:e4:27:98:fb:e0:a5:62:eb:78:3a:
         56:7d:fa:d0:e3:64:9d:11:5c:ee:7b:2b:f6:18:dd:43:be:e7:
         e0:e5:db:a7:4e:12:3b:95:3f:39:5e:59:51:32:d6:f2:b6:ac:
         4a:52:04:bd:5e:36:af:e7:f2:28:44:31:3d:f7:6f:e5:78:8d:
         37:2b:a3:4d:61:4d:81:f7:a5:34:e5:8c:ba:40:fa:04:29:d6:
         de:c2:f8:24:26:4e:de:fa:71:33:bb:f1:f6:30:5f:c8:d8:28:
         fe:4e:13:80:c3:2d:4b:36:ed:e6:94:14:90:18:56:fc:9e:83:
         7b:c9:9a:e9
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOoPPscHyL65H8nu1ThhWSeCvBDYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEyMDAwMDAwWhcNMjQxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZTNlZjM2ZDU1ZDdkOTdmYzE4NWFmYjdkNWUyNDY0YWQw
ODc0MjdmMDJlZjEyM2MyZjhhMGUzOWRlODVmZGQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoochr/6R9QEImIq0in4ItajkpdY3YtyHZPPUSGItM8BHt
gSV+/F0gORlsoXcRtOqguDdn0aZcWpZfzDUxgFr0SA6Ync4e+/AxvPClYeg3zXn8
yUDw+jRsa3yzKp45RvTLP4rWzfw84T0rB36Bd/ySeXXdAtKQBtLEdXJsD7Tenwnc
xflBvxGc3mQ5+4Qz7KmotdEwDrSfZCmtvBiZqzrn9yUF7SESzFDTlSZKPMn5it/m
2Pqrlh49MkYtKrU/7pWr6dk2cZ4EJF/up7b2NujYUwFXhm7NBZX/ojpGar1SOzhS
mEtKjrnSUNXevWKzbXKx7perccxj3LxcOl+DtZL9AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUOdyhqtETItc0+Syecx7NK+lTRPswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EwYzA3OGM5LTdiMjAtNDIyYi05NTE2LTAxNDkyNzE0NGJiYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4dzANBgkqhkiG9w0BAQsFAAOCAQEACDLp6H9ioOvQLStCgZmckC5xQlSt
YOmCRmNj+VQsQlmcNXfUBvL3QB82HP5rMHW5Oc/XEwDkq52YcwVE13UlL5d4DNiR
xEZW2P2YMBJeESpt5a5JbyaSv6MFokc0QtMaQ2DBGkp5XJAOk1mxHJ8tXwrcFlEp
D4zG1nxuHcyCUK+BD9y+ijTkJ5j74KVi63g6Vn360ONknRFc7nsr9hjdQ77n4OXb
p04SO5U/OV5ZUTLW8rasSlIEvV42r+fyKEQxPfdv5XiNNyujTWFNgfelNOWMukD6
BCnW3sL4JCZO3vpxM7vx9jBfyNgo/k4TgMMtSzbt5pQUkBhW/J6De8ma6Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:20 2024 by rpki-client on console-ams.rpki-client.org