Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c0dbb6-7885-48d0-9e73-c54e8d4db00c.roa
File:                     a3c0dbb6-7885-48d0-9e73-c54e8d4db00c.roa (raw, json)
Hash identifier:          aJTyJvmY0DpFhvhTUUwciGwkfivLlKkJ+h62M+jR8D4=
Subject key identifier:   52:10:10:F1:85:0F:1A:74:C8:CE:74:94:7B:D7:EF:04:21:56:7D:28
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49EE477DB7A9167BC17FD0C66D28E8487B627EED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c0dbb6-7885-48d0-9e73-c54e8d4db00c.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        63.32.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ee:47:7d:b7:a9:16:7b:c1:7f:d0:c6:6d:28:e8:48:7b:62:7e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=d34eede39ce08dd0b0270b0848b9df518178c9e72b03ef092b6cc2b4fa86cdd8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:16:60:c3:39:f3:45:84:29:f7:b6:92:a3:
                    a7:cc:88:16:3c:95:46:44:d1:24:ee:0d:fd:08:c5:
                    d3:14:ee:b8:99:96:5b:84:9d:d2:f1:be:1e:69:51:
                    07:11:a0:9a:82:47:d6:3e:ae:bb:45:d1:a0:79:9e:
                    64:20:18:e9:3d:b3:83:26:fe:c4:b7:68:66:72:e4:
                    85:b0:d4:90:29:d7:ea:d7:11:ca:6e:4d:5c:ad:b1:
                    6a:a6:01:1d:2e:d1:8f:89:9f:04:99:00:6b:07:52:
                    83:2f:3f:20:06:40:0d:d1:5f:cf:7e:58:b9:ef:77:
                    46:4a:58:f1:d5:27:a9:b1:44:1f:9b:14:67:54:19:
                    80:fa:96:f5:96:a7:47:c3:86:56:5e:dd:23:2a:ca:
                    59:b1:61:69:0c:8c:6a:6f:d1:f5:c8:e1:6c:1d:fa:
                    83:22:68:47:05:91:bf:12:95:37:f9:74:fe:8f:6c:
                    66:06:8d:27:b7:fe:76:34:4e:a8:ac:ed:a7:7d:9f:
                    f1:a3:aa:2f:98:c3:9f:2e:53:ad:02:37:e5:96:04:
                    f1:9f:da:54:a5:dd:21:1b:19:56:74:65:88:cc:3e:
                    ff:ac:7c:e7:e1:96:6f:71:fb:18:c1:20:b1:56:53:
                    66:21:af:9d:72:89:3a:4a:8d:9f:1d:64:2a:5f:7a:
                    28:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:10:10:F1:85:0F:1A:74:C8:CE:74:94:7B:D7:EF:04:21:56:7D:28
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c0dbb6-7885-48d0-9e73-c54e8d4db00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.32.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         18:70:29:38:d9:22:e0:ae:24:10:7e:cc:be:4d:60:db:50:f3:
         1d:d4:5a:aa:ad:0f:40:01:58:19:08:15:11:ef:5c:de:08:c9:
         ef:7a:8a:08:40:96:78:78:fe:4c:60:63:2f:e3:cb:ce:b4:6c:
         78:fe:df:4c:5d:61:48:e8:0e:84:e3:5b:ec:68:03:22:cf:08:
         3d:cd:5e:40:b3:2a:4c:0f:ab:7a:7c:16:07:01:37:c8:4e:de:
         8d:6f:0b:62:46:ed:3c:e6:e0:32:5a:4e:f7:0d:3e:f6:76:82:
         8a:dd:fe:95:22:c6:5b:b9:4e:89:7c:48:a2:a5:93:d7:b9:37:
         9c:0d:8d:65:09:18:2a:8a:5c:17:50:1d:7f:f5:26:d4:f6:f7:
         8e:7f:bc:64:65:15:13:56:b8:89:68:24:63:f8:fa:3d:89:ed:
         90:25:33:d6:d8:19:27:0d:fa:d8:93:0a:29:95:08:03:12:bf:
         6d:c6:ee:50:be:12:5c:87:72:fd:92:f8:0f:ab:22:07:cd:27:
         9e:fb:d0:a1:ae:b1:93:c3:f6:e7:8b:3a:0a:01:29:97:3b:e1:
         ce:10:b5:20:8e:ef:47:91:ba:1a:a2:24:a0:78:a7:82:fb:dd:
         88:9c:4f:d1:e2:de:34:be:c4:f3:e0:30:70:a5:f3:61:47:7a:
         26:2f:d8:c0
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSe5HfbepFnvBf9DGbSjoSHtifu0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMzRlZWRlMzljZTA4ZGQwYjAyNzBiMDg0OGI5ZGY1MTgx
NzhjOWU3MmIwM2VmMDkyYjZjYzJiNGZhODZjZGQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9oRZgwznzRYQp97aSo6fMiBY8lUZE0STuDf0IxdMU7riZ
lluEndLxvh5pUQcRoJqCR9Y+rrtF0aB5nmQgGOk9s4Mm/sS3aGZy5IWw1JAp1+rX
EcpuTVytsWqmAR0u0Y+JnwSZAGsHUoMvPyAGQA3RX89+WLnvd0ZKWPHVJ6mxRB+b
FGdUGYD6lvWWp0fDhlZe3SMqylmxYWkMjGpv0fXI4Wwd+oMiaEcFkb8SlTf5dP6P
bGYGjSe3/nY0Tqis7ad9n/Gjqi+Yw58uU60CN+WWBPGf2lSl3SEbGVZ0ZYjMPv+s
fOfhlm9x+xjBILFWU2Yhr51yiTpKjZ8dZCpfeii7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUUhAQ8YUPGnTIznSUe9fvBCFWfSgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzYzBkYmI2LTc4ODUtNDhkMC05ZTczLWM1NGU4ZDRkYjAwYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwI/IDANBgkqhkiG9w0BAQsFAAOCAQEAGHApONki4K4kEH7Mvk1g21DzHdRa
qq0PQAFYGQgVEe9c3gjJ73qKCECWeHj+TGBjL+PLzrRseP7fTF1hSOgOhONb7GgD
Is8IPc1eQLMqTA+renwWBwE3yE7ejW8LYkbtPObgMlpO9w0+9naCit3+lSLGW7lO
iXxIoqWT17k3nA2NZQkYKopcF1Adf/Um1Pb3jn+8ZGUVE1a4iWgkY/j6PYntkCUz
1tgZJw362JMKKZUIAxK/bcbuUL4SXIdy/ZL4D6siB80nnvvQoa6xk8P254s6CgEp
lzvhzhC1II7vR5G6GqIkoHingvvdiJxP0eLeNL7E8+AwcKXzYUd6Ji/YwA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:21 2024 by rpki-client on console-fra.rpki-client.org