Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa33094c-fc6e-426d-8a0c-c3010af5cd56.roa
File:                     aa33094c-fc6e-426d-8a0c-c3010af5cd56.roa (raw, json)
Hash identifier:          KshNJu/fl6UDeifa+6w8eEFuKBrzDOj2wYghrlnuL6U=
Subject key identifier:   E6:D3:77:31:5B:9A:FE:5B:49:26:31:B3:8B:12:A7:27:32:9A:DC:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       091B1599ABC87F0B82A6E293DF7F6F9704452248
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa33094c-fc6e-426d-8a0c-c3010af5cd56.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.148.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1b:15:99:ab:c8:7f:0b:82:a6:e2:93:df:7f:6f:97:04:45:22:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=908ffe39ea49bf01c4e68ee50a56507b0c3f6b1c2cbd70392b8a5c47324bb44b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:d0:b1:e5:bf:7a:46:c7:2f:db:06:2e:95:
                    6f:86:67:4e:8d:a3:c2:83:06:94:e2:06:e4:fa:96:
                    e7:92:e2:e3:9a:0b:a0:20:85:5c:ec:6b:50:2d:9a:
                    9b:0f:b1:8e:98:30:05:2c:78:6b:8c:89:51:0b:98:
                    4f:16:c6:e1:19:ce:e9:e4:65:a7:96:43:87:01:59:
                    e9:73:a4:f3:1e:10:36:f4:ac:ea:25:0f:16:ae:37:
                    4f:9b:9b:49:de:49:14:69:af:9b:cc:7f:9f:68:c1:
                    6e:1b:93:cf:2f:f2:79:67:da:7d:3c:77:95:e4:0a:
                    c7:8f:d6:c5:20:ee:81:36:d0:e0:9e:c3:a4:02:85:
                    c1:0c:85:4e:96:19:c0:1a:54:66:3b:bb:81:b0:3b:
                    ae:4e:1d:17:bd:5f:a1:a8:5f:da:58:d6:95:7b:e2:
                    f4:c2:1c:8f:7b:28:9c:96:00:87:d2:ab:88:9b:b9:
                    97:60:30:7f:ae:b7:d4:8c:63:2e:47:b0:0a:75:30:
                    73:1c:c0:69:11:2e:83:dd:be:40:e0:88:67:0b:40:
                    46:e1:38:d0:b8:27:3a:26:8d:1e:9e:a9:ce:50:2d:
                    c2:8b:a5:13:8e:50:33:7c:d8:76:61:c4:d8:e7:09:
                    cb:72:e5:f7:c9:78:b5:1a:a8:ec:d8:1b:4e:c5:67:
                    b8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D3:77:31:5B:9A:FE:5B:49:26:31:B3:8B:12:A7:27:32:9A:DC:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa33094c-fc6e-426d-8a0c-c3010af5cd56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:c7:fb:6e:c6:bb:b9:96:a8:b9:96:47:99:38:c5:9e:f0:81:
         23:f0:2d:45:1c:0f:30:77:e0:e3:ce:9d:e7:75:aa:59:73:12:
         59:a8:96:cc:01:c6:cb:1d:e0:d0:8c:c7:61:d6:f4:a8:eb:56:
         0d:2e:3f:9d:11:a8:37:c5:cd:53:85:5e:37:72:94:51:bd:49:
         4e:fa:c4:70:b6:f9:78:30:92:9d:3d:94:5b:6a:72:00:a7:1f:
         44:e2:11:59:c2:dd:69:16:22:28:2f:9f:c1:e0:ea:a2:55:ac:
         35:7f:b0:e0:a6:07:3f:45:c8:e2:76:96:7f:88:f4:e0:44:64:
         b1:b3:35:90:cc:6b:19:49:48:f5:22:d5:1d:e1:70:16:75:1d:
         34:d4:c5:4d:94:10:ea:86:fe:88:d1:68:4d:b6:04:20:fb:29:
         7c:64:a4:cc:3c:3d:a8:8c:5c:dc:9a:e0:05:47:2f:3f:40:a8:
         ce:e7:75:76:c9:43:c7:48:43:4e:60:e5:15:69:19:ab:5d:6a:
         28:ca:f3:12:02:fc:c9:bd:c7:f5:4f:a5:a6:13:8c:e5:82:4e:
         ac:4c:76:27:84:b1:f1:3c:f8:11:99:7a:12:1e:fb:3f:b2:ba:
         60:ff:96:29:92:5e:94:ab:bd:dd:6e:20:07:f4:38:d1:8c:6d:
         29:54:e8:97
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCRsVmavIfwuCpuKT339vlwRFIkgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA2MDAwMDAwWhcNMjQxMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MDhmZmUzOWVhNDliZjAxYzRlNjhlZTUwYTU2NTA3YjBj
M2Y2YjFjMmNiZDcwMzkyYjhhNWM0NzMyNGJiNDRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEHdCx5b96Rscv2wYulW+GZ06No8KDBpTiBuT6lueS4uOa
C6AghVzsa1AtmpsPsY6YMAUseGuMiVELmE8WxuEZzunkZaeWQ4cBWelzpPMeEDb0
rOolDxauN0+bm0neSRRpr5vMf59owW4bk88v8nln2n08d5XkCseP1sUg7oE20OCe
w6QChcEMhU6WGcAaVGY7u4GwO65OHRe9X6GoX9pY1pV74vTCHI97KJyWAIfSq4ib
uZdgMH+ut9SMYy5HsAp1MHMcwGkRLoPdvkDgiGcLQEbhONC4JzomjR6eqc5QLcKL
pROOUDN82HZhxNjnCcty5ffJeLUaqOzYG07FZ7i/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU5tN3MVua/ltJJjGzixKnJzKa3C8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FhMzMwOTRjLWZjNmUtNDI2ZC04YTBjLWMzMDEwYWY1Y2Q1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAPlDANBgkqhkiG9w0BAQsFAAOCAQEALMf7bsa7uZaouZZHmTjFnvCBI/At
RRwPMHfg486d53WqWXMSWaiWzAHGyx3g0IzHYdb0qOtWDS4/nRGoN8XNU4VeN3KU
Ub1JTvrEcLb5eDCSnT2UW2pyAKcfROIRWcLdaRYiKC+fweDqolWsNX+w4KYHP0XI
4naWf4j04ERksbM1kMxrGUlI9SLVHeFwFnUdNNTFTZQQ6ob+iNFoTbYEIPspfGSk
zDw9qIxc3JrgBUcvP0Cozud1dslDx0hDTmDlFWkZq11qKMrzEgL8yb3H9U+lphOM
5YJOrEx2J4Sx8Tz4EZl6Eh77P7K6YP+WKZJelKu93W4gB/Q40YxtKVTolw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:22 2024 by rpki-client on console-ams.rpki-client.org