Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab015c6d-90c9-4ac4-8ed6-b5ac9d1ccbf3.roa
File:                     ab015c6d-90c9-4ac4-8ed6-b5ac9d1ccbf3.roa (raw, json)
Hash identifier:          x8mDoAeDYbACCuwTdV4CQDNx1zAVviJgrjzrOTr1imo=
Subject key identifier:   F2:2D:8B:36:C5:22:86:05:27:21:A6:09:8E:33:16:AC:8F:71:AF:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3156058AA7F6E9650B523A8E1033B6E472D7A038
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab015c6d-90c9-4ac4-8ed6-b5ac9d1ccbf3.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        57.84.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:56:05:8a:a7:f6:e9:65:0b:52:3a:8e:10:33:b6:e4:72:d7:a0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=b307ebafd794cb3deb3300a4c0f1868e04bbd3bb5df903ba3af21d68495ec4a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:15:48:72:16:8b:d6:3b:ca:57:cc:9d:67:
                    b0:74:1e:27:8f:d9:97:e7:5a:a5:4c:04:a1:f2:ca:
                    c7:1d:59:4a:b2:4b:52:ea:f8:b0:e8:23:f9:8f:32:
                    0c:3d:75:65:a8:6f:b0:3d:3a:4a:a8:21:cf:fe:ec:
                    df:c4:05:5e:62:97:f9:4c:78:50:77:56:a7:96:b2:
                    e0:37:af:39:5c:6d:9e:48:dd:19:35:6f:6b:7e:31:
                    66:e2:e2:c3:c7:dd:a6:99:ef:94:ca:d6:cf:f5:5a:
                    1e:fa:d7:a6:96:74:f8:d4:0f:41:92:a3:b2:08:2c:
                    5d:3e:3f:a0:22:55:51:cd:34:a4:57:90:82:55:28:
                    8c:a9:fc:97:f8:94:b4:87:32:35:47:b7:13:59:56:
                    c8:15:a7:ea:c9:fa:06:9a:b5:e8:70:a0:24:ce:f2:
                    21:4c:fb:ff:d7:5a:f0:7c:79:ca:4b:02:16:6f:dc:
                    75:1a:a9:04:83:ca:ec:db:20:ba:59:4b:d1:0a:16:
                    77:7f:0e:0a:5d:41:03:1d:21:c9:4e:43:f7:00:8d:
                    f6:dc:3d:43:79:01:d3:42:62:2d:10:8f:17:cd:38:
                    07:a6:c0:80:61:3f:99:c8:28:29:a8:73:eb:65:41:
                    5b:5e:9a:99:89:05:57:3f:a7:e9:11:c6:5c:31:6a:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2D:8B:36:C5:22:86:05:27:21:A6:09:8E:33:16:AC:8F:71:AF:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab015c6d-90c9-4ac4-8ed6-b5ac9d1ccbf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ba:ce:14:9f:32:e7:bd:f5:27:48:20:a3:de:55:06:aa:5b:8f:
         39:31:2b:8b:6d:9a:a0:9c:d1:a5:07:83:c6:79:9d:24:8f:de:
         bf:7e:b2:9d:57:50:3d:fc:f8:74:8d:25:a4:30:3a:b5:4a:46:
         a5:6a:21:2c:6e:c8:67:f3:aa:f4:ef:bf:65:ed:92:8e:12:03:
         d7:ef:21:3e:bf:87:91:c7:3c:d2:96:fd:1b:e6:06:0c:73:71:
         14:25:ea:c1:2c:86:5e:85:d9:da:05:b7:e5:9c:cd:f3:1a:e9:
         9b:e9:81:48:ed:1f:d5:37:51:01:7e:23:06:95:50:cb:64:61:
         fe:c6:88:17:45:c5:08:22:3b:27:63:12:e8:f1:a7:eb:44:af:
         8e:e7:1a:a0:70:32:58:5d:00:92:d5:72:f1:e4:2a:a0:b1:08:
         f6:ad:d4:12:84:cf:0e:a1:ac:70:e9:44:aa:53:b0:3d:e4:04:
         28:6b:98:15:cf:88:d4:85:86:ed:76:fb:09:a9:8a:41:ff:01:
         fa:e6:0b:04:79:80:da:ca:62:dc:b1:50:53:3d:32:06:5f:0c:
         a8:81:07:0c:a3:2d:49:fc:21:af:d4:c8:9c:9e:78:1f:04:a6:
         54:94:ed:2f:69:83:79:9b:af:4e:ff:73:82:0d:a5:ba:46:5e:
         03:c0:bd:de
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMVYFiqf26WULUjqOEDO25HLXoDgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMzA3ZWJhZmQ3OTRjYjNkZWIzMzAwYTRjMGYxODY4ZTA0
YmJkM2JiNWRmOTAzYmEzYWYyMWQ2ODQ5NWVjNGEwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUCxVIchaL1jvKV8ydZ7B0HieP2ZfnWqVMBKHyyscdWUqy
S1Lq+LDoI/mPMgw9dWWob7A9OkqoIc/+7N/EBV5il/lMeFB3VqeWsuA3rzlcbZ5I
3Rk1b2t+MWbi4sPH3aaZ75TK1s/1Wh7616aWdPjUD0GSo7IILF0+P6AiVVHNNKRX
kIJVKIyp/Jf4lLSHMjVHtxNZVsgVp+rJ+gaatehwoCTO8iFM+//XWvB8ecpLAhZv
3HUaqQSDyuzbILpZS9EKFnd/DgpdQQMdIclOQ/cAjfbcPUN5AdNCYi0QjxfNOAem
wIBhP5nIKCmoc+tlQVtempmJBVc/p+kRxlwxamcXAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU8i2LNsUihgUnIaYJjjMWrI9xr8IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiMDE1YzZkLTkwYzktNGFjNC04ZWQ2LWI1YWM5ZDFjY2JmMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA5VDANBgkqhkiG9w0BAQsFAAOCAQEAus4UnzLnvfUnSCCj3lUGqluPOTEr
i22aoJzRpQeDxnmdJI/ev36ynVdQPfz4dI0lpDA6tUpGpWohLG7IZ/Oq9O+/Ze2S
jhID1+8hPr+Hkcc80pb9G+YGDHNxFCXqwSyGXoXZ2gW35ZzN8xrpm+mBSO0f1TdR
AX4jBpVQy2Rh/saIF0XFCCI7J2MS6PGn60SvjucaoHAyWF0AktVy8eQqoLEI9q3U
EoTPDqGscOlEqlOwPeQEKGuYFc+I1IWG7Xb7CamKQf8B+uYLBHmA2spi3LFQUz0y
Bl8MqIEHDKMtSfwhr9TInJ54HwSmVJTtL2mDeZuvTv9zgg2lukZeA8C93g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:03 2024 by rpki-client on console-ams.rpki-client.org