Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b36e873e-0a7d-451d-99a0-dbc8e144eaf7.roa
File:                     b36e873e-0a7d-451d-99a0-dbc8e144eaf7.roa (raw, json)
Hash identifier:          h0tQAwipcQSvZNLCgzeogfFyz4927l9RNBB5eU4utQk=
Subject key identifier:   2F:F2:50:E0:78:EF:08:2B:9A:C2:8F:E3:60:0F:A8:C4:3A:1B:B0:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       021C8F17A229B8E00373181B9FE7F2FC19C88E86
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b36e873e-0a7d-451d-99a0-dbc8e144eaf7.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        143.168.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1c:8f:17:a2:29:b8:e0:03:73:18:1b:9f:e7:f2:fc:19:c8:8e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=a09a4a13a9048aebccc0cd0f98a0999a3ab4eb73bb47f92e7b9607d7ff668a2b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:68:00:ea:e9:b5:c4:70:6a:8d:9a:ad:96:
                    a4:37:6d:48:2b:bb:59:e3:39:23:83:a5:6a:3e:da:
                    24:08:8d:4b:47:bc:10:d3:31:2a:7a:e1:8a:86:e7:
                    5d:68:7a:26:4a:2d:7e:bb:39:63:5f:d7:a1:d4:d9:
                    df:b0:7e:dc:6e:11:5a:d5:f4:28:66:fd:c4:20:f9:
                    53:77:34:46:05:f5:66:ed:f9:97:75:18:68:4f:77:
                    e7:3c:96:a6:bb:b6:17:fb:10:78:2c:48:c0:ad:9e:
                    ef:8d:d3:bd:52:fb:01:e4:57:66:39:50:e9:21:3f:
                    57:48:16:6e:80:8a:6a:ed:8b:d9:b6:8f:67:cc:56:
                    72:5d:77:2b:e7:ca:3c:19:91:96:05:b8:ce:4a:38:
                    05:92:f3:c1:24:ef:6a:ae:f3:70:a4:c9:58:6c:02:
                    1e:d4:48:bb:f5:25:45:1f:61:30:f8:ca:32:d2:35:
                    fa:4d:43:a9:a8:33:0b:90:33:2b:0b:c1:9c:7a:b9:
                    c3:81:63:31:96:e3:05:a3:b0:63:14:6e:57:e2:95:
                    15:cc:f5:9f:99:1c:29:1d:ef:35:f0:17:3d:e5:a1:
                    d0:08:0b:b9:69:3d:b0:ae:ac:f0:e1:2a:bc:8a:dd:
                    9f:15:01:ff:5f:ed:19:6f:26:09:5a:06:41:32:64:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F2:50:E0:78:EF:08:2B:9A:C2:8F:E3:60:0F:A8:C4:3A:1B:B0:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b36e873e-0a7d-451d-99a0-dbc8e144eaf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:00:10:b7:a5:4f:6b:da:38:cf:64:a3:0c:b6:f8:2d:a0:da:
         05:d5:ca:59:2d:2b:fb:d6:db:c4:56:a9:23:8d:f6:1d:1b:f4:
         ec:f9:87:ed:98:19:b5:10:d5:d3:76:c9:f9:8f:ef:c0:e2:2f:
         ea:47:d6:6c:a9:12:bd:f6:f1:73:08:8e:f7:41:5c:4f:82:6d:
         ce:0e:a8:d2:d7:6f:34:f7:af:33:65:b0:1c:67:90:6f:93:5e:
         ec:e8:c7:c3:7b:9a:15:ec:9c:88:69:78:69:18:a2:87:a8:93:
         04:83:4a:ef:92:1a:b9:f1:5f:3c:50:11:5a:3d:ba:20:14:8c:
         27:45:41:31:b7:a9:f0:e2:fc:9b:40:2d:95:e5:b8:94:36:1f:
         29:d9:59:ca:e4:60:d9:55:08:4a:40:b4:95:c5:8d:70:c9:05:
         cb:28:0c:9d:94:ab:25:5c:62:9a:27:e0:c7:c4:9c:9e:b1:88:
         7a:b4:22:05:21:41:e5:a2:d5:73:72:41:d8:63:83:6d:47:13:
         8d:e0:60:42:12:aa:54:9a:e5:0e:f4:10:51:db:90:9c:76:7b:
         78:59:da:60:86:8c:7f:4f:53:2e:5e:27:90:c5:8c:f3:cc:71:
         7c:7b:06:54:05:aa:09:9a:9f:49:a4:3b:48:17:4a:6b:ad:4b:
         c4:a9:0e:e0
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUAhyPF6IpuOADcxgbn+fy/BnIjoYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMDlhNGExM2E5MDQ4YWViY2NjMGNkMGY5OGEwOTk5YTNh
YjRlYjczYmI0N2Y5MmU3Yjk2MDdkN2ZmNjY4YTJiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPbmgA6um1xHBqjZqtlqQ3bUgru1njOSODpWo+2iQIjUtH
vBDTMSp64YqG511oeiZKLX67OWNf16HU2d+wftxuEVrV9Chm/cQg+VN3NEYF9Wbt
+Zd1GGhPd+c8lqa7thf7EHgsSMCtnu+N071S+wHkV2Y5UOkhP1dIFm6Aimrti9m2
j2fMVnJddyvnyjwZkZYFuM5KOAWS88Ek72qu83CkyVhsAh7USLv1JUUfYTD4yjLS
NfpNQ6moMwuQMysLwZx6ucOBYzGW4wWjsGMUblfilRXM9Z+ZHCkd7zXwFz3lodAI
C7lpPbCurPDhKryK3Z8VAf9f7RlvJglaBkEyZC3bAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUL/JQ4HjvCCuawo/jYA+oxDobsGYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IzNmU4NzNlLTBhN2QtNDUxZC05OWEwLWRiYzhlMTQ0ZWFmNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCPqDANBgkqhkiG9w0BAQsFAAOCAQEAHwAQt6VPa9o4z2SjDLb4LaDaBdXK
WS0r+9bbxFapI432HRv07PmH7ZgZtRDV03bJ+Y/vwOIv6kfWbKkSvfbxcwiO90Fc
T4Jtzg6o0tdvNPevM2WwHGeQb5Ne7OjHw3uaFeyciGl4aRiih6iTBINK75IaufFf
PFARWj26IBSMJ0VBMbep8OL8m0AtleW4lDYfKdlZyuRg2VUISkC0lcWNcMkFyygM
nZSrJVximifgx8ScnrGIerQiBSFB5aLVc3JB2GODbUcTjeBgQhKqVJrlDvQQUduQ
nHZ7eFnaYIaMf09TLl4nkMWM88xxfHsGVAWqCZqfSaQ7SBdKa61LxKkO4A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:24 2024 by rpki-client on console-fra.rpki-client.org