Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be9533f8-52be-4457-b651-62b580c3c24d.roa
File:                     be9533f8-52be-4457-b651-62b580c3c24d.roa (raw, json)
Hash identifier:          CMD7l5wJYCSQRamlOT//yJSmCGi5Yr3fBt4/Im+As38=
Subject key identifier:   BA:79:66:5A:30:25:41:78:62:73:9D:A7:57:41:25:A5:E9:EA:DF:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6650CD73AE9B93E5872FFAD615CA38805EE9FF0C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be9533f8-52be-4457-b651-62b580c3c24d.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.93.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:50:cd:73:ae:9b:93:e5:87:2f:fa:d6:15:ca:38:80:5e:e9:ff:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=53c17eb2c756190cd408d94e0fd415c43cf876a9cd295ca0d7e031c434aa4a50, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:1a:4f:9d:39:7b:80:54:65:84:96:d1:d6:
                    12:29:fd:ce:ae:34:bd:a6:10:c0:0e:e3:c5:4d:6f:
                    51:49:6d:d7:81:58:d6:e6:1f:43:bd:c6:84:64:78:
                    0c:0c:25:27:6d:58:85:f2:e3:d3:d7:d8:db:bb:c0:
                    40:d3:3c:62:2f:87:d5:a4:74:cc:c3:9d:4f:29:53:
                    1a:1d:d8:4f:0d:7b:8b:b1:e9:75:98:99:7a:b5:b7:
                    e0:77:9c:0c:26:67:9a:c1:fa:d6:ae:97:d4:c4:88:
                    67:60:da:f3:f7:69:23:d3:e2:06:ec:ee:df:d7:6f:
                    8c:99:b7:76:96:4e:35:ab:71:4a:54:c8:72:e0:6e:
                    68:34:2d:96:c6:6a:d8:d6:20:b9:f4:98:6d:b6:fe:
                    ac:0c:dc:de:5d:b1:b8:09:4d:2d:a4:02:03:a3:c9:
                    ef:0e:38:3d:0a:03:a6:06:08:01:a0:91:5f:68:c5:
                    bf:df:c6:58:bd:13:cd:92:61:31:53:f5:0b:46:37:
                    2e:ba:a6:93:f2:6c:ab:cd:00:56:a4:e4:03:aa:dc:
                    1f:4d:df:ea:c9:b8:f8:fb:2f:30:d8:6b:df:e2:22:
                    81:25:2b:e3:b6:0b:a6:c6:97:84:7c:7e:d7:30:f2:
                    d6:56:d9:af:94:37:fa:c2:32:f4:88:6d:cd:ff:ec:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:79:66:5A:30:25:41:78:62:73:9D:A7:57:41:25:A5:E9:EA:DF:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be9533f8-52be-4457-b651-62b580c3c24d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:3e:e9:09:96:b5:04:1f:18:05:68:a9:7c:91:9b:e3:49:
         2c:27:ad:5a:d5:b5:55:34:db:4a:02:8d:6a:8e:ee:c3:44:9d:
         64:82:0d:0a:11:6f:77:25:e8:ad:a4:35:d6:8f:56:dc:20:59:
         1d:c7:fa:6c:25:9a:03:ee:1b:df:ac:68:69:53:15:98:1d:4b:
         87:c3:89:66:6e:06:73:d8:17:81:18:07:26:81:4f:7d:b9:fa:
         12:cc:4a:68:3b:b8:45:60:69:40:22:87:8d:b6:bb:4b:b8:d0:
         ee:b1:44:60:c6:1a:2b:f0:f2:2b:88:2d:1e:d4:a8:fa:17:ef:
         f4:86:ea:e7:3d:24:f5:66:b2:45:a0:73:50:9a:ab:b6:28:a0:
         bc:b4:0b:f1:6d:f4:38:e1:5d:d4:fe:51:d4:d4:68:04:0b:7a:
         94:56:8f:2f:60:ae:a6:f9:39:a1:84:f0:e5:e2:d0:5e:b0:6c:
         80:e2:1b:4f:4a:ec:8c:8f:63:14:66:4a:f7:84:ff:2e:bc:ca:
         5d:82:08:d3:52:75:d3:dd:9a:cc:a5:67:5a:1a:09:60:05:39:
         f8:b2:c9:7b:dd:cc:e9:3c:bc:b0:99:cb:47:94:71:63:86:51:
         fd:23:c8:a5:d2:e0:d8:e7:3b:bf:f3:9f:6d:7a:8e:7e:99:80:
         e9:b3:60:3e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUZlDNc66bk+WHL/rWFco4gF7p/wwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1M2MxN2ViMmM3NTYxOTBjZDQwOGQ5NGUwZmQ0MTVjNDNj
Zjg3NmE5Y2QyOTVjYTBkN2UwMzFjNDM0YWE0YTUwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEDBpPnTl7gFRlhJbR1hIp/c6uNL2mEMAO48VNb1FJbdeB
WNbmH0O9xoRkeAwMJSdtWIXy49PX2Nu7wEDTPGIvh9WkdMzDnU8pUxod2E8Ne4ux
6XWYmXq1t+B3nAwmZ5rB+taul9TEiGdg2vP3aSPT4gbs7t/Xb4yZt3aWTjWrcUpU
yHLgbmg0LZbGatjWILn0mG22/qwM3N5dsbgJTS2kAgOjye8OOD0KA6YGCAGgkV9o
xb/fxli9E82SYTFT9QtGNy66ppPybKvNAFak5AOq3B9N3+rJuPj7LzDYa9/iIoEl
K+O2C6bGl4R8ftcw8tZW2a+UN/rCMvSIbc3/7GZ/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUunlmWjAlQXhic52nV0Elpenq3/MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JlOTUzM2Y4LTUyYmUtNDQ1Ny1iNjUxLTYyYjU4MGMzYzI0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQXTANBgkqhkiG9w0BAQsFAAOCAQEAD74+6QmWtQQfGAVoqXyRm+NJLCet
WtW1VTTbSgKNao7uw0SdZIINChFvdyXoraQ11o9W3CBZHcf6bCWaA+4b36xoaVMV
mB1Lh8OJZm4Gc9gXgRgHJoFPfbn6EsxKaDu4RWBpQCKHjba7S7jQ7rFEYMYaK/Dy
K4gtHtSo+hfv9Ibq5z0k9WayRaBzUJqrtiigvLQL8W30OOFd1P5R1NRoBAt6lFaP
L2Cupvk5oYTw5eLQXrBsgOIbT0rsjI9jFGZK94T/LrzKXYII01J1092azKVnWhoJ
YAU5+LLJe93M6Ty8sJnLR5RxY4ZR/SPIpdLg2Oc7v/OfbXqOfpmA6bNgPg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:08 2024 by rpki-client on console-ams.rpki-client.org