Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0e1a1b0-16af-422f-87f5-f4b32d0fd57b.roa
File:                     c0e1a1b0-16af-422f-87f5-f4b32d0fd57b.roa (raw, json)
Hash identifier:          etDM4UkIXzeq12VyUmJX9VYL9ALr3na5unsLENtrCUo=
Subject key identifier:   EE:85:C9:2F:38:8A:2C:DD:DF:37:27:B5:D2:06:A2:01:2D:70:CE:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F43C04C42189F6BB3384192E78803DC30614545
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0e1a1b0-16af-422f-87f5-f4b32d0fd57b.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.184.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:43:c0:4c:42:18:9f:6b:b3:38:41:92:e7:88:03:dc:30:61:45:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=9a97db9f0b54d5d063480edcbe30983ca8d042fa9f98ef1cddee4d3440b70250, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:bd:0e:21:1c:b4:86:96:f8:06:0f:c8:ac:
                    ea:ff:93:73:e5:f0:ab:1a:f3:f6:e8:8d:47:e1:f0:
                    62:36:c4:f2:61:67:cd:e5:f8:36:ba:93:f2:8f:fd:
                    c9:da:19:5e:c0:db:bd:9d:01:01:25:f5:10:ba:b8:
                    e3:1e:17:66:e2:1e:ce:42:b4:1c:38:a6:38:e3:65:
                    ae:c9:e6:99:16:b0:c2:a9:d6:77:d9:d4:e4:81:44:
                    97:d2:8f:07:1c:f3:df:f6:b7:14:07:2a:0a:16:67:
                    4c:6c:a6:13:e8:c8:57:a0:af:f7:27:ff:43:0e:21:
                    ba:99:1c:98:e3:12:e0:a9:c3:2e:c2:ab:62:03:95:
                    07:68:07:51:f3:23:06:99:49:df:9b:ee:29:d8:49:
                    7f:01:ff:dd:c5:10:53:20:af:27:1d:a8:53:cd:67:
                    00:e4:50:ec:99:a1:5e:e9:37:02:8e:1c:06:aa:18:
                    1f:a2:5a:25:0e:87:d4:69:67:02:a8:aa:63:62:18:
                    35:0d:62:12:16:26:1a:6e:66:11:8f:93:c4:7e:ce:
                    a6:50:14:10:d8:7d:77:7c:31:2f:98:49:6e:72:56:
                    c6:76:78:7d:8e:6e:a9:60:10:04:60:1f:a9:8e:b7:
                    bc:de:19:ad:7c:fa:d8:19:ec:ec:04:58:d6:3d:32:
                    94:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:85:C9:2F:38:8A:2C:DD:DF:37:27:B5:D2:06:A2:01:2D:70:CE:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0e1a1b0-16af-422f-87f5-f4b32d0fd57b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:81:02:fd:6d:5e:dd:d1:c1:ee:e7:93:32:2c:0a:99:09:
         ae:46:7c:c1:83:c3:a5:56:a5:78:e5:d6:95:3d:f5:73:d6:db:
         a4:fb:10:70:46:71:aa:dd:b8:a3:bd:c4:f2:5c:7c:16:00:38:
         21:a1:5f:e5:f9:db:2c:3a:fd:8f:60:33:0d:c6:ac:15:7b:f7:
         6c:71:f0:d3:d3:4e:ba:51:bf:b9:c9:01:55:7e:bb:8e:63:97:
         47:cd:1a:bf:ce:78:55:13:44:86:a3:3a:4b:ae:0d:f6:4f:d2:
         c5:85:15:8d:bd:4d:08:d4:98:41:ad:08:5d:04:27:08:aa:a8:
         42:b1:8a:ff:fd:3b:49:c0:f9:5a:6b:eb:3d:cb:0a:89:d0:db:
         b3:ab:9e:9f:93:e4:ac:1b:2b:3c:a9:9f:26:89:dd:7d:94:47:
         ba:94:2e:2b:5f:7a:f2:e7:14:f9:75:27:e8:76:69:80:a8:d3:
         97:54:94:6e:ca:6c:72:57:76:89:b8:4b:84:ee:8d:49:a4:ef:
         ab:75:c0:2e:e1:75:76:56:d1:c8:8c:b9:b1:f8:27:0a:91:0c:
         bd:5e:6a:cf:d6:c3:56:ae:71:f6:2b:96:cc:49:de:44:8a:c3:
         65:62:2d:60:72:68:09:d0:ce:df:0d:8b:d1:e9:17:d6:40:1c:
         a7:d8:cf:a9
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUT0PATEIYn2uzOEGS54gD3DBhRUUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YTk3ZGI5ZjBiNTRkNWQwNjM0ODBlZGNiZTMwOTgzY2E4
ZDA0MmZhOWY5OGVmMWNkZGVlNGQzNDQwYjcwMjUwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1Wr0OIRy0hpb4Bg/IrOr/k3Pl8Ksa8/bojUfh8GI2xPJh
Z83l+Da6k/KP/cnaGV7A272dAQEl9RC6uOMeF2biHs5CtBw4pjjjZa7J5pkWsMKp
1nfZ1OSBRJfSjwcc89/2txQHKgoWZ0xsphPoyFegr/cn/0MOIbqZHJjjEuCpwy7C
q2IDlQdoB1HzIwaZSd+b7inYSX8B/93FEFMgrycdqFPNZwDkUOyZoV7pNwKOHAaq
GB+iWiUOh9RpZwKoqmNiGDUNYhIWJhpuZhGPk8R+zqZQFBDYfXd8MS+YSW5yVsZ2
eH2ObqlgEARgH6mOt7zeGa18+tgZ7OwEWNY9MpTxAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU7oXJLziKLN3fNye10gaiAS1wzrEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MwZTFhMWIwLTE2YWYtNDIyZi04N2Y1LWY0YjMyZDBmZDU3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4uDANBgkqhkiG9w0BAQsFAAOCAQEAQ6WBAv1tXt3Rwe7nkzIsCpkJrkZ8
wYPDpValeOXWlT31c9bbpPsQcEZxqt24o73E8lx8FgA4IaFf5fnbLDr9j2AzDcas
FXv3bHHw09NOulG/uckBVX67jmOXR80av854VRNEhqM6S64N9k/SxYUVjb1NCNSY
Qa0IXQQnCKqoQrGK//07ScD5WmvrPcsKidDbs6uen5PkrBsrPKmfJondfZRHupQu
K1968ucU+XUn6HZpgKjTl1SUbspscld2ibhLhO6NSaTvq3XALuF1dlbRyIy5sfgn
CpEMvV5qz9bDVq5x9iuWzEneRIrDZWItYHJoCdDO3w2L0ekX1kAcp9jPqQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:09 2024 by rpki-client on console-ams.rpki-client.org