Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c19e42ee-5272-4934-8507-b042c981dfe4.roa
File:                     c19e42ee-5272-4934-8507-b042c981dfe4.roa (raw, json)
Hash identifier:          nuUhfNJ44NHbiJi1qD97dc9n2IEhsadW7NNtfMMa9Q0=
Subject key identifier:   71:7C:28:69:21:44:72:92:FC:F8:96:7A:10:4B:07:69:D3:6B:AB:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69ADE99A5958C4ED414D374DEB84099B38964F66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c19e42ee-5272-4934-8507-b042c981dfe4.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.219.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ad:e9:9a:59:58:c4:ed:41:4d:37:4d:eb:84:09:9b:38:96:4f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=fd254d6082284eaa94ce7561f01e0ccdd336bb5b6c6f7ce1660eeb83ed240abf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:d3:2c:78:78:78:3c:11:9c:56:f3:c5:29:
                    cb:d0:be:50:7c:7d:0f:2d:fd:a6:ef:28:3a:5e:2e:
                    09:78:d2:a2:8c:4e:fe:a9:94:f6:fa:67:b8:1f:c4:
                    82:bd:bc:0c:68:7f:ee:4e:bf:f9:10:b0:1e:2b:04:
                    85:e4:a2:21:a8:d9:90:23:ca:2b:7a:83:92:6f:29:
                    16:f2:2a:15:bc:b5:10:4a:c7:f3:89:b5:f8:ba:28:
                    ec:74:05:67:a2:a5:8b:d3:ae:42:62:cb:a1:cd:53:
                    82:a8:da:a9:72:87:a0:3d:cf:9e:4b:fb:22:d8:13:
                    9d:58:0d:89:1e:0c:4c:7f:ee:4d:d1:3e:67:5d:7c:
                    da:d4:1f:f1:a6:fe:f0:44:a0:35:6b:8f:11:92:41:
                    0c:9b:2f:4e:5b:f7:47:fa:2a:75:44:b9:c2:78:43:
                    65:2a:1b:65:21:a0:8c:17:46:3a:57:46:c2:be:b2:
                    89:50:25:ed:21:60:f4:d0:1a:d4:90:1c:7e:a5:c9:
                    fa:61:7f:2c:46:2e:8e:e3:2a:b1:16:0c:92:e6:d2:
                    cd:a0:8a:ef:73:da:e0:ad:ed:0d:2b:e0:5a:98:cd:
                    71:9d:4f:84:7e:d1:74:8c:10:9c:59:6d:cd:91:49:
                    85:4c:65:b6:f4:b1:9a:12:a6:ef:ec:23:3e:86:17:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7C:28:69:21:44:72:92:FC:F8:96:7A:10:4B:07:69:D3:6B:AB:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c19e42ee-5272-4934-8507-b042c981dfe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:2b:a7:72:83:73:89:bb:82:8e:44:39:ed:ba:e1:e5:34:8c:
         54:36:ba:9b:c3:0d:1b:00:93:f0:28:6c:bc:b6:38:8b:9e:58:
         18:42:77:47:c8:5f:68:66:c7:b2:ed:b4:fb:40:89:c6:0c:8d:
         10:67:81:bb:54:2c:ca:36:22:4d:30:af:fe:85:e3:0b:de:26:
         ad:37:04:4a:3b:20:fb:73:8d:12:b7:6a:5b:31:15:83:94:04:
         1c:8a:c5:1b:3a:e0:30:7e:0e:80:16:ec:e0:ff:07:12:25:21:
         23:04:16:86:db:41:00:01:19:34:e0:69:ec:41:8a:60:38:87:
         d3:c1:fa:4a:34:91:e7:0a:94:88:75:32:1c:ca:34:d8:3f:4b:
         3a:fc:c6:7d:48:97:ff:ff:bb:07:d1:b2:53:d0:73:5c:92:4d:
         78:77:43:28:7f:aa:19:19:06:e6:26:c0:09:46:b3:36:99:3e:
         ff:45:d4:34:f1:ef:c7:9c:b3:e5:11:8c:25:01:2f:81:0c:15:
         26:54:18:4a:13:54:70:f7:ea:b1:91:f9:ff:df:55:5a:df:79:
         24:e9:8f:b6:1a:9d:78:69:3b:50:c8:dc:30:c1:6b:a0:d4:64:
         13:f7:42:63:2c:3e:8f:15:15:21:df:0b:cf:04:d7:e6:38:dd:
         ee:19:ea:38
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUaa3pmllYxO1BTTdN64QJmziWT2YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDI1NGQ2MDgyMjg0ZWFhOTRjZTc1NjFmMDFlMGNjZGQz
MzZiYjViNmM2ZjdjZTE2NjBlZWI4M2VkMjQwYWJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxT9MseHh4PBGcVvPFKcvQvlB8fQ8t/abvKDpeLgl40qKM
Tv6plPb6Z7gfxIK9vAxof+5Ov/kQsB4rBIXkoiGo2ZAjyit6g5JvKRbyKhW8tRBK
x/OJtfi6KOx0BWeipYvTrkJiy6HNU4Ko2qlyh6A9z55L+yLYE51YDYkeDEx/7k3R
PmddfNrUH/Gm/vBEoDVrjxGSQQybL05b90f6KnVEucJ4Q2UqG2UhoIwXRjpXRsK+
solQJe0hYPTQGtSQHH6lyfphfyxGLo7jKrEWDJLm0s2giu9z2uCt7Q0r4FqYzXGd
T4R+0XSMEJxZbc2RSYVMZbb0sZoSpu/sIz6GFxr5AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUcXwoaSFEcpL8+JZ6EEsHadNrq0owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MxOWU0MmVlLTUyNzItNDkzNC04NTA3LWIwNDJjOTgxZGZlNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA42zANBgkqhkiG9w0BAQsFAAOCAQEAdiuncoNzibuCjkQ57brh5TSMVDa6
m8MNGwCT8ChsvLY4i55YGEJ3R8hfaGbHsu20+0CJxgyNEGeBu1QsyjYiTTCv/oXj
C94mrTcESjsg+3ONErdqWzEVg5QEHIrFGzrgMH4OgBbs4P8HEiUhIwQWhttBAAEZ
NOBp7EGKYDiH08H6SjSR5wqUiHUyHMo02D9LOvzGfUiX//+7B9GyU9BzXJJNeHdD
KH+qGRkG5ibACUazNpk+/0XUNPHvx5yz5RGMJQEvgQwVJlQYShNUcPfqsZH5/99V
Wt95JOmPthqdeGk7UMjcMMFroNRkE/dCYyw+jxUVId8LzwTX5jjd7hnqOA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:27 2024 by rpki-client on console-fra.rpki-client.org