Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6abacef-8c8e-452b-b1fe-8de1857e5aed.roa
File:                     c6abacef-8c8e-452b-b1fe-8de1857e5aed.roa (raw, json)
Hash identifier:          Z8btUoL2bjmABPYjzzAJp7e6gwcKuTXCD/btojqhDzk=
Subject key identifier:   99:AD:4D:8C:1C:04:27:CB:E6:10:8D:9F:3A:AC:6F:74:31:E3:01:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70BABF0C4181101BE4D1B03B65A803B96E1BD845
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6abacef-8c8e-452b-b1fe-8de1857e5aed.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        98.130.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ba:bf:0c:41:81:10:1b:e4:d1:b0:3b:65:a8:03:b9:6e:1b:d8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=200030dc9180c8bb6f736fc06a83f34c264645e03d4f451167dedd73f4b306bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:a3:ce:91:88:77:31:11:b9:ef:97:c9:69:
                    8c:38:09:6d:de:24:5c:13:b9:03:a5:34:4b:62:3e:
                    8a:75:96:97:8f:e4:65:2b:b4:e2:d8:76:ac:ac:db:
                    0e:be:e6:3b:b1:3c:ba:d9:2e:c9:7d:de:20:25:3d:
                    85:c4:bd:3a:e4:0e:c5:57:1c:72:45:cc:b1:97:51:
                    7b:6e:ca:2f:4d:17:54:24:22:6f:95:69:65:f4:e1:
                    24:6c:ab:f8:67:2e:df:3a:ea:b8:d5:e8:42:ac:b6:
                    55:a3:59:a0:fb:e6:90:07:9c:03:e6:38:7d:ad:f1:
                    4a:d6:e4:de:3f:e6:60:d8:b8:de:cc:d7:da:cf:56:
                    01:69:5e:1a:c0:16:79:42:9a:0b:01:b4:a6:53:a8:
                    29:98:c4:a2:95:ef:6c:7b:39:39:2f:6f:15:40:89:
                    28:fd:d5:bb:ab:d1:6f:27:68:72:28:bb:35:51:8d:
                    ba:57:66:84:d0:58:2d:41:ba:76:ef:a5:07:ea:2f:
                    ea:bc:89:ad:fa:aa:42:d2:7b:07:50:b9:2d:bb:a3:
                    5d:67:a4:a4:14:e9:bf:f0:87:5d:da:67:37:77:af:
                    4e:63:02:4d:45:41:2d:cb:b0:98:b7:b7:e5:7a:80:
                    24:b3:05:df:b0:78:d4:26:d4:d9:bf:f3:36:5c:51:
                    a8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:4D:8C:1C:04:27:CB:E6:10:8D:9F:3A:AC:6F:74:31:E3:01:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6abacef-8c8e-452b-b1fe-8de1857e5aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.130.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         ca:b0:53:89:30:e8:a8:ed:b4:53:9d:bb:ce:5a:6a:5b:94:a8:
         dd:7a:92:34:a0:75:0f:2c:af:65:64:d1:48:a3:59:0f:ca:82:
         7b:e4:41:99:6b:4a:e2:fc:37:85:e6:ee:ea:65:ac:06:33:4f:
         d6:ab:69:d6:6c:f4:0a:37:5b:e1:af:c7:b3:ed:dc:9d:84:2a:
         5c:77:e8:2f:30:ef:2d:78:8d:7c:e9:55:0e:79:fe:e4:7b:6d:
         f5:8c:af:1f:51:1e:04:90:b9:56:84:5b:e6:4e:b5:7f:08:d4:
         63:61:a8:bb:c7:55:79:8f:29:14:44:cf:59:d1:f1:28:0e:ca:
         83:d2:a7:db:89:8c:59:82:5c:a8:71:46:f4:5e:ae:7c:88:7c:
         bd:0f:12:0b:90:6d:14:90:c9:3c:a6:15:97:51:dc:9b:c2:7f:
         5b:25:44:9e:59:fc:69:08:d1:cd:4d:0e:b7:30:7a:77:16:5b:
         2a:b2:a7:16:80:ca:a0:ca:c2:dd:92:52:10:4e:d1:d1:4c:a6:
         e9:c8:23:8d:3f:df:71:ae:61:55:44:91:00:e3:58:8b:a2:fc:
         ea:ce:70:13:90:d6:51:83:a6:69:a9:fe:fb:dd:30:28:4b:04:
         2e:60:52:87:b1:18:d5:2c:d8:3a:93:16:99:d4:cc:be:ee:fa:
         98:00:36:8b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUcLq/DEGBEBvk0bA7ZagDuW4b2EUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMDAwMzBkYzkxODBjOGJiNmY3MzZmYzA2YTgzZjM0YzI2
NDY0NWUwM2Q0ZjQ1MTE2N2RlZGQ3M2Y0YjMwNmJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChfaPOkYh3MRG575fJaYw4CW3eJFwTuQOlNEtiPop1lpeP
5GUrtOLYdqys2w6+5juxPLrZLsl93iAlPYXEvTrkDsVXHHJFzLGXUXtuyi9NF1Qk
Im+VaWX04SRsq/hnLt866rjV6EKstlWjWaD75pAHnAPmOH2t8UrW5N4/5mDYuN7M
19rPVgFpXhrAFnlCmgsBtKZTqCmYxKKV72x7OTkvbxVAiSj91bur0W8naHIouzVR
jbpXZoTQWC1BunbvpQfqL+q8ia36qkLSewdQuS27o11npKQU6b/wh13aZzd3r05j
Ak1FQS3LsJi3t+V6gCSzBd+weNQm1Nm/8zZcUahFAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUma1NjBwEJ8vmEI2fOqxvdDHjAS4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M2YWJhY2VmLThjOGUtNDUyYi1iMWZlLThkZTE4NTdlNWFlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwFigjANBgkqhkiG9w0BAQsFAAOCAQEAyrBTiTDoqO20U527zlpqW5So3XqS
NKB1DyyvZWTRSKNZD8qCe+RBmWtK4vw3hebu6mWsBjNP1qtp1mz0Cjdb4a/Hs+3c
nYQqXHfoLzDvLXiNfOlVDnn+5Htt9YyvH1EeBJC5VoRb5k61fwjUY2Gou8dVeY8p
FETPWdHxKA7Kg9Kn24mMWYJcqHFG9F6ufIh8vQ8SC5BtFJDJPKYVl1Hcm8J/WyVE
nln8aQjRzU0OtzB6dxZbKrKnFoDKoMrC3ZJSEE7R0Uym6cgjjT/fca5hVUSRAONY
i6L86s5wE5DWUYOmaan++90wKEsELmBSh7EY1SzYOpMWmdTMvu76mAA2iw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:11 2024 by rpki-client on console-ams.rpki-client.org