Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6caa026-4cde-4f07-8f5e-cbdc4fa73ee7.roa
File:                     c6caa026-4cde-4f07-8f5e-cbdc4fa73ee7.roa (raw, json)
Hash identifier:          LHa/Xz0PlOkjgXJ6u8BqZe1t3fB+jToewNgB9Jty8Mc=
Subject key identifier:   20:B1:52:19:58:B2:86:B2:D0:07:07:D2:3C:81:AF:CF:F1:05:D5:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A32677838306854F102E5212949767EC5701DFD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6caa026-4cde-4f07-8f5e-cbdc4fa73ee7.roa
Signing time:             Tue 19 Nov 2024 00:00:00 +0000
ROA not before:           Tue 19 Nov 2024 00:00:00 +0000
ROA not after:            Tue 24 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        142.60.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:32:67:78:38:30:68:54:f1:02:e5:21:29:49:76:7e:c5:70:1d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:00:00 2024 GMT
            Not After : Dec 24 23:59:59 2024 GMT
        Subject: serialNumber=7dffa414cce0ff5b6e0f55d9329136248dced6b52157f2977333db60699c379e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:00:97:b1:69:df:17:93:b9:96:9d:fa:34:
                    d9:19:2f:38:23:71:78:f0:28:20:4e:56:c7:58:6e:
                    29:16:96:d8:04:15:03:86:dd:b4:ec:01:c5:19:8c:
                    64:72:57:ec:f2:b6:9e:34:60:fa:8b:01:5a:fc:c2:
                    34:e4:a6:89:20:47:08:3b:4a:7a:d8:1f:84:16:52:
                    a8:71:01:00:d4:5c:d4:51:5b:5f:d2:1c:c4:dd:8e:
                    12:94:8a:a6:f2:7c:71:43:1b:94:e8:ee:28:90:12:
                    37:85:66:db:7b:73:f9:00:6e:d1:ee:7d:08:af:91:
                    d5:0f:ab:1b:cc:ab:9f:e8:82:2f:1e:4c:4b:c8:28:
                    66:d8:2c:61:b6:9a:66:86:40:0a:cc:62:04:d1:6b:
                    15:d1:8d:7c:b9:e2:6e:21:ca:5a:69:9b:96:5e:1f:
                    c6:2c:c9:c5:ab:69:a7:43:af:e6:32:40:41:33:d5:
                    41:55:f3:43:37:76:cd:d8:34:b1:d5:49:1c:01:74:
                    11:f8:3d:e2:a6:22:53:96:62:12:fe:6d:ce:ed:47:
                    2f:ea:e6:b8:d8:d7:4a:c6:14:be:b2:da:b6:30:84:
                    2d:2c:7a:e6:f6:8b:69:91:df:f7:75:00:fa:91:94:
                    c5:d0:43:a0:cf:c0:8e:ec:ba:e1:56:85:95:7f:73:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B1:52:19:58:B2:86:B2:D0:07:07:D2:3C:81:AF:CF:F1:05:D5:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6caa026-4cde-4f07-8f5e-cbdc4fa73ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:1e:93:5f:ca:2e:2f:f1:4d:b2:cc:83:b0:09:8e:3d:83:76:
         18:f6:1e:24:2d:9b:95:42:45:f9:29:5f:15:d3:42:73:c9:8a:
         f5:69:89:c0:0e:b5:dd:92:ce:50:b0:32:fe:4b:7b:52:e6:e5:
         ee:b2:4f:b5:14:50:44:db:f1:aa:67:1b:10:f2:49:e0:c5:f1:
         3c:af:16:78:c8:aa:33:da:96:cc:4b:d0:64:69:49:40:a4:bd:
         e1:cf:1b:92:da:ad:a6:e0:a8:c4:21:c3:cf:38:c9:4d:f9:dd:
         d9:1a:d1:d9:1d:7a:cb:df:f8:04:a5:67:b1:75:cb:08:98:57:
         7b:5f:6c:7e:b3:4a:ac:40:1b:2f:64:75:b1:f7:4f:37:70:d5:
         8c:01:17:6e:b7:2a:45:b9:43:dc:5c:c6:fb:74:77:cf:aa:39:
         04:8f:41:f8:c2:ad:73:33:be:85:aa:0f:63:0f:b1:2c:43:99:
         ce:8e:76:dc:9a:a0:3f:f6:e0:d5:6f:2f:a7:75:eb:d8:7a:a2:
         7d:45:4e:c4:be:6a:68:c5:54:32:36:89:e8:bd:54:92:53:1f:
         e6:66:11:99:f9:52:9a:80:e9:69:88:ad:50:3c:c1:7e:30:d2:
         27:0d:ea:19:10:b0:9d:27:87:76:35:39:f5:71:05:d8:15:ac:
         3a:d4:06:1e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUajJneDgwaFTxAuUhKUl2fsVwHf0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE5MDAwMDAwWhcNMjQxMjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZGZmYTQxNGNjZTBmZjViNmUwZjU1ZDkzMjkxMzYyNDhk
Y2VkNmI1MjE1N2YyOTc3MzMzZGI2MDY5OWMzNzllMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXxwCXsWnfF5O5lp36NNkZLzgjcXjwKCBOVsdYbikWltgE
FQOG3bTsAcUZjGRyV+zytp40YPqLAVr8wjTkpokgRwg7SnrYH4QWUqhxAQDUXNRR
W1/SHMTdjhKUiqbyfHFDG5To7iiQEjeFZtt7c/kAbtHufQivkdUPqxvMq5/ogi8e
TEvIKGbYLGG2mmaGQArMYgTRaxXRjXy54m4hylppm5ZeH8YsycWraadDr+YyQEEz
1UFV80M3ds3YNLHVSRwBdBH4PeKmIlOWYhL+bc7tRy/q5rjY10rGFL6y2rYwhC0s
eub2i2mR3/d1APqRlMXQQ6DPwI7suuFWhZV/c4MVAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUILFSGViyhrLQBwfSPIGvz/EF1UIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M2Y2FhMDI2LTRjZGUtNGYwNy04ZjVlLWNiZGM0ZmE3M2VlNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCOPDANBgkqhkiG9w0BAQsFAAOCAQEATR6TX8ouL/FNssyDsAmOPYN2GPYe
JC2blUJF+SlfFdNCc8mK9WmJwA613ZLOULAy/kt7Uubl7rJPtRRQRNvxqmcbEPJJ
4MXxPK8WeMiqM9qWzEvQZGlJQKS94c8bktqtpuCoxCHDzzjJTfnd2RrR2R16y9/4
BKVnsXXLCJhXe19sfrNKrEAbL2R1sfdPN3DVjAEXbrcqRblD3FzG+3R3z6o5BI9B
+MKtczO+haoPYw+xLEOZzo523JqgP/bg1W8vp3Xr2HqifUVOxL5qaMVUMjaJ6L1U
klMf5mYRmflSmoDpaYitUDzBfjDSJw3qGRCwnSeHdjU59XEF2BWsOtQGHg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:29 2024 by rpki-client on console-ams.rpki-client.org