Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9b2f869-128a-476f-98d6-32a7d464a264.roa
File:                     c9b2f869-128a-476f-98d6-32a7d464a264.roa (raw, json)
Hash identifier:          pkjIb/iUWF6fdZDbJUbKzZ2E3w8jPXwadYjw7hoBfek=
Subject key identifier:   AA:A1:93:D6:E7:86:F9:0E:C2:FF:22:3F:EF:50:75:34:2C:B8:0F:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E13C2EAED81B213D3AF8FA394CE6C7841B1701D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9b2f869-128a-476f-98d6-32a7d464a264.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        72.41.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:13:c2:ea:ed:81:b2:13:d3:af:8f:a3:94:ce:6c:78:41:b1:70:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=e826597ff3fa8ec6fbe840b54acc8cd146fbbac18851110e00ed5baf0d70b875, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:b2:69:0d:18:b3:98:81:2c:c2:08:10:cf:
                    a3:50:93:12:8a:ce:92:67:29:36:21:69:8e:2c:61:
                    22:03:d1:0e:39:45:8b:c8:ff:f4:ca:34:06:41:d7:
                    8a:46:77:70:34:65:12:07:53:c2:0c:d5:5f:c9:cd:
                    d7:55:52:ac:17:e8:d8:23:5e:b4:fa:d3:95:6b:a8:
                    1b:78:75:a3:69:c3:e1:69:4c:e5:91:90:98:ba:50:
                    5b:4c:db:aa:fa:9f:a2:07:0d:ed:22:4b:a7:83:67:
                    9d:9c:8f:74:2b:ce:1b:12:ed:2e:72:de:86:95:e9:
                    62:14:71:ec:9a:cd:d4:99:af:29:63:49:71:a4:a1:
                    f3:ea:9d:d6:94:3f:19:86:cd:c2:4c:10:41:0a:fc:
                    a2:c8:6e:e6:c6:c4:cb:36:4e:0f:64:7a:ca:55:1b:
                    2c:e9:35:bd:26:02:09:29:61:3e:a6:74:49:3c:72:
                    5f:5d:16:19:4e:e0:ea:e2:9e:a6:7f:3a:22:ee:04:
                    a0:03:bd:f8:72:48:a5:d8:3b:45:71:7f:05:3b:c6:
                    0f:9f:4f:62:82:4c:2e:d3:d5:8d:1d:57:73:f3:e6:
                    32:2e:03:93:32:e2:b3:3d:07:d7:47:01:66:05:11:
                    dc:51:df:19:23:e8:47:54:8b:eb:cd:49:71:e3:31:
                    77:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A1:93:D6:E7:86:F9:0E:C2:FF:22:3F:EF:50:75:34:2C:B8:0F:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9b2f869-128a-476f-98d6-32a7d464a264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:59:0f:6d:0d:0b:9d:8e:76:54:d4:f1:af:af:8a:09:bc:bf:
         35:e4:e1:68:fc:45:07:1e:9f:fb:ce:09:af:86:39:80:49:28:
         63:c3:74:49:92:a7:27:f0:d3:d6:f3:37:7c:85:20:8b:6a:9f:
         73:12:3f:2d:e0:e3:38:21:c9:37:eb:17:e9:98:4f:db:a4:51:
         9c:07:b4:2b:24:bc:54:58:90:d9:77:21:38:aa:53:aa:67:59:
         ba:d7:83:0c:a7:ab:97:e2:8a:dc:c0:ef:c1:44:b5:5d:4b:05:
         bf:32:ed:65:86:54:33:57:14:d8:40:fa:a5:c4:10:b9:df:a4:
         5b:9e:35:cb:e0:7d:bf:e7:2b:1b:fd:f5:dd:f6:f7:23:fb:86:
         f8:3c:e5:f5:30:0f:25:41:0e:01:30:e7:82:65:b6:93:d4:69:
         ed:d7:87:17:a0:55:8c:6a:f3:3c:41:a8:eb:f2:a5:8a:7f:d4:
         57:3d:44:2d:05:70:d0:46:c2:02:0d:82:72:0d:9a:15:93:05:
         c3:dc:a9:91:81:0e:02:9b:f6:a5:d4:c2:3a:78:17:85:b6:33:
         48:74:b5:10:68:a7:98:94:b8:77:e5:bf:e6:2f:7a:b9:49:fb:
         87:c0:8b:b6:1e:ab:56:66:b4:13:3c:c2:30:be:16:5d:83:09:
         d3:12:13:60
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbhPC6u2BshPTr4+jlM5seEGxcB0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlODI2NTk3ZmYzZmE4ZWM2ZmJlODQwYjU0YWNjOGNkMTQ2
ZmJiYWMxODg1MTExMGUwMGVkNWJhZjBkNzBiODc1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoJLJpDRizmIEswggQz6NQkxKKzpJnKTYhaY4sYSID0Q45
RYvI//TKNAZB14pGd3A0ZRIHU8IM1V/JzddVUqwX6NgjXrT605VrqBt4daNpw+Fp
TOWRkJi6UFtM26r6n6IHDe0iS6eDZ52cj3QrzhsS7S5y3oaV6WIUceyazdSZrylj
SXGkofPqndaUPxmGzcJMEEEK/KLIbubGxMs2Tg9kespVGyzpNb0mAgkpYT6mdEk8
cl9dFhlO4OrinqZ/OiLuBKADvfhySKXYO0VxfwU7xg+fT2KCTC7T1Y0dV3Pz5jIu
A5My4rM9B9dHAWYFEdxR3xkj6EdUi+vNSXHjMXfnAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUqqGT1ueG+Q7C/yI/71B1NCy4DyowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M5YjJmODY5LTEyOGEtNDc2Zi05OGQ2LTMyYTdkNDY0YTI2NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBIKTANBgkqhkiG9w0BAQsFAAOCAQEAr1kPbQ0LnY52VNTxr6+KCby/NeTh
aPxFBx6f+84Jr4Y5gEkoY8N0SZKnJ/DT1vM3fIUgi2qfcxI/LeDjOCHJN+sX6ZhP
26RRnAe0KyS8VFiQ2XchOKpTqmdZuteDDKerl+KK3MDvwUS1XUsFvzLtZYZUM1cU
2ED6pcQQud+kW541y+B9v+crG/313fb3I/uG+Dzl9TAPJUEOATDngmW2k9Rp7deH
F6BVjGrzPEGo6/Klin/UVz1ELQVw0EbCAg2Ccg2aFZMFw9ypkYEOApv2pdTCOngX
hbYzSHS1EGinmJS4d+W/5i96uUn7h8CLth6rVma0EzzCML4WXYMJ0xITYA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:12 2024 by rpki-client on console-ams.rpki-client.org