Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf3b1fc4-698c-4ad3-98ac-00c9fd9b0dd5.roa
File:                     cf3b1fc4-698c-4ad3-98ac-00c9fd9b0dd5.roa (raw, json)
Hash identifier:          FYo4y7fePDekQtXYFCcj3FzNZ8aTzC9IrnvrBtl6DRQ=
Subject key identifier:   E8:0F:2B:6A:EB:AA:B8:D5:86:E7:02:58:42:FC:C7:5E:EC:31:A4:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D76CE33E2CF31F24E9CACD211DB4F0D2519618E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf3b1fc4-698c-4ad3-98ac-00c9fd9b0dd5.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.66.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:76:ce:33:e2:cf:31:f2:4e:9c:ac:d2:11:db:4f:0d:25:19:61:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=d9657597b65ce87bd9fa5103715b60952f9909fea5e4ed9b1f8e453ca0fb9704, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:c5:a4:d7:09:ad:da:8a:78:13:ac:43:41:
                    6b:4e:97:a7:ef:99:4d:a6:65:29:5e:6a:90:b3:9d:
                    6b:bb:64:ad:08:f0:f9:f9:17:05:a1:74:f2:2d:e1:
                    aa:72:ca:20:eb:0d:e2:06:d8:4a:75:5c:a6:97:30:
                    8f:37:7c:b1:ba:37:5f:fa:0c:2a:41:6f:db:8b:15:
                    2a:9b:98:a3:1a:2d:5f:d9:00:42:f2:e7:0e:80:72:
                    a5:65:e7:b3:f6:24:58:a5:c9:89:78:02:0f:5d:d8:
                    a1:0e:15:44:d4:b4:3d:a4:ec:eb:8a:ea:c2:46:d9:
                    c1:59:48:ac:ea:ab:43:62:e9:b3:61:a0:1a:f0:3d:
                    5e:51:8a:c1:4c:bd:bd:4d:dc:c6:b0:6b:ea:e8:2c:
                    65:c1:e2:1a:46:4d:ff:17:07:4b:bc:da:88:34:d0:
                    ec:88:7b:ef:0d:94:a4:d3:f9:82:6a:e3:e2:64:7c:
                    24:27:ac:dc:47:03:a6:a1:9b:6a:dc:f4:d6:b0:44:
                    5b:d5:55:de:b6:bd:db:2c:37:28:0c:1b:55:cf:0a:
                    55:63:da:73:06:71:bf:6f:b1:28:8e:7e:46:1a:d6:
                    06:fb:79:8d:99:1b:90:41:e8:16:25:ad:3c:d3:7a:
                    19:33:82:cf:d7:c2:a6:bb:64:a4:4d:0f:2c:96:c8:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0F:2B:6A:EB:AA:B8:D5:86:E7:02:58:42:FC:C7:5E:EC:31:A4:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf3b1fc4-698c-4ad3-98ac-00c9fd9b0dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:49:87:68:64:0b:04:9e:24:0c:d2:46:88:d2:d1:ef:06:71:
         7e:b5:19:55:f0:d8:da:81:a6:dd:11:d1:d3:ac:4e:42:4a:07:
         20:b5:fb:92:eb:75:61:c0:86:d6:01:3b:a2:16:ef:e4:42:2d:
         5c:7a:ac:e7:7c:02:79:5b:c2:df:88:70:cd:97:3a:8b:4f:48:
         e3:a8:3a:74:ce:c0:bd:5a:ba:ac:f0:16:83:13:52:5d:37:2b:
         c9:2e:d7:f9:22:cc:45:40:15:78:d2:07:d9:75:f1:fd:9d:6e:
         08:4c:79:fb:46:c7:3c:f0:8d:42:d0:db:64:cf:48:48:74:b9:
         2b:ca:92:87:62:fa:7b:d6:93:dc:b6:30:9f:e2:68:ce:c9:b2:
         c4:75:3b:12:24:01:37:0e:4c:77:52:a2:f5:7e:7f:9d:84:e9:
         36:ae:5f:e1:1c:a8:89:9d:d8:82:1c:56:b5:ce:e7:15:2c:cb:
         b3:fc:9a:3a:e8:64:53:a2:67:ad:01:73:ae:08:1a:65:23:19:
         12:e5:64:f4:52:62:cb:f5:53:1b:7a:e9:bb:5c:49:87:2b:4e:
         8d:b4:02:3c:14:a0:42:d9:c3:7a:85:e5:82:64:15:66:e7:2f:
         e9:24:79:eb:d1:5c:a4:0f:59:37:5d:13:4c:4e:76:b1:1c:8c:
         6a:b0:97:84
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDXbOM+LPMfJOnKzSEdtPDSUZYY4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTY1NzU5N2I2NWNlODdiZDlmYTUxMDM3MTViNjA5NTJm
OTkwOWZlYTVlNGVkOWIxZjhlNDUzY2EwZmI5NzA0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIPMWk1wmt2op4E6xDQWtOl6fvmU2mZSleapCznWu7ZK0I
8Pn5FwWhdPIt4apyyiDrDeIG2Ep1XKaXMI83fLG6N1/6DCpBb9uLFSqbmKMaLV/Z
AELy5w6AcqVl57P2JFilyYl4Ag9d2KEOFUTUtD2k7OuK6sJG2cFZSKzqq0Ni6bNh
oBrwPV5RisFMvb1N3Mawa+roLGXB4hpGTf8XB0u82og00OyIe+8NlKTT+YJq4+Jk
fCQnrNxHA6ahm2rc9NawRFvVVd62vdssNygMG1XPClVj2nMGcb9vsSiOfkYa1gb7
eY2ZG5BB6BYlrTzTehkzgs/Xwqa7ZKRNDyyWyPYlAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU6A8rauuquNWG5wJYQvzHXuwxpOIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NmM2IxZmM0LTY5OGMtNGFkMy05OGFjLTAwYzlmZDliMGRkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQQjANBgkqhkiG9w0BAQsFAAOCAQEAskmHaGQLBJ4kDNJGiNLR7wZxfrUZ
VfDY2oGm3RHR06xOQkoHILX7kut1YcCG1gE7ohbv5EItXHqs53wCeVvC34hwzZc6
i09I46g6dM7AvVq6rPAWgxNSXTcryS7X+SLMRUAVeNIH2XXx/Z1uCEx5+0bHPPCN
QtDbZM9ISHS5K8qSh2L6e9aT3LYwn+JozsmyxHU7EiQBNw5Md1Ki9X5/nYTpNq5f
4RyoiZ3YghxWtc7nFSzLs/yaOuhkU6JnrQFzrggaZSMZEuVk9FJiy/VTG3rpu1xJ
hytOjbQCPBSgQtnDeoXlgmQVZucv6SR569FcpA9ZN10TTE52sRyMarCXhA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:14 2024 by rpki-client on console-ams.rpki-client.org