Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de54014d-7cb8-4ca0-82ca-d4d7cfe15c74.roa
File:                     de54014d-7cb8-4ca0-82ca-d4d7cfe15c74.roa (raw, json)
Hash identifier:          3zJlQ+99gnWT+2K8TBZS55zczQMddaDdf2ZcJEnd7vQ=
Subject key identifier:   82:E0:8C:45:29:FF:20:3F:9E:79:CF:A1:9E:34:3C:B6:0B:50:69:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07DC55DDEC4D39B8E898D9013EA2CC54FFE77C0E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de54014d-7cb8-4ca0-82ca-d4d7cfe15c74.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.125.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:dc:55:dd:ec:4d:39:b8:e8:98:d9:01:3e:a2:cc:54:ff:e7:7c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=7198553bc2c777c9a173aef33ddff04ef24eb75d81873c64367bff974f148f52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1c:98:26:62:36:6e:fb:ad:31:da:98:72:bc:
                    5c:f2:89:02:39:47:2f:f2:38:85:6e:0c:0f:01:9e:
                    1a:97:a6:69:04:c8:bc:b5:7d:49:f6:28:65:a0:03:
                    35:12:12:02:66:31:e8:08:7b:ba:17:86:e1:42:7c:
                    d0:1a:14:0f:b8:37:fa:2f:1a:ad:69:fd:09:01:b3:
                    3c:61:a3:66:ca:bd:b6:ff:09:db:02:3c:79:0d:39:
                    ae:9a:f6:f4:24:8c:d2:10:25:36:5d:25:a6:74:08:
                    ff:86:6d:70:48:31:b0:65:82:06:41:69:39:93:72:
                    15:7d:bc:21:3f:33:48:e7:0a:5a:f3:91:6c:23:b1:
                    23:a1:9c:8e:e8:61:68:47:3c:6b:f4:66:51:53:98:
                    ec:ec:85:1e:4d:11:8d:c8:b2:e2:bb:26:f6:b7:51:
                    d1:c7:8e:17:7c:47:fd:2d:51:a9:c4:c0:76:95:35:
                    e8:f4:71:28:e1:d3:cd:36:9c:73:60:67:83:c1:f4:
                    0d:76:d5:61:11:bc:6e:ac:14:c1:d2:f4:2f:11:20:
                    6c:5b:32:48:a2:fa:7d:33:69:6f:eb:58:c8:d8:ab:
                    2a:69:76:2f:4d:1b:6e:40:49:58:f1:b2:13:2a:9f:
                    83:de:1f:1c:94:a2:f6:c3:bb:fc:16:75:02:56:35:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E0:8C:45:29:FF:20:3F:9E:79:CF:A1:9E:34:3C:B6:0B:50:69:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de54014d-7cb8-4ca0-82ca-d4d7cfe15c74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:d4:ed:21:53:a2:51:13:05:c7:9e:c3:80:b0:6a:a7:93:
         ee:65:e1:72:c7:ad:d2:1e:e8:64:dc:08:52:89:ba:51:e5:3f:
         21:8c:64:3d:70:b6:b4:93:b3:6c:07:79:a0:54:e9:b5:a3:fb:
         fc:cb:1d:03:9f:24:02:ab:03:d3:39:11:4c:29:66:b2:04:60:
         de:40:e8:7c:f9:fb:9a:5f:d6:15:c1:25:fb:02:41:e9:73:34:
         29:de:df:f4:69:be:b5:81:e9:af:e8:8a:ca:97:6a:1b:e9:5c:
         cb:28:92:4d:36:76:26:0b:49:21:30:fb:cb:42:09:c2:f0:11:
         fe:19:ed:17:a2:74:a5:43:19:28:0a:47:d7:a2:c9:d2:e2:f1:
         7b:48:0b:3f:d5:ff:4f:22:d7:84:70:4f:b1:13:2f:57:b0:e6:
         60:52:35:97:81:dc:73:f2:0b:9d:9e:9e:36:0f:78:e4:cc:c1:
         a2:8f:8b:57:99:4d:14:0c:5e:4b:64:16:aa:85:5b:5c:65:55:
         ff:cb:d3:53:0e:80:d9:05:85:36:0b:d0:8a:dc:e6:0e:69:12:
         ec:d1:19:34:fc:fd:a4:46:54:cf:d9:71:cc:39:23:41:81:5b:
         80:a2:73:e2:06:b8:ae:53:8a:77:18:4d:15:6b:17:46:ad:97:
         81:af:9d:8b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUB9xV3exNObjomNkBPqLMVP/nfA4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MTk4NTUzYmMyYzc3N2M5YTE3M2FlZjMzZGRmZjA0ZWYy
NGViNzVkODE4NzNjNjQzNjdiZmY5NzRmMTQ4ZjUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjHJgmYjZu+60x2phyvFzyiQI5Ry/yOIVuDA8BnhqXpmkE
yLy1fUn2KGWgAzUSEgJmMegIe7oXhuFCfNAaFA+4N/ovGq1p/QkBszxho2bKvbb/
CdsCPHkNOa6a9vQkjNIQJTZdJaZ0CP+GbXBIMbBlggZBaTmTchV9vCE/M0jnClrz
kWwjsSOhnI7oYWhHPGv0ZlFTmOzshR5NEY3IsuK7Jva3UdHHjhd8R/0tUanEwHaV
Nej0cSjh0802nHNgZ4PB9A121WERvG6sFMHS9C8RIGxbMkii+n0zaW/rWMjYqypp
di9NG25ASVjxshMqn4PeHxyUovbDu/wWdQJWNVgtAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUguCMRSn/ID+eec+hnjQ8tgtQaeYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RlNTQwMTRkLTdjYjgtNGNhMC04MmNhLWQ0ZDdjZmUxNWM3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQfTANBgkqhkiG9w0BAQsFAAOCAQEACK3U7SFTolETBceew4CwaqeT7mXh
cset0h7oZNwIUom6UeU/IYxkPXC2tJOzbAd5oFTptaP7/MsdA58kAqsD0zkRTClm
sgRg3kDofPn7ml/WFcEl+wJB6XM0Kd7f9Gm+tYHpr+iKypdqG+lcyyiSTTZ2JgtJ
ITD7y0IJwvAR/hntF6J0pUMZKApH16LJ0uLxe0gLP9X/TyLXhHBPsRMvV7DmYFI1
l4Hcc/ILnZ6eNg945MzBoo+LV5lNFAxeS2QWqoVbXGVV/8vTUw6A2QWFNgvQitzm
DmkS7NEZNPz9pEZUz9lxzDkjQYFbgKJz4ga4rlOKdxhNFWsXRq2Xga+diw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:18 2024 by rpki-client on console-ams.rpki-client.org