Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7708366-ba28-44bb-9364-a82a0be48205.roa
File:                     e7708366-ba28-44bb-9364-a82a0be48205.roa (raw, json)
Hash identifier:          rAIvH5i0nTLMt0iXStmsCg62egBGIbFUAh3GPG0XcpQ=
Subject key identifier:   C6:55:48:B3:61:E2:D1:ED:62:0E:B4:F3:73:D5:2E:BD:B2:2E:6F:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41BB60CBCE97EE80D3E972E442014D8B010C94FA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7708366-ba28-44bb-9364-a82a0be48205.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        198.41.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bb:60:cb:ce:97:ee:80:d3:e9:72:e4:42:01:4d:8b:01:0c:94:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=396a48b38f22d4152c8aa2a4c7b730a2407d835d26e7a895d5e2a49f913e0f48, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:a9:a8:38:65:3d:b8:f7:cf:47:00:dd:5d:
                    b3:9e:c7:32:14:0a:67:9e:c8:d7:d4:59:03:59:ef:
                    17:4d:34:e0:4e:7d:a9:86:71:ed:29:f3:d2:d8:ba:
                    20:73:5b:5a:98:8f:c0:ca:b9:18:24:37:64:27:34:
                    9c:1f:02:92:bb:f9:de:29:6d:f3:a8:85:9c:0a:c0:
                    8b:49:75:50:05:b5:13:ba:10:fe:ff:4f:3e:a8:e8:
                    7c:78:7b:d3:37:b8:58:8e:db:fa:81:1b:4a:0c:8a:
                    b4:c0:d1:7b:19:25:1b:b9:95:67:53:ce:e1:88:2b:
                    fb:8b:c7:79:e4:21:a4:36:b0:32:f5:95:13:dc:5c:
                    42:0c:d8:c2:b3:c5:9c:e8:bb:57:2b:c7:e5:1f:4f:
                    5d:17:61:8c:57:0c:5b:37:8e:ad:8c:38:9b:5c:82:
                    be:8f:03:fb:41:4c:e7:94:a8:16:7b:c3:8e:7a:04:
                    13:6e:43:6f:a6:14:7e:70:6a:6d:99:77:0a:79:e6:
                    e8:11:02:f4:23:aa:5c:d9:bd:e6:b0:9e:54:08:d1:
                    f7:a1:4b:dc:13:3a:5b:08:ac:a8:7d:3c:62:4b:78:
                    62:6d:78:da:fd:1e:bb:c8:23:7e:a5:22:6a:01:5e:
                    4b:95:6f:18:39:b5:f9:43:b8:77:d3:2e:c5:1c:71:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:55:48:B3:61:E2:D1:ED:62:0E:B4:F3:73:D5:2E:BD:B2:2E:6F:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7708366-ba28-44bb-9364-a82a0be48205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:6a:61:48:2b:d8:ea:78:f8:ea:98:db:41:9e:97:df:ff:27:
         6e:7e:00:94:fc:da:94:6a:84:cc:c3:e8:16:21:66:47:e0:bf:
         1e:a4:90:df:28:5f:34:0d:d0:e6:e6:7d:0a:02:8b:fa:93:76:
         c4:fc:bc:ab:f9:3f:46:5e:01:d0:a0:21:61:c5:82:82:6f:3d:
         cf:16:d1:b0:8f:b2:66:f1:c0:08:c5:e8:a5:1a:0f:d5:f8:33:
         dd:aa:cd:e0:9e:7e:7f:d6:33:62:08:bc:c7:7f:12:38:71:de:
         72:c9:7b:f7:c2:ce:55:75:ea:39:73:28:f5:65:a9:39:2e:34:
         1c:4f:51:7d:ee:96:97:1c:d4:44:a1:ce:8b:4b:87:bb:67:0b:
         23:1b:1a:6b:f9:9b:4f:48:13:d7:4b:bc:c4:5d:2b:30:60:0b:
         5e:ba:1f:3a:08:78:88:cb:de:62:30:28:3e:64:30:9b:b5:e2:
         7b:bc:2f:f6:55:40:cb:4d:db:8b:6e:7b:d1:1a:80:9d:29:f4:
         fc:14:6a:fe:5f:b9:5d:c2:ed:b0:e4:d9:3f:35:f4:bc:67:81:
         38:6a:91:c7:80:2a:07:67:aa:ad:90:37:18:57:08:ca:b1:5d:
         e7:eb:0a:9f:60:ec:b5:27:67:2f:b4:42:f0:af:a7:fb:33:85:
         bf:d6:49:6e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQbtgy86X7oDT6XLkQgFNiwEMlPowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAyMDAwMDAwWhcNMjQxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzOTZhNDhiMzhmMjJkNDE1MmM4YWEyYTRjN2I3MzBhMjQw
N2Q4MzVkMjZlN2E4OTVkNWUyYTQ5ZjkxM2UwZjQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvk6moOGU9uPfPRwDdXbOexzIUCmeeyNfUWQNZ7xdNNOBO
famGce0p89LYuiBzW1qYj8DKuRgkN2QnNJwfApK7+d4pbfOohZwKwItJdVAFtRO6
EP7/Tz6o6Hx4e9M3uFiO2/qBG0oMirTA0XsZJRu5lWdTzuGIK/uLx3nkIaQ2sDL1
lRPcXEIM2MKzxZzou1crx+UfT10XYYxXDFs3jq2MOJtcgr6PA/tBTOeUqBZ7w456
BBNuQ2+mFH5wam2Zdwp55ugRAvQjqlzZveawnlQI0fehS9wTOlsIrKh9PGJLeGJt
eNr9HrvII36lImoBXkuVbxg5tflDuHfTLsUccah1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxlVIs2Hi0e1iDrTzc9UuvbIub8kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U3NzA4MzY2LWJhMjgtNDRiYi05MzY0LWE4MmEwYmU0ODIwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXGKWAwDQYJKoZIhvcNAQELBQADggEBAB5qYUgr2Op4+OqY20Gel9//J25+
AJT82pRqhMzD6BYhZkfgvx6kkN8oXzQN0ObmfQoCi/qTdsT8vKv5P0ZeAdCgIWHF
goJvPc8W0bCPsmbxwAjF6KUaD9X4M92qzeCefn/WM2IIvMd/Ejhx3nLJe/fCzlV1
6jlzKPVlqTkuNBxPUX3ulpcc1EShzotLh7tnCyMbGmv5m09IE9dLvMRdKzBgC166
HzoIeIjL3mIwKD5kMJu14nu8L/ZVQMtN24tue9EagJ0p9PwUav5fuV3C7bDk2T81
9LxngThqkceAKgdnqq2QNxhXCMqxXefrCp9g7LUnZy+0QvCvp/szhb/WSW4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:37 2024 by rpki-client on console-fra.rpki-client.org