Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efe28df9-6a4b-49dd-a4d3-2ed4987dbd2e.roa
File:                     efe28df9-6a4b-49dd-a4d3-2ed4987dbd2e.roa (raw, json)
Hash identifier:          M3cM0eNgb75zDMYU4EpvSGjvzHvmQbhskCelQY/6oqQ=
Subject key identifier:   DD:26:46:04:2B:BA:AB:FF:C9:37:1E:F9:6A:F5:75:60:76:7E:C7:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7625E0FC8CEFA9A4F3C7B8C1255903AE721F0625
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efe28df9-6a4b-49dd-a4d3-2ed4987dbd2e.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        136.18.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:25:e0:fc:8c:ef:a9:a4:f3:c7:b8:c1:25:59:03:ae:72:1f:06:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=6272017669faef5c186784785d2e2e6da468083451752325a212aedb4c5d6244, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:0d:6c:68:3a:dd:bc:78:d4:7b:09:99:c4:
                    34:dc:05:22:e5:dc:97:23:d2:ee:77:fd:83:8c:ec:
                    ae:9f:4a:28:c8:76:4b:12:9c:60:fa:d0:d5:00:b7:
                    d8:7e:1d:d1:de:e2:2f:3d:50:44:6f:d0:d7:4c:64:
                    e5:13:cf:ca:66:5f:51:93:d1:0f:42:7d:e8:2e:0a:
                    4a:47:4e:d9:ea:74:f0:28:30:ce:e5:36:dd:ad:4b:
                    93:8e:92:51:9b:c6:91:d6:f5:a7:8d:89:2a:06:24:
                    ab:70:e8:58:c0:f3:b2:65:69:fa:b6:98:d4:0b:e9:
                    ad:13:b8:28:2e:63:c4:a9:64:10:eb:84:b3:1a:7f:
                    9c:bb:c1:0e:5f:f3:20:72:19:0d:20:41:f6:9e:a2:
                    43:60:24:ec:a0:83:14:4e:39:94:23:7e:76:48:c6:
                    be:89:85:b0:74:70:11:f5:d2:f7:37:79:8b:8c:43:
                    19:9d:c7:58:7d:39:f5:1a:06:ac:4b:b4:13:28:34:
                    40:5e:3d:b5:ad:fd:5d:65:e4:0e:08:f5:ec:97:bb:
                    5b:fc:19:09:ab:b5:d8:75:7e:5e:7a:19:6e:11:d9:
                    c6:ef:56:d7:78:84:ba:e4:84:84:2a:d5:6b:cf:48:
                    90:ee:90:cc:8b:69:05:d7:b6:f2:cb:64:35:c0:49:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:26:46:04:2B:BA:AB:FF:C9:37:1E:F9:6A:F5:75:60:76:7E:C7:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efe28df9-6a4b-49dd-a4d3-2ed4987dbd2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:6c:c1:d0:02:0c:eb:19:00:26:d1:5b:a0:a0:d8:9b:52:a3:
         5d:77:e3:66:59:6d:0a:97:0c:3d:eb:20:25:68:04:40:36:46:
         ce:bd:13:f9:03:8d:42:97:46:19:01:19:c2:16:86:e2:11:30:
         31:b5:30:c2:24:9e:8f:86:15:e9:84:d0:80:aa:e4:9f:2b:bc:
         d7:7a:df:c6:bf:17:3c:b9:ca:d3:f6:df:63:34:68:31:e8:15:
         fb:27:b6:9d:aa:36:e5:7f:e4:73:f5:55:2d:e9:d3:21:1f:f9:
         92:87:57:a5:53:f1:14:c4:33:c8:6d:c5:9a:56:26:00:2e:29:
         cd:b0:90:3c:d9:66:78:ad:e2:f1:f1:7a:77:cc:96:64:82:98:
         8c:87:07:26:98:8e:fe:2c:bc:8f:27:9d:c7:70:6c:81:5d:f6:
         07:42:3b:15:d4:e5:eb:60:96:de:5a:d9:b6:9e:0f:6d:f0:e4:
         5b:b1:90:f8:9d:87:20:57:60:41:8d:3b:f2:ce:6b:20:c0:3f:
         72:76:44:5d:c2:dd:09:2f:e0:f6:0d:1d:f7:ec:f4:ac:25:ec:
         14:35:33:9b:71:72:ce:cb:a4:36:dd:8c:69:e1:71:73:5b:ad:
         69:e3:78:72:98:f0:2b:56:33:7e:fa:6e:ba:79:83:59:da:64:
         02:b4:be:c1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdiXg/IzvqaTzx7jBJVkDrnIfBiUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MjcyMDE3NjY5ZmFlZjVjMTg2Nzg0Nzg1ZDJlMmU2ZGE0
NjgwODM0NTE3NTIzMjVhMjEyYWVkYjRjNWQ2MjQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoGw1saDrdvHjUewmZxDTcBSLl3Jcj0u53/YOM7K6fSijI
dksSnGD60NUAt9h+HdHe4i89UERv0NdMZOUTz8pmX1GT0Q9CfeguCkpHTtnqdPAo
MM7lNt2tS5OOklGbxpHW9aeNiSoGJKtw6FjA87Jlafq2mNQL6a0TuCguY8SpZBDr
hLMaf5y7wQ5f8yByGQ0gQfaeokNgJOyggxROOZQjfnZIxr6JhbB0cBH10vc3eYuM
Qxmdx1h9OfUaBqxLtBMoNEBePbWt/V1l5A4I9eyXu1v8GQmrtdh1fl56GW4R2cbv
Vtd4hLrkhIQq1WvPSJDukMyLaQXXtvLLZDXASXRpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3SZGBCu6q//JNx75avV1YHZ+x8owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VmZTI4ZGY5LTZhNGItNDlkZC1hNGQzLTJlZDQ5ODdkYmQyZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBASIEgAwDQYJKoZIhvcNAQELBQADggEBAHJswdACDOsZACbRW6Cg2JtSo113
42ZZbQqXDD3rICVoBEA2Rs69E/kDjUKXRhkBGcIWhuIRMDG1MMIkno+GFemE0ICq
5J8rvNd638a/Fzy5ytP232M0aDHoFfsntp2qNuV/5HP1VS3p0yEf+ZKHV6VT8RTE
M8htxZpWJgAuKc2wkDzZZnit4vHxenfMlmSCmIyHByaYjv4svI8nncdwbIFd9gdC
OxXU5etglt5a2baeD23w5FuxkPidhyBXYEGNO/LOayDAP3J2RF3C3Qkv4PYNHffs
9Kwl7BQ1M5txcs7LpDbdjGnhcXNbrWnjeHKY8CtWM376brp5g1naZAK0vsE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:40 2024 by rpki-client on console-fra.rpki-client.org