Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4753976-20df-4c30-8291-086bd631b618.roa
File:                     f4753976-20df-4c30-8291-086bd631b618.roa (raw, json)
Hash identifier:          eX0fkzLeAvpx+TKpPY7g4tojbiPlXRqsKq7uLE3Ze2M=
Subject key identifier:   49:06:A1:DB:97:7B:28:73:BE:9E:12:02:17:F4:DE:0C:6A:4C:43:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E9A44279B208AEFB169D2FD634A1C7657789EEA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4753976-20df-4c30-8291-086bd631b618.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.132.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9a:44:27:9b:20:8a:ef:b1:69:d2:fd:63:4a:1c:76:57:78:9e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=f5324abd0666cc188fb85a7fd6aa6980b9e8f74d7eec0d2323a9451d9660d643, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:45:76:b6:83:94:e1:26:fd:ef:c0:41:6f:
                    a2:67:24:c0:ba:ad:f2:d5:b4:df:3b:3c:21:0e:89:
                    d1:e7:ef:53:5f:c2:9c:e6:cb:4f:f1:93:24:ec:21:
                    29:51:8e:6d:1f:65:1b:6c:d6:b1:3b:96:76:7b:f7:
                    a1:41:ab:11:af:bb:a1:fe:89:46:7f:6b:95:eb:fe:
                    12:73:06:5f:f1:62:18:44:2f:aa:83:7d:11:a9:f8:
                    78:03:bd:f0:29:30:9b:39:c3:30:89:8e:6c:c5:b4:
                    b4:f2:3d:db:05:f5:0e:e6:17:9d:ec:28:d0:2d:ee:
                    e2:70:b3:89:b4:43:00:b9:cc:a7:79:5c:fa:fe:00:
                    3f:81:84:1c:5c:a7:a9:ff:11:d6:88:01:8b:9d:98:
                    ca:8c:ce:3d:fd:ce:9e:18:06:a1:79:cc:08:d9:5d:
                    6a:7c:1b:59:35:ec:3d:14:a6:11:5b:63:6a:31:0f:
                    d4:65:83:c6:ab:1b:20:d3:57:c2:a3:41:8a:12:d5:
                    13:1c:4d:b8:21:73:a6:d9:a8:fe:2d:a5:fb:b8:70:
                    15:29:7d:fa:66:80:45:30:50:10:83:44:dd:69:37:
                    18:62:7d:b9:78:56:41:b4:b2:2a:77:6f:c1:68:e1:
                    b0:04:28:6a:06:b7:d5:01:2b:4c:bf:4a:fd:c9:6b:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:06:A1:DB:97:7B:28:73:BE:9E:12:02:17:F4:DE:0C:6A:4C:43:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4753976-20df-4c30-8291-086bd631b618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:94:ee:11:23:59:1c:09:74:5c:38:70:65:95:6e:e3:19:
         46:50:ee:67:41:f1:89:f9:07:09:65:db:b4:32:e8:91:30:e1:
         ea:5d:d4:aa:20:ef:f3:f4:2a:be:67:48:f9:b4:8e:b3:85:2c:
         5b:d1:cf:5e:31:16:15:19:08:0a:50:d6:5b:4e:52:d6:0e:3e:
         4c:25:d3:02:fe:3f:77:a7:eb:26:df:1e:39:b5:40:9f:6a:0f:
         f5:77:b2:9e:7a:eb:85:a6:16:12:7c:e9:9f:7e:40:5b:4f:06:
         77:14:ca:df:e0:1d:65:7f:5d:d3:1f:61:ee:9a:f5:23:a6:1a:
         29:84:05:0b:ea:5b:fe:94:0d:5a:c2:9d:a7:1b:c1:78:4e:e9:
         86:d6:63:09:55:ee:6c:b3:9f:0e:9d:c8:ed:b9:5e:c6:08:7d:
         63:f2:ef:55:a0:c1:3c:3d:54:f1:1a:13:9f:2b:ee:88:4c:2d:
         5a:e7:76:75:a6:d3:e9:4a:d0:54:35:de:01:db:fc:50:ec:43:
         6b:78:02:e6:ed:76:57:bf:de:08:b1:fa:25:3d:91:63:84:4e:
         43:fd:99:01:f2:2b:d9:2b:c9:1b:d0:b7:d2:f3:56:85:c7:ac:
         12:4f:04:29:99:70:d7:46:40:36:80:f6:f1:2d:1e:01:6f:46:
         bf:88:32:af
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUXppEJ5sgiu+xadL9Y0ocdld4nuowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEyMDAwMDAwWhcNMjQxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNTMyNGFiZDA2NjZjYzE4OGZiODVhN2ZkNmFhNjk4MGI5
ZThmNzRkN2VlYzBkMjMyM2E5NDUxZDk2NjBkNjQzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFKEV2toOU4Sb978BBb6JnJMC6rfLVtN87PCEOidHn71Nf
wpzmy0/xkyTsISlRjm0fZRts1rE7lnZ796FBqxGvu6H+iUZ/a5Xr/hJzBl/xYhhE
L6qDfRGp+HgDvfApMJs5wzCJjmzFtLTyPdsF9Q7mF53sKNAt7uJws4m0QwC5zKd5
XPr+AD+BhBxcp6n/EdaIAYudmMqMzj39zp4YBqF5zAjZXWp8G1k17D0UphFbY2ox
D9Rlg8arGyDTV8KjQYoS1RMcTbghc6bZqP4tpfu4cBUpffpmgEUwUBCDRN1pNxhi
fbl4VkG0sip3b8Fo4bAEKGoGt9UBK0y/Sv3JaxyPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUSQah25d7KHO+nhICF/TeDGpMQw4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y0NzUzOTc2LTIwZGYtNGMzMC04MjkxLTA4NmJkNjMxYjYxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4hDANBgkqhkiG9w0BAQsFAAOCAQEAGNyU7hEjWRwJdFw4cGWVbuMZRlDu
Z0HxifkHCWXbtDLokTDh6l3UqiDv8/QqvmdI+bSOs4UsW9HPXjEWFRkIClDWW05S
1g4+TCXTAv4/d6frJt8eObVAn2oP9XeynnrrhaYWEnzpn35AW08GdxTK3+AdZX9d
0x9h7pr1I6YaKYQFC+pb/pQNWsKdpxvBeE7phtZjCVXubLOfDp3I7blexgh9Y/Lv
VaDBPD1U8RoTnyvuiEwtWud2dabT6UrQVDXeAdv8UOxDa3gC5u12V7/eCLH6JT2R
Y4ROQ/2ZAfIr2SvJG9C30vNWhcesEk8EKZlw10ZANoD28S0eAW9Gv4gyrw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:44 2024 by rpki-client on console-ams.rpki-client.org