Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fab611bc-7750-405c-b763-73e95c67fb98.roa
File:                     fab611bc-7750-405c-b763-73e95c67fb98.roa (raw, json)
Hash identifier:          oW761XNDunHIm52WYjci0CnTOu2pGal3C5uT06u0v7s=
Subject key identifier:   86:F4:02:30:DD:BB:F4:75:C4:6A:5E:84:E4:92:E3:E4:69:7D:F3:2D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DDF83A1860B491E7C63C5DE4ED6B63F40804884
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fab611bc-7750-405c-b763-73e95c67fb98.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        99.151.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:df:83:a1:86:0b:49:1e:7c:63:c5:de:4e:d6:b6:3f:40:80:48:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=79a1d3c3b012d692256729b1573d9cc6ca051c4f6adc5ac880ad6f9b4bc27ea1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:cf:bd:00:30:f3:a9:42:4a:f3:7f:60:2a:
                    99:e6:8b:6f:34:e6:2f:1d:c5:ad:80:fc:a9:57:40:
                    91:33:6a:d1:d6:0e:7b:69:03:66:43:20:43:3a:aa:
                    a6:9e:b4:26:81:9f:9c:e7:8d:6e:91:bb:db:9e:00:
                    83:29:51:60:f2:09:f7:6d:f1:45:7b:f7:6c:ac:19:
                    1e:89:33:06:d1:67:0b:8d:1f:f2:a5:3f:5a:71:84:
                    4f:dd:6f:98:da:9d:d8:01:ed:2e:7a:85:39:28:ba:
                    cb:9d:e0:8f:09:b8:53:a5:46:94:4a:02:96:9b:78:
                    ad:de:5d:e9:d8:47:ea:93:53:1f:ed:de:47:ae:3a:
                    2f:5e:5b:19:5e:3a:17:98:62:88:a2:e0:18:0e:44:
                    a1:ba:fa:cd:5f:c6:f3:7f:36:47:b2:5f:0b:d0:95:
                    ba:ab:94:cf:77:a7:d8:1b:47:fa:15:5b:64:f8:e3:
                    92:69:0c:b0:98:5d:4b:3f:08:31:69:72:43:d4:a8:
                    a8:64:bf:8f:83:0e:72:74:9a:15:64:10:20:7f:83:
                    83:7f:70:4b:d9:72:73:b6:86:1f:6c:d9:ed:f6:97:
                    ff:72:ad:d1:71:85:9a:28:ed:57:81:02:a8:9c:92:
                    d2:f8:f4:13:b6:3f:84:88:79:19:99:d2:d1:16:e4:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F4:02:30:DD:BB:F4:75:C4:6A:5E:84:E4:92:E3:E4:69:7D:F3:2D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fab611bc-7750-405c-b763-73e95c67fb98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:ea:a3:42:4b:88:93:c7:ed:29:95:b7:3f:1f:75:a6:f6:
         41:fb:e7:b0:41:98:61:88:a7:99:7e:a8:63:fb:46:68:b9:b1:
         9f:b4:ec:d2:fc:9d:85:53:83:c0:32:30:7c:ae:ad:e2:56:24:
         68:2c:4d:6a:aa:a0:3f:e4:a3:65:7d:65:49:5b:65:04:73:e6:
         fd:47:38:a8:7c:8b:c1:b8:37:48:5e:6a:32:8f:53:9a:9e:33:
         c2:7a:1b:da:b8:a2:1e:85:ed:c9:8c:3a:f4:7b:bf:2a:19:64:
         bb:d4:95:44:1b:ab:20:19:3b:61:5f:0a:7f:4e:46:fe:9f:21:
         b2:02:77:cf:6d:70:2a:d3:a5:37:cb:33:88:a2:bf:ff:53:36:
         b1:c6:ad:c0:cc:08:3e:43:ed:da:89:49:fa:a1:f9:b9:70:5f:
         38:f9:79:43:cb:01:dc:c1:b1:4a:b4:91:81:01:9d:d4:75:19:
         0e:2c:64:bd:dc:67:44:d8:cb:38:f8:64:f5:08:2a:6d:a0:56:
         cd:46:a0:66:90:23:05:cd:44:67:27:49:b7:73:ce:92:04:a9:
         bd:5d:dc:28:f3:3f:d6:eb:a4:9c:5d:f8:03:b4:00:c4:dd:8c:
         a2:f8:17:8a:50:70:13:92:24:e2:47:62:16:97:ea:db:b0:8d:
         9c:85:11:4c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHd+DoYYLSR58Y8XeTta2P0CASIQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3OWExZDNjM2IwMTJkNjkyMjU2NzI5YjE1NzNkOWNjNmNh
MDUxYzRmNmFkYzVhYzg4MGFkNmY5YjRiYzI3ZWExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC62s+9ADDzqUJK839gKpnmi2805i8dxa2A/KlXQJEzatHW
DntpA2ZDIEM6qqaetCaBn5znjW6Ru9ueAIMpUWDyCfdt8UV792ysGR6JMwbRZwuN
H/KlP1pxhE/db5jandgB7S56hTkousud4I8JuFOlRpRKApabeK3eXenYR+qTUx/t
3keuOi9eWxleOheYYoii4BgORKG6+s1fxvN/NkeyXwvQlbqrlM93p9gbR/oVW2T4
45JpDLCYXUs/CDFpckPUqKhkv4+DDnJ0mhVkECB/g4N/cEvZcnO2hh9s2e32l/9y
rdFxhZoo7VeBAqicktL49BO2P4SIeRmZ0tEW5LJbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhvQCMN279HXEal6E5JLj5Gl98y0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZhYjYxMWJjLTc3NTAtNDA1Yy1iNzYzLTczZTk1YzY3ZmI5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZjl0AwDQYJKoZIhvcNAQELBQADggEBAEFc6qNCS4iTx+0plbc/H3Wm9kH7
57BBmGGIp5l+qGP7Rmi5sZ+07NL8nYVTg8AyMHyureJWJGgsTWqqoD/ko2V9ZUlb
ZQRz5v1HOKh8i8G4N0heajKPU5qeM8J6G9q4oh6F7cmMOvR7vyoZZLvUlUQbqyAZ
O2FfCn9ORv6fIbICd89tcCrTpTfLM4iiv/9TNrHGrcDMCD5D7dqJSfqh+blwXzj5
eUPLAdzBsUq0kYEBndR1GQ4sZL3cZ0TYyzj4ZPUIKm2gVs1GoGaQIwXNRGcnSbdz
zpIEqb1d3CjzP9brpJxd+AO0AMTdjKL4F4pQcBOSJOJHYhaX6tuwjZyFEUw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:43 2024 by rpki-client on console-fra.rpki-client.org