Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa
File:                     36d19c61-2356-453b-bdde-185259d9b804.roa (raw, json)
Hash identifier:          kcFTvAeSZVaTh4dBPDb44NCabKPvmp3MCC1FyX42Las=
Subject key identifier:   36:C5:F6:F1:FB:C8:7B:E2:8B:BA:71:31:9E:DF:F8:ED:E5:78:59:E3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1988BE7776AEE257FDB094496187914EFC05656D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa
Signing time:             Mon 02 Sep 2024 00:00:00 +0000
ROA not before:           Mon 02 Sep 2024 00:00:00 +0000
ROA not after:            Mon 07 Oct 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:88:be:77:76:ae:e2:57:fd:b0:94:49:61:87:91:4e:fc:05:65:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep  2 00:00:00 2024 GMT
            Not After : Oct  7 23:59:59 2024 GMT
        Subject: serialNumber=daffe4f44dcc1ea7012c86990bd35116824aeb302dfa7d5a84acb64b72882466, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:b9:40:97:42:13:c1:6b:bf:31:ef:b1:d3:
                    94:38:00:f9:c2:5e:7b:00:43:d3:73:09:0c:aa:c4:
                    ba:78:7e:4d:e2:45:e8:d3:19:fa:da:e2:8f:66:f1:
                    37:dd:75:fc:0b:60:e4:20:a6:ce:a5:4e:42:12:f1:
                    21:3f:82:4e:46:53:5e:ac:9e:48:10:d0:7d:6c:b4:
                    e1:c0:97:98:99:76:9f:4c:14:d7:30:b9:7b:19:06:
                    be:ed:f4:a2:5e:f3:9c:8d:4d:f0:fe:07:61:c3:96:
                    2b:1a:bb:d3:28:86:aa:39:5f:6e:fd:cb:a2:f9:24:
                    d5:76:ec:c7:15:f3:0f:11:90:f9:55:df:3f:98:33:
                    21:55:8a:14:b2:ba:8e:2e:11:cb:d4:1a:40:8c:42:
                    20:18:b6:fc:bb:e4:5a:e6:cd:05:94:20:8f:c2:96:
                    3e:12:d9:16:84:ac:2b:60:df:d4:7b:bf:c4:26:6c:
                    6d:0b:54:90:89:38:31:83:55:37:b4:50:4b:e1:97:
                    9b:92:3f:d8:5f:4d:e3:ce:e1:d9:16:ff:94:b5:56:
                    d8:4d:a6:f2:4e:4f:59:2f:7e:fa:e2:27:35:0a:0b:
                    c3:6e:40:cb:e8:e7:7b:83:04:0d:89:17:5d:5c:f3:
                    39:26:1c:a9:04:13:3c:99:36:ed:4f:99:c6:9f:7e:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C5:F6:F1:FB:C8:7B:E2:8B:BA:71:31:9E:DF:F8:ED:E5:78:59:E3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:a7:6f:b1:33:78:48:1c:58:cb:f8:9b:18:93:fa:e2:4a:bd:
         0a:65:df:a9:69:f9:9c:07:cd:79:c6:77:cd:b9:b0:e9:00:47:
         fa:e1:c9:38:7e:a3:ee:69:1c:96:f5:4c:96:3b:c3:82:47:44:
         ef:01:9f:de:95:a1:2f:70:d6:52:03:2a:5a:81:e1:80:78:ab:
         98:e1:80:f0:86:ca:99:34:20:74:9d:4b:5b:4d:cc:4a:97:b2:
         e7:ca:d4:86:6c:e3:68:b7:a9:93:0d:68:67:a6:bf:4f:f8:fd:
         2a:9a:99:ce:50:a9:60:9e:d7:17:ba:66:76:f1:3f:a4:e3:73:
         58:67:2d:76:60:f4:ef:ed:4a:63:32:9d:26:83:f3:1b:b9:c8:
         06:87:a8:37:7c:76:61:80:c9:3b:6e:75:54:77:29:e7:98:aa:
         a5:8d:a1:4d:6d:a1:20:34:9e:82:f9:72:07:88:92:a9:a1:0b:
         e1:ba:2d:e7:a6:78:1d:bd:3c:3f:e2:4a:64:c3:49:d9:75:f6:
         65:11:5b:73:81:dc:32:11:ff:d9:fd:1b:de:6c:a1:c8:36:d4:
         dd:ed:3d:94:28:a8:08:7d:40:6f:fb:ce:d6:72:9b:50:e3:da:
         37:53:96:39:40:90:e5:96:f8:1c:9e:d4:48:78:d3:9d:f1:72:
         a6:3f:df:0e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGYi+d3au4lf9sJRJYYeRTvwFZW0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwOTAyMDAwMDAwWhcNMjQxMDA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYWZmZTRmNDRkY2MxZWE3MDEyYzg2OTkwYmQzNTExNjgy
NGFlYjMwMmRmYTdkNWE4NGFjYjY0YjcyODgyNDY2MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChYrlAl0ITwWu/Me+x05Q4APnCXnsAQ9NzCQyqxLp4fk3i
RejTGfra4o9m8TfddfwLYOQgps6lTkIS8SE/gk5GU16snkgQ0H1stOHAl5iZdp9M
FNcwuXsZBr7t9KJe85yNTfD+B2HDlisau9Mohqo5X279y6L5JNV27McV8w8RkPlV
3z+YMyFVihSyuo4uEcvUGkCMQiAYtvy75FrmzQWUII/Clj4S2RaErCtg39R7v8Qm
bG0LVJCJODGDVTe0UEvhl5uSP9hfTePO4dkW/5S1VthNpvJOT1kvfvriJzUKC8Nu
QMvo53uDBA2JF11c8zkmHKkEEzyZNu1PmcaffqCtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNsX28fvIe+KLunExnt/47eV4WeMwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzM2ZDE5YzYxLTIzNTYtNDUzYi1iZGRlLTE4NTI1OWQ5YjgwNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACtUgUwDQYJKoZIhvcNAQELBQADggEBADGnb7EzeEgcWMv4mxiT+uJKvQpl
36lp+ZwHzXnGd825sOkAR/rhyTh+o+5pHJb1TJY7w4JHRO8Bn96VoS9w1lIDKlqB
4YB4q5jhgPCGypk0IHSdS1tNzEqXsufK1IZs42i3qZMNaGemv0/4/Sqamc5QqWCe
1xe6ZnbxP6Tjc1hnLXZg9O/tSmMynSaD8xu5yAaHqDd8dmGAyTtudVR3KeeYqqWN
oU1toSA0noL5cgeIkqmhC+G6LeemeB29PD/iSmTDSdl19mURW3OB3DIR/9n9G95s
ocg21N3tPZQoqAh9QG/7ztZym1Dj2jdTljlAkOWW+Bye1Eh4053xcqY/3w4=
-----END CERTIFICATE-----
Generated at Sat Sep 7 22:41:11 2024 by rpki-client on console-ams.rpki-client.org