Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
File:                     ebd968d3-ce48-4118-aed7-b938cd13153f.roa (raw, json)
Hash identifier:          T69630mC3hNUVhD9VpfysM/NTbWfApFuzzl6Ipn0UdA=
Subject key identifier:   72:95:D7:35:43:F4:FB:6B:8D:4E:69:08:2B:EC:03:3E:97:BB:2F:93
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       5515A9AEB31AF6FE3997B5B897BBD2B1692B31BF
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
Signing time:             Mon 11 Nov 2024 00:00:00 +0000
ROA not before:           Mon 11 Nov 2024 00:00:00 +0000
ROA not after:            Mon 16 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:15:a9:ae:b3:1a:f6:fe:39:97:b5:b8:97:bb:d2:b1:69:2b:31:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 11 00:00:00 2024 GMT
            Not After : Dec 16 23:59:59 2024 GMT
        Subject: serialNumber=6911bf2061c4ae2fe576744c00b358637940b08274ebb31b728426839137c969, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:ef:f2:a6:39:9c:d6:44:1e:fc:e6:25:23:
                    7d:bc:10:b2:59:9b:0e:f6:4d:a7:dc:28:cc:2e:ee:
                    e1:ff:27:d1:fe:3c:6e:ef:5e:a6:e2:77:4d:48:fc:
                    d6:95:97:1c:fa:b7:5d:85:97:6b:57:d2:c0:92:8c:
                    5c:b2:ab:86:fa:74:91:9c:9d:39:c1:e0:1c:cb:9e:
                    6c:0b:88:63:bd:e8:c0:49:24:bf:da:8e:a7:26:3e:
                    f4:9b:29:b3:77:9a:5c:40:d6:2c:7a:09:51:20:48:
                    3d:4c:ff:91:ea:a9:e0:df:86:6a:42:eb:d3:14:e2:
                    31:2d:c5:f2:28:7f:ff:27:eb:b5:f9:c7:22:ce:33:
                    b7:3e:63:8a:2d:4b:9d:25:3a:8b:77:d1:8e:3a:7a:
                    df:0b:de:13:da:14:e3:58:af:d1:eb:65:3d:1e:1e:
                    24:c8:26:99:84:8e:cf:59:f4:2b:d4:07:25:7a:56:
                    e8:1d:05:58:de:94:73:ad:99:74:bd:74:b3:c0:20:
                    61:e7:78:5a:d5:3d:58:1f:82:49:c9:f2:88:43:ed:
                    f1:72:b1:52:d9:d7:24:e0:03:8a:4f:22:a8:20:35:
                    2b:2b:26:c4:29:76:bb:fc:8c:98:b6:71:0b:d0:bc:
                    c1:d3:e5:6b:ce:31:b1:4b:f2:a4:6d:90:ef:77:72:
                    1e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:95:D7:35:43:F4:FB:6B:8D:4E:69:08:2B:EC:03:3E:97:BB:2F:93
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:91:4f:5a:37:a1:af:58:b3:67:d6:21:9b:d4:c9:97:06:
         cd:eb:3c:f6:6b:9a:d1:27:e0:24:22:43:e4:d3:26:3f:c5:8c:
         38:02:63:94:97:7d:0e:33:eb:4f:dd:89:ce:bf:eb:af:7d:13:
         b0:57:69:a7:35:35:81:79:02:6d:3f:6f:94:e8:bc:d1:6b:bb:
         1b:b8:42:b2:19:9c:61:7a:ef:59:7a:0f:de:dd:0f:cc:c6:c5:
         2e:6b:9d:48:73:24:8b:a9:ad:89:86:2d:28:cf:a6:f9:15:22:
         f7:8c:ff:20:c1:26:18:56:be:27:63:a7:9a:97:8a:a8:d3:60:
         ff:7b:90:7c:fc:6a:4a:79:a8:4b:0f:fc:a9:6c:6f:05:46:f3:
         00:5c:e3:f3:18:42:45:5d:78:bb:58:f8:a7:00:b4:e1:2c:c4:
         43:33:e4:36:31:a4:f9:2d:0c:ff:53:70:3f:d1:96:2f:4d:ef:
         d4:1b:20:ff:dd:f6:63:9b:c0:07:e3:07:8c:13:d5:9e:78:11:
         7f:6d:00:e2:13:81:a8:5d:d1:70:1f:72:cb:65:a6:96:a3:da:
         74:d7:c4:08:bf:5a:97:71:c9:71:7c:6e:61:0c:34:19:43:ac:
         69:53:73:3b:53:fb:c1:4c:0e:0b:2a:30:a5:f7:31:45:a8:33:
         97:f4:3c:34
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVRWprrMa9v45l7W4l7vSsWkrMb8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMTExMDAwMDAwWhcNMjQxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OTExYmYyMDYxYzRhZTJmZTU3Njc0NGMwMGIzNTg2Mzc5
NDBiMDgyNzRlYmIzMWI3Mjg0MjY4MzkxMzdjOTY5MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbQO/ypjmc1kQe/OYlI328ELJZmw72TafcKMwu7uH/J9H+
PG7vXqbid01I/NaVlxz6t12Fl2tX0sCSjFyyq4b6dJGcnTnB4BzLnmwLiGO96MBJ
JL/ajqcmPvSbKbN3mlxA1ix6CVEgSD1M/5HqqeDfhmpC69MU4jEtxfIof/8n67X5
xyLOM7c+Y4otS50lOot30Y46et8L3hPaFONYr9HrZT0eHiTIJpmEjs9Z9CvUByV6
VugdBVjelHOtmXS9dLPAIGHneFrVPVgfgknJ8ohD7fFysVLZ1yTgA4pPIqggNSsr
JsQpdrv8jJi2cQvQvMHT5WvOMbFL8qRtkO93ch5PAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcpXXNUP0+2uNTmkIK+wDPpe7L5MwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2ViZDk2OGQzLWNlNDgtNDExOC1hZWQ3LWI5MzhjZDEzMTUzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABFqeQwDQYJKoZIhvcNAQELBQADggEBAEbFkU9aN6GvWLNn1iGb1MmXBs3r
PPZrmtEn4CQiQ+TTJj/FjDgCY5SXfQ4z60/dic6/6699E7BXaac1NYF5Am0/b5To
vNFruxu4QrIZnGF671l6D97dD8zGxS5rnUhzJIuprYmGLSjPpvkVIveM/yDBJhhW
vidjp5qXiqjTYP97kHz8akp5qEsP/KlsbwVG8wBc4/MYQkVdeLtY+KcAtOEsxEMz
5DYxpPktDP9TcD/Rli9N79QbIP/d9mObwAfjB4wT1Z54EX9tAOITgahd0XAfcstl
ppaj2nTXxAi/WpdxyXF8bmEMNBlDrGlTcztT+8FMDgsqMKX3MUWoM5f0PDQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:28:40 2024 by rpki-client on console-fra.rpki-client.org