Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9aeffebe-1edf-44a7-a4a7-f9ca3344698a.roa
File:                     9aeffebe-1edf-44a7-a4a7-f9ca3344698a.roa (raw, json)
Hash identifier:          Cl5KS4LXAExc8FfUGH5A18SItQB/YytO8GmWvaoHzVE=
Subject key identifier:   DE:62:BA:17:49:23:25:66:B8:DD:4B:24:84:2E:3E:A8:2E:00:DA:DD
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       15B05CB234A8A64B20E5C2645AE4F0F1B0F4AD35
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9aeffebe-1edf-44a7-a4a7-f9ca3344698a.roa
Signing time:             Fri 16 Aug 2024 00:00:00 +0000
ROA not before:           Fri 16 Aug 2024 00:00:00 +0000
ROA not after:            Fri 20 Sep 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b0:5c:b2:34:a8:a6:4b:20:e5:c2:64:5a:e4:f0:f1:b0:f4:ad:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug 16 00:00:00 2024 GMT
            Not After : Sep 20 23:59:59 2024 GMT
        Subject: serialNumber=1a54756578a60cb9b214771f1d06973a1f45c4d83fe6ffeda2e1c89b1f0802f8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:c7:14:25:59:c8:59:2c:68:80:0b:38:6e:
                    2e:7f:54:d8:3a:d5:87:59:7b:76:c5:b3:9d:d1:4b:
                    2e:7a:fa:7b:25:60:28:6b:55:ab:c9:f4:83:81:f8:
                    c9:ee:d4:9c:19:4d:17:23:13:d4:f4:50:69:41:39:
                    9b:e2:a9:99:77:e4:20:d3:02:30:fd:5e:03:10:e9:
                    3f:a1:0d:ac:8b:73:2b:4f:07:60:e3:f8:17:cf:c5:
                    5e:63:4d:d7:7b:4b:6e:25:a8:57:99:e2:d0:73:c0:
                    6d:1c:be:a8:0a:1c:fc:f8:47:34:ac:ba:1d:3e:36:
                    73:ad:35:18:71:cd:3d:39:03:40:99:a3:8a:09:46:
                    c7:e7:5c:fc:a5:c6:0d:e9:fd:d3:14:d4:5b:ba:f1:
                    58:d7:1e:c9:63:c6:12:aa:eb:01:d1:df:2b:94:0a:
                    36:63:9f:bc:bb:79:bb:09:24:0a:05:c9:be:8e:ff:
                    63:4b:da:17:02:af:58:3f:1c:a3:ca:d0:fb:bc:1e:
                    71:02:df:37:7b:e7:09:23:95:07:0c:b1:aa:51:75:
                    57:d6:b4:50:20:76:4e:e7:9e:c1:c2:b9:49:52:4e:
                    ea:e6:eb:82:f3:74:86:4a:a0:64:68:85:c1:2b:37:
                    9a:e7:00:71:17:7f:7c:c5:c4:d1:26:ed:46:14:b7:
                    ed:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:62:BA:17:49:23:25:66:B8:DD:4B:24:84:2E:3E:A8:2E:00:DA:DD
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9aeffebe-1edf-44a7-a4a7-f9ca3344698a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:6d:90:9e:a7:9f:ee:94:3a:ef:43:e0:fa:3e:58:15:5f:86:
         2e:8c:39:7f:0a:97:1e:d7:68:d0:95:8f:47:52:16:dc:27:b8:
         a3:42:dd:39:0d:48:6f:3e:2b:39:30:bb:38:fb:a8:f8:b1:da:
         56:01:e1:3c:61:91:f7:91:25:95:6a:dd:b3:93:7f:f1:43:d5:
         68:a4:2d:d9:dc:ab:aa:a3:98:13:9a:67:fe:71:e4:3a:cb:f8:
         88:e2:ca:2b:62:b1:36:a4:31:f3:92:69:02:80:89:aa:6e:9a:
         27:ee:96:b0:66:41:68:34:7d:e5:31:a7:37:02:41:7b:f8:76:
         38:42:c4:e4:ad:f6:23:c6:3b:f7:60:49:79:52:3b:d1:61:13:
         85:c2:f7:58:0c:4f:20:69:db:db:58:5c:4f:30:fd:c6:48:40:
         00:c0:58:d9:10:af:98:3c:11:fa:2b:90:c4:94:74:cb:d0:15:
         76:e6:49:2b:8d:b2:a6:e3:51:f2:bc:a9:8c:cf:76:6e:98:ac:
         11:11:c3:a1:4b:74:d9:a3:14:60:59:49:55:17:79:4f:f3:06:
         de:83:c7:ff:89:64:bc:f2:ce:c3:fd:36:c6:fc:b7:81:a4:3a:
         5a:d2:13:32:ef:79:8d:fd:fc:74:81:c4:4a:a9:6b:9b:5d:b6:
         68:d2:82:4a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFbBcsjSopksg5cJkWuTw8bD0rTUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjQwODE2MDAwMDAwWhcNMjQwOTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxYTU0NzU2NTc4YTYwY2I5YjIxNDc3MWYxZDA2OTczYTFm
NDVjNGQ4M2ZlNmZmZWRhMmUxYzg5YjFmMDgwMmY4MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEdMcUJVnIWSxogAs4bi5/VNg61YdZe3bFs53RSy56+nsl
YChrVavJ9IOB+Mnu1JwZTRcjE9T0UGlBOZviqZl35CDTAjD9XgMQ6T+hDayLcytP
B2Dj+BfPxV5jTdd7S24lqFeZ4tBzwG0cvqgKHPz4RzSsuh0+NnOtNRhxzT05A0CZ
o4oJRsfnXPylxg3p/dMU1Fu68VjXHsljxhKq6wHR3yuUCjZjn7y7ebsJJAoFyb6O
/2NL2hcCr1g/HKPK0Pu8HnEC3zd75wkjlQcMsapRdVfWtFAgdk7nnsHCuUlSTurm
64LzdIZKoGRohcErN5rnAHEXf3zFxNEm7UYUt+1LAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3mK6F0kjJWa43UskhC4+qC4A2t0wHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzlhZWZmZWJlLTFlZGYtNDRhNy1hNGE3LWY5Y2EzMzQ0Njk4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQjYEAwDQYJKoZIhvcNAQELBQADggEBAAxtkJ6nn+6UOu9D4Po+WBVfhi6M
OX8Klx7XaNCVj0dSFtwnuKNC3TkNSG8+Kzkwuzj7qPix2lYB4TxhkfeRJZVq3bOT
f/FD1WikLdncq6qjmBOaZ/5x5DrL+IjiyitisTakMfOSaQKAiapumifulrBmQWg0
feUxpzcCQXv4djhCxOSt9iPGO/dgSXlSO9FhE4XC91gMTyBp29tYXE8w/cZIQADA
WNkQr5g8EforkMSUdMvQFXbmSSuNsqbjUfK8qYzPdm6YrBERw6FLdNmjFGBZSVUX
eU/zBt6Dx/+JZLzyzsP9Nsb8t4GkOlrSEzLveY39/HSBxEqpa5tdtmjSgko=
-----END CERTIFICATE-----
Generated at Sat Sep 7 16:47:10 2024 by rpki-client on console-fra.rpki-client.org