Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d299022b-5471-432f-9035-9fa98725bc90.roa
File:                     d299022b-5471-432f-9035-9fa98725bc90.roa (raw, json)
Hash identifier:          pagdufiT2117sbGy+S+AVwxRXbOsynoNvRaKKe6Zgv4=
Subject key identifier:   4B:FF:E0:1E:D6:02:D7:9D:E3:67:EF:5B:7A:D5:E6:C5:2E:80:19:E2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2A47C7F7D6809FBE8DADB423645D823A38A7D7F4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d299022b-5471-432f-9035-9fa98725bc90.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        205.251.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:47:c7:f7:d6:80:9f:be:8d:ad:b4:23:64:5d:82:3a:38:a7:d7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=8b39af5a98037555eec401547cfda592d621a872fe52107556a0982510e934db, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:f6:c3:0e:43:1f:01:a3:cf:d4:01:b3:ab:
                    25:d7:4b:dd:0e:a1:92:85:e1:f1:99:3b:4a:07:ec:
                    5a:44:aa:cd:ce:29:33:bf:66:72:fe:ac:15:40:2b:
                    11:11:26:b1:bd:25:db:9e:2a:61:27:d7:27:5c:9b:
                    cd:e0:28:b6:f9:64:58:29:01:d7:b9:ae:b5:6e:d3:
                    40:c1:a4:1f:35:3f:48:ba:cf:e7:7d:6c:f1:85:70:
                    a4:ab:20:a7:87:85:cd:7f:86:52:42:3b:19:85:5f:
                    8f:30:83:78:5b:da:b8:e9:be:8f:2c:06:06:8e:a9:
                    77:cc:e6:09:d5:a0:74:ee:84:f7:f6:eb:ba:5a:0f:
                    96:28:c2:a4:6b:3d:b2:3e:37:c4:0b:37:12:37:49:
                    71:ef:d2:18:a9:c0:6e:bd:82:dc:c5:df:41:31:46:
                    5d:e5:ab:86:7a:17:0b:ba:11:0c:b4:e1:f4:a1:f5:
                    da:a4:ba:28:59:2d:a6:87:52:fb:b4:40:7a:7a:14:
                    b5:0c:a2:76:92:58:ab:cd:3a:b2:80:8e:2c:1f:cc:
                    a3:31:e0:8b:07:7c:c7:53:3a:6c:eb:13:f5:e7:08:
                    db:b8:41:cc:70:47:92:cb:3a:8c:91:15:42:0a:32:
                    4d:25:81:30:bd:36:f3:f3:76:17:13:52:af:1c:4f:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FF:E0:1E:D6:02:D7:9D:E3:67:EF:5B:7A:D5:E6:C5:2E:80:19:E2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d299022b-5471-432f-9035-9fa98725bc90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:81:bd:d0:a1:cd:85:be:a2:3d:d7:03:22:26:10:2f:c3:b7:
         ce:fd:3e:a7:e7:93:73:42:3d:71:5f:79:ea:ca:7d:6c:e3:62:
         34:33:d5:57:0a:6d:ee:4e:5f:a1:65:cd:d5:d8:d4:6d:14:26:
         58:60:c0:ce:b5:d0:46:d7:ca:74:2e:8e:3b:23:c3:6f:7d:0c:
         cb:d7:53:b9:bf:71:2f:02:ce:8d:17:7f:27:4f:3b:9c:bf:fc:
         c3:de:ce:7b:9b:42:40:1b:1d:8a:52:15:60:59:a1:91:46:1c:
         01:b6:00:af:4d:71:f8:2a:3e:7f:2f:b1:02:19:f5:2e:cf:ab:
         7f:bc:fe:4e:87:83:9f:2f:92:7c:67:94:d9:04:20:c2:77:fe:
         cb:37:01:42:ad:72:d2:7c:bb:83:27:74:13:fe:c3:cb:bc:2c:
         4f:6a:43:ab:69:2e:db:4f:8b:57:38:92:c3:ee:a1:bf:f9:08:
         0b:63:a1:92:42:6b:cb:86:f6:08:bf:f4:a0:77:d9:4f:8f:fb:
         02:39:5e:c6:21:c8:2d:13:da:1e:81:e7:07:81:dc:b5:59:25:
         77:40:85:0b:0e:f1:b0:6b:67:df:d7:31:d3:93:4f:4f:a0:a1:
         6f:a2:28:23:d7:4d:98:cb:24:57:75:f4:84:c6:5b:09:83:63:
         88:3a:59:d6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKkfH99aAn76NrbQjZF2COjin1/QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjQxMTEzMDAwMDAwWhcNMjQxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YjM5YWY1YTk4MDM3NTU1ZWVjNDAxNTQ3Y2ZkYTU5MmQ2
MjFhODcyZmU1MjEwNzU1NmEwOTgyNTEwZTkzNGRiMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3YPbDDkMfAaPP1AGzqyXXS90OoZKF4fGZO0oH7FpEqs3O
KTO/ZnL+rBVAKxERJrG9JdueKmEn1ydcm83gKLb5ZFgpAde5rrVu00DBpB81P0i6
z+d9bPGFcKSrIKeHhc1/hlJCOxmFX48wg3hb2rjpvo8sBgaOqXfM5gnVoHTuhPf2
67paD5YowqRrPbI+N8QLNxI3SXHv0hipwG69gtzF30ExRl3lq4Z6Fwu6EQy04fSh
9dqkuihZLaaHUvu0QHp6FLUMonaSWKvNOrKAjiwfzKMx4IsHfMdTOmzrE/XnCNu4
QcxwR5LLOoyRFUIKMk0lgTC9NvPzdhcTUq8cT5yHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUS//gHtYC153jZ+9betXmxS6AGeIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2QyOTkwMjJiLTU0NzEtNDMyZi05MDM1LTlmYTk4NzI1YmM5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbN+8AwDQYJKoZIhvcNAQELBQADggEBAH+BvdChzYW+oj3XAyImEC/Dt879
Pqfnk3NCPXFfeerKfWzjYjQz1VcKbe5OX6FlzdXY1G0UJlhgwM610EbXynQujjsj
w299DMvXU7m/cS8Czo0XfydPO5y//MPeznubQkAbHYpSFWBZoZFGHAG2AK9Ncfgq
Pn8vsQIZ9S7Pq3+8/k6Hg58vknxnlNkEIMJ3/ss3AUKtctJ8u4MndBP+w8u8LE9q
Q6tpLttPi1c4ksPuob/5CAtjoZJCa8uG9gi/9KB32U+P+wI5XsYhyC0T2h6B5weB
3LVZJXdAhQsO8bBrZ9/XMdOTT0+goW+iKCPXTZjLJFd19ITGWwmDY4g6WdY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:50 2024 by rpki-client on console-ams.rpki-client.org