Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa
File:                     f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa (raw, json)
Hash identifier:          FqlyXYqldavt/MS35twwcxgqHGkxmig4ulPf4SwAp7I=
Subject key identifier:   C1:C6:EF:81:43:04:E3:7F:07:8E:B2:05:50:2E:17:B0:59:F0:05:99
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       724521C4C7C54C1135012A76B2F2789A2AA3B8D5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa
Signing time:             Sat 09 Nov 2024 00:00:00 +0000
ROA not before:           Sat 09 Nov 2024 00:00:00 +0000
ROA not after:            Sat 14 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:45:21:c4:c7:c5:4c:11:35:01:2a:76:b2:f2:78:9a:2a:a3:b8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov  9 00:00:00 2024 GMT
            Not After : Dec 14 23:59:59 2024 GMT
        Subject: serialNumber=caea8f09d29a2cfd48cab610753d989b96939eb5756136cbd9afe123ad421f9b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:11:4f:fe:82:5e:53:57:07:c1:b2:45:97:
                    7a:d1:e3:43:db:98:e0:34:4c:f1:71:a9:2e:3e:fd:
                    39:7d:2c:1f:be:0f:ee:a9:a0:0c:f4:37:ad:00:5f:
                    f7:aa:2f:71:8c:e5:78:db:61:0f:01:fe:94:54:15:
                    51:b7:d6:31:8d:a7:64:b9:82:e0:53:4c:41:99:08:
                    17:fe:ba:1a:25:a3:58:b1:de:c1:db:f5:0d:cb:9d:
                    75:ca:8f:6a:a1:66:84:f8:90:0f:0a:21:7b:76:a2:
                    04:51:51:cb:aa:b9:e3:f5:6e:3c:61:f7:40:71:03:
                    87:2b:d5:7f:9d:72:f2:6e:88:0e:0e:44:83:21:fa:
                    b5:34:66:8c:dd:e2:4a:d3:f3:6d:18:70:02:49:be:
                    e1:ab:0e:30:ec:45:43:1d:88:b1:99:ea:4d:d0:9f:
                    6a:1a:e7:86:a6:be:5c:a5:53:f2:9a:69:42:a6:12:
                    65:5a:d8:24:e1:b6:a7:d1:16:33:0a:2e:75:32:72:
                    ac:85:3d:6b:d3:0a:61:ab:c0:43:77:06:12:e9:07:
                    1a:ca:c8:6d:5b:33:bd:ad:11:56:e2:b6:f7:76:ca:
                    bf:98:80:22:99:e5:31:34:99:b0:59:76:10:ad:b4:
                    08:17:9b:2c:85:cb:dc:19:e6:fd:d7:52:b1:1e:51:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C6:EF:81:43:04:E3:7F:07:8E:B2:05:50:2E:17:B0:59:F0:05:99
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:d0:42:e5:fd:ae:85:3e:04:bc:b7:6d:3a:6f:74:93:3d:9e:
         be:ea:c3:a8:20:f1:90:3c:36:93:0f:51:64:f2:90:39:35:96:
         1f:25:63:75:d5:e3:ad:a2:cf:d7:9b:03:64:f9:4a:03:97:ea:
         ab:20:01:f2:e1:3e:f8:e0:ef:e9:ca:7a:e7:d5:d2:65:03:ef:
         b1:62:9c:90:f2:d0:23:ec:20:ea:48:20:02:63:38:f7:8c:e1:
         b3:07:d2:96:96:7f:39:43:0b:c4:ad:b0:5e:7c:ec:0c:8b:73:
         99:58:bb:9d:8c:3b:62:ab:6d:d6:11:72:25:7c:40:57:e1:f6:
         db:d9:31:ba:2a:db:87:5a:25:04:d5:ad:71:16:3a:32:c7:34:
         b2:60:ea:e3:21:df:05:98:ef:d3:21:f7:de:23:c7:ae:3d:8e:
         01:99:d7:87:c7:83:7a:61:dd:fa:54:ba:25:f7:40:da:8c:d8:
         64:bd:81:76:ed:f5:99:10:00:ea:2d:88:b4:37:67:56:c5:06:
         ae:a1:8d:e6:31:84:f0:b9:ff:a3:96:29:42:1b:8f:cd:08:6a:
         e0:cc:c9:84:95:f2:22:96:10:cf:a8:5d:29:c1:c4:ce:0e:5d:
         4b:7e:9c:ff:80:10:f6:21:c8:2f:53:93:1f:fd:47:27:c1:5e:
         52:7d:48:c7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUckUhxMfFTBE1ASp2svJ4miqjuNUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjQxMTA5MDAwMDAwWhcNMjQxMjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYWVhOGYwOWQyOWEyY2ZkNDhjYWI2MTA3NTNkOTg5Yjk2
OTM5ZWI1NzU2MTM2Y2JkOWFmZTEyM2FkNDIxZjliMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7MxFP/oJeU1cHwbJFl3rR40PbmOA0TPFxqS4+/Tl9LB++
D+6poAz0N60AX/eqL3GM5XjbYQ8B/pRUFVG31jGNp2S5guBTTEGZCBf+uholo1ix
3sHb9Q3LnXXKj2qhZoT4kA8KIXt2ogRRUcuqueP1bjxh90BxA4cr1X+dcvJuiA4O
RIMh+rU0Zozd4krT820YcAJJvuGrDjDsRUMdiLGZ6k3Qn2oa54amvlylU/KaaUKm
EmVa2CThtqfRFjMKLnUycqyFPWvTCmGrwEN3BhLpBxrKyG1bM72tEVbitvd2yr+Y
gCKZ5TE0mbBZdhCttAgXmyyFy9wZ5v3XUrEeUaAVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwcbvgUME438HjrIFUC4XsFnwBZkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Y4ZjNjMWVhLWVkN2QtNDBlOS05ZTI4LWRhYzM2ZGEzYWQ2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVIFcAwDQYJKoZIhvcNAQELBQADggEBAI3QQuX9roU+BLy3bTpvdJM9nr7q
w6gg8ZA8NpMPUWTykDk1lh8lY3XV462iz9ebA2T5SgOX6qsgAfLhPvjg7+nKeufV
0mUD77FinJDy0CPsIOpIIAJjOPeM4bMH0paWfzlDC8StsF587AyLc5lYu52MO2Kr
bdYRciV8QFfh9tvZMboq24daJQTVrXEWOjLHNLJg6uMh3wWY79Mh994jx649jgGZ
14fHg3ph3fpUuiX3QNqM2GS9gXbt9ZkQAOotiLQ3Z1bFBq6hjeYxhPC5/6OWKUIb
j80IauDMyYSV8iKWEM+oXSnBxM4OXUt+nP+AEPYhyC9Tkx/9RyfBXlJ9SMc=
-----END CERTIFICATE-----
Generated at Sun Nov 24 00:54:55 2024 by rpki-client on console-fra.rpki-client.org