Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79caf66b-d602-40c0-95f1-2957236e21ed.roa
File:                     79caf66b-d602-40c0-95f1-2957236e21ed.roa (raw, json)
Hash identifier:          4wZf2Wqv7GfpdP2/bqE7Vps9pa20SmQ0929b/yZW7tU=
Subject key identifier:   CB:74:29:58:CB:75:C7:DF:21:F0:E0:D7:B1:5A:27:04:09:98:E9:BA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       68716A09D10D325D2A0F9FE5E5E8DBBCC6410214
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79caf66b-d602-40c0-95f1-2957236e21ed.roa
Signing time:             Mon 18 Nov 2024 00:00:00 +0000
ROA not before:           Mon 18 Nov 2024 00:00:00 +0000
ROA not after:            Mon 23 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.69.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:71:6a:09:d1:0d:32:5d:2a:0f:9f:e5:e5:e8:db:bc:c6:41:02:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 18 00:00:00 2024 GMT
            Not After : Dec 23 23:59:59 2024 GMT
        Subject: serialNumber=a6e10284cad2c2958d8b1b031b5138354103c0e8bb196c52f099d98d0f69b841, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:1b:2f:af:37:7f:dc:f9:e7:16:d2:74:07:
                    ed:fc:cf:a9:dd:c4:f2:b3:8d:41:19:74:de:60:ce:
                    b6:c6:72:15:f0:03:bd:c5:a7:59:05:a6:01:a9:66:
                    4b:04:b9:5a:1f:8c:8f:53:bb:60:7f:fe:63:14:09:
                    fc:7a:8f:18:2e:6a:d0:60:f2:99:df:66:36:9c:d3:
                    eb:fc:69:f2:b3:68:aa:9c:27:ad:bb:a4:8e:3d:b7:
                    81:76:57:79:da:f5:b2:7e:28:3e:e9:0b:78:26:0b:
                    38:c6:69:73:22:dd:e8:de:34:24:a4:9b:a8:7b:66:
                    9d:82:62:f5:1c:9c:5f:29:55:38:18:be:62:3e:aa:
                    87:9a:4e:45:76:3c:56:df:b5:cd:a0:6b:0a:1d:fb:
                    18:e6:f6:d7:1a:68:0d:61:9c:c6:c0:88:0c:e1:d6:
                    25:56:ea:0a:8f:71:1f:c3:18:7a:b9:47:7d:c8:e7:
                    b3:8b:d9:7a:59:71:86:27:3b:b2:95:2c:b0:a9:11:
                    cc:ba:53:2a:a7:ad:e1:a7:78:72:66:8a:d7:40:ed:
                    76:ba:d2:5d:99:5c:17:95:c8:c0:ff:30:2a:f0:d1:
                    42:75:5c:86:5a:f1:57:5d:9f:76:b5:d5:d9:02:49:
                    84:93:d2:42:08:35:d7:22:d8:39:59:e5:17:37:75:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:29:58:CB:75:C7:DF:21:F0:E0:D7:B1:5A:27:04:09:98:E9:BA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79caf66b-d602-40c0-95f1-2957236e21ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.69.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:07:5b:bd:fc:46:f7:e9:28:3c:91:59:1a:7a:99:76:17:eb:
         66:d1:d1:9d:aa:5e:4a:06:c8:a9:4a:a4:ab:d8:34:33:76:80:
         bf:d6:12:5f:32:27:3f:3b:03:c4:f8:65:3f:b7:8a:bb:67:36:
         ca:8e:ab:59:36:d1:e1:99:a4:19:04:47:af:3a:53:43:14:ae:
         1e:a0:8e:ed:e0:8c:96:32:8d:0d:7d:90:54:38:c1:de:6f:cd:
         d1:fc:7a:28:ae:c3:5f:c2:1f:9d:ee:ae:c6:b3:d9:dd:3c:74:
         29:d5:da:3d:0a:84:32:e0:2d:9a:2a:33:51:b7:48:9e:7f:7d:
         5c:e3:0f:6c:e4:f3:54:24:54:2c:19:b2:b4:38:d6:62:d6:21:
         59:df:a4:c4:a0:39:e3:7b:21:cb:04:49:40:c3:6a:a1:1b:12:
         54:62:ff:a3:59:5a:2f:11:2d:4d:14:85:e9:5b:2e:b6:dc:43:
         bd:22:18:d3:9c:0e:ae:c4:08:11:a5:39:f9:58:0f:83:9c:97:
         ec:26:9e:e9:b8:d7:05:ed:c6:ef:bc:70:03:b0:83:d9:55:68:
         30:13:d3:73:49:25:62:35:29:b7:30:6c:75:89:69:b6:b0:fb:
         d7:0b:8c:bf:1b:94:6e:d2:92:33:05:54:1b:9e:a0:d3:2c:a0:
         68:08:83:ca
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUaHFqCdENMl0qD5/l5ejbvMZBAhQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTE4MDAwMDAwWhcNMjQxMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNmUxMDI4NGNhZDJjMjk1OGQ4YjFiMDMxYjUxMzgzNTQx
MDNjMGU4YmIxOTZjNTJmMDk5ZDk4ZDBmNjliODQxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4qxsvrzd/3PnnFtJ0B+38z6ndxPKzjUEZdN5gzrbGchXw
A73Fp1kFpgGpZksEuVofjI9Tu2B//mMUCfx6jxguatBg8pnfZjac0+v8afKzaKqc
J627pI49t4F2V3na9bJ+KD7pC3gmCzjGaXMi3ejeNCSkm6h7Zp2CYvUcnF8pVTgY
vmI+qoeaTkV2PFbftc2gawod+xjm9tcaaA1hnMbAiAzh1iVW6gqPcR/DGHq5R33I
57OL2XpZcYYnO7KVLLCpEcy6UyqnreGneHJmitdA7Xa60l2ZXBeVyMD/MCrw0UJ1
XIZa8Vddn3a11dkCSYST0kIINdci2DlZ5Rc3ddqrAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUy3QpWMt1x98h8ODXsVonBAmY6bowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc5Y2FmNjZiLWQ2MDItNDBjMC05NWYxLTI5NTcyMzZlMjFlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASRTANBgkqhkiG9w0BAQsFAAOCAQEAHAdbvfxG9+koPJFZGnqZdhfrZtHR
napeSgbIqUqkq9g0M3aAv9YSXzInPzsDxPhlP7eKu2c2yo6rWTbR4ZmkGQRHrzpT
QxSuHqCO7eCMljKNDX2QVDjB3m/N0fx6KK7DX8Ifne6uxrPZ3Tx0KdXaPQqEMuAt
miozUbdInn99XOMPbOTzVCRULBmytDjWYtYhWd+kxKA543shywRJQMNqoRsSVGL/
o1laLxEtTRSF6VsuttxDvSIY05wOrsQIEaU5+VgPg5yX7Cae6bjXBe3G77xwA7CD
2VVoMBPTc0klYjUptzBsdYlptrD71wuMvxuUbtKSMwVUG56g0yygaAiDyg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:00 2024 by rpki-client on console-fra.rpki-client.org