Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e52b1dd7-60d7-41e9-8721-e233e72ab7dd.roa
File:                     e52b1dd7-60d7-41e9-8721-e233e72ab7dd.roa (raw, json)
Hash identifier:          T2IubHWrnt5/CO6mhcm52rGNuszGA/rbaDG8jWEv1ss=
Subject key identifier:   0B:87:56:BD:8A:05:0F:B6:D2:56:26:E4:FF:E7:B2:2D:E6:CC:DD:C9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       34B8EED4EB46DF5927D1313BF67EC45CB5D8682D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e52b1dd7-60d7-41e9-8721-e233e72ab7dd.roa
Signing time:             Sat 16 Nov 2024 00:00:00 +0000
ROA not before:           Sat 16 Nov 2024 00:00:00 +0000
ROA not after:            Sat 21 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b8:ee:d4:eb:46:df:59:27:d1:31:3b:f6:7e:c4:5c:b5:d8:68:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 16 00:00:00 2024 GMT
            Not After : Dec 21 23:59:59 2024 GMT
        Subject: serialNumber=3703c376c112a09799711e6d2642994f043aeef1fe7730f325061fdbd5ea3180, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b6:84:8a:65:4f:2e:c8:96:83:95:ba:98:39:
                    07:31:25:12:08:3d:da:94:0b:02:46:e1:e3:4a:73:
                    bf:b5:47:47:1b:65:50:cd:66:9a:94:a7:ca:a0:de:
                    fe:95:18:d3:62:a0:b3:c6:74:18:44:2c:fc:28:3e:
                    5c:66:79:13:b8:b8:bd:33:0f:99:5a:c8:e2:73:82:
                    31:07:60:1c:81:8b:ae:53:8f:c8:db:92:64:28:15:
                    79:4a:ec:58:6b:37:38:f7:db:6d:1c:48:2f:53:08:
                    4a:5b:25:56:39:d1:c1:30:a0:1c:fc:69:2e:29:d1:
                    70:d1:1e:21:8a:5e:61:bc:e5:90:56:33:66:cb:95:
                    2c:84:ee:ac:3f:d2:43:03:b8:b0:5d:51:a5:c6:9a:
                    87:4d:c9:4c:ad:e5:c9:16:eb:30:4d:45:33:99:cd:
                    b5:4a:d2:5b:32:f0:ff:08:6f:32:d9:b9:e1:69:7a:
                    10:72:3d:d6:73:48:83:58:4a:1f:0e:41:70:76:ac:
                    e3:6b:7a:64:bf:dd:cb:30:0a:8e:ba:da:d0:f7:a4:
                    9e:ec:ca:1d:9b:bd:c9:8f:a4:91:76:42:85:14:7f:
                    10:76:9b:29:81:72:0c:06:8a:49:6b:28:5b:7e:ca:
                    14:ee:d9:8a:88:fe:c1:93:df:15:a1:b2:b1:cb:6d:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:87:56:BD:8A:05:0F:B6:D2:56:26:E4:FF:E7:B2:2D:E6:CC:DD:C9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e52b1dd7-60d7-41e9-8721-e233e72ab7dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:7c:70:71:18:d4:4c:a5:7f:8a:bd:38:be:bb:e6:0b:2c:ec:
         99:30:50:7c:01:12:81:ab:38:01:e3:be:f7:58:05:b2:21:38:
         21:88:a4:14:fa:7f:29:93:ee:a4:77:e3:48:e4:5d:1f:97:22:
         22:46:cd:9e:da:b4:d2:5a:75:27:69:53:66:ce:c8:c5:5c:42:
         e5:b0:dd:3e:e4:30:e0:11:b7:f2:7d:cc:69:e4:58:23:31:51:
         8f:2f:87:d4:e1:ad:a0:60:9f:27:7a:b7:bf:50:60:fc:d4:ce:
         0f:e7:0d:a7:13:fc:4b:3b:29:de:35:7e:ca:20:33:72:af:cd:
         b7:28:42:75:4f:34:76:7a:72:e7:52:b4:61:c7:13:cf:cc:6a:
         ce:c6:a7:74:0d:3b:db:0f:c0:74:20:04:f2:84:dd:45:44:6c:
         e5:e1:79:f6:90:ca:e9:01:aa:23:a5:c7:4b:64:fc:e4:a2:82:
         14:76:9d:79:55:1f:6d:0f:a2:83:e5:90:dd:ad:88:cf:17:8f:
         98:59:4f:b7:da:1e:f6:62:df:f7:a4:1e:23:d1:4a:7c:de:c7:
         34:5c:22:5b:73:10:50:fb:04:d1:88:01:bc:d3:d7:9d:be:3a:
         88:ad:8c:59:18:57:ed:f1:2d:73:3a:2c:22:cf:2c:8d:ba:e0:
         a2:c9:aa:e2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNLju1OtG31kn0TE79n7EXLXYaC0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTE2MDAwMDAwWhcNMjQxMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNzAzYzM3NmMxMTJhMDk3OTk3MTFlNmQyNjQyOTk0ZjA0
M2FlZWYxZmU3NzMwZjMyNTA2MWZkYmQ1ZWEzMTgwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDitoSKZU8uyJaDlbqYOQcxJRIIPdqUCwJG4eNKc7+1R0cb
ZVDNZpqUp8qg3v6VGNNioLPGdBhELPwoPlxmeRO4uL0zD5layOJzgjEHYByBi65T
j8jbkmQoFXlK7FhrNzj3220cSC9TCEpbJVY50cEwoBz8aS4p0XDRHiGKXmG85ZBW
M2bLlSyE7qw/0kMDuLBdUaXGmodNyUyt5ckW6zBNRTOZzbVK0lsy8P8IbzLZueFp
ehByPdZzSINYSh8OQXB2rONremS/3cswCo662tD3pJ7syh2bvcmPpJF2QoUUfxB2
mymBcgwGiklrKFt+yhTu2YqI/sGT3xWhsrHLbRVtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUC4dWvYoFD7bSVibk/+eyLebM3ckwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2U1MmIxZGQ3LTYwZDctNDFlOS04NzIxLWUyMzNlNzJhYjdkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAP5sIwDQYJKoZIhvcNAQELBQADggEBAId8cHEY1Eylf4q9OL675gss7Jkw
UHwBEoGrOAHjvvdYBbIhOCGIpBT6fymT7qR340jkXR+XIiJGzZ7atNJadSdpU2bO
yMVcQuWw3T7kMOARt/J9zGnkWCMxUY8vh9ThraBgnyd6t79QYPzUzg/nDacT/Es7
Kd41fsogM3KvzbcoQnVPNHZ6cudStGHHE8/Mas7Gp3QNO9sPwHQgBPKE3UVEbOXh
efaQyukBqiOlx0tk/OSighR2nXlVH20PooPlkN2tiM8Xj5hZT7faHvZi3/ekHiPR
SnzexzRcIltzEFD7BNGIAbzT152+OoitjFkYV+3xLXM6LCLPLI264KLJquI=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:44:50 2024 by rpki-client on console-ams.rpki-client.org