Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eee5efa8-14bc-45e4-ad96-642d48356950.roa
File:                     eee5efa8-14bc-45e4-ad96-642d48356950.roa (raw, json)
Hash identifier:          BXEzVVJ47m7Mw/Au8L31yXUeXujLOBve1XJFaWW9qto=
Subject key identifier:   ED:DE:A2:CF:05:F0:2A:F0:E2:FA:C6:74:FB:75:83:0C:64:E8:94:41
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       334F424585B067DED18DD7A393A29DFF6D8FEEE7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eee5efa8-14bc-45e4-ad96-642d48356950.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     6167
IP address blocks:        155.146.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4f:42:45:85:b0:67:de:d1:8d:d7:a3:93:a2:9d:ff:6d:8f:ee:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=7da5c81941289480dd00b5568d7096b5acfad736db7c1f95c705c2d34a88f5f1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:25:41:29:2b:ff:40:39:44:75:c3:8b:c2:
                    80:90:58:42:e4:66:18:f5:b4:d7:4e:f2:5e:7d:55:
                    3c:3b:d9:b1:9d:d7:3c:20:fb:eb:73:b0:ea:3a:ba:
                    71:36:35:89:fb:e0:09:6a:6e:7a:13:af:85:74:23:
                    8a:15:79:0c:d3:e0:38:b9:9e:9c:8b:2c:7e:10:b1:
                    f1:0f:46:28:f6:ff:b4:6e:2a:48:f2:c8:d7:92:7b:
                    46:a0:fc:fe:41:e9:49:2e:90:ec:28:8c:d5:3f:53:
                    33:7e:d5:8d:c7:f3:59:00:7d:5e:f6:e8:03:7e:a3:
                    fe:7c:04:aa:e8:46:01:ca:d2:df:cd:a0:2d:45:c8:
                    74:43:e4:d6:f4:71:12:92:49:1e:63:ef:6b:d2:de:
                    9a:79:1d:5e:54:76:bd:3a:6f:9b:31:8c:66:7f:b2:
                    79:d8:3b:68:c7:69:6e:a4:55:ef:56:a3:5c:12:09:
                    df:23:c6:97:7f:6c:fc:8f:a8:e0:a9:c4:fc:4a:c7:
                    d3:d9:a3:02:93:93:d8:7c:39:8f:60:d5:77:22:af:
                    4c:41:73:f7:e2:1d:59:f3:e7:07:3c:21:50:71:fc:
                    bb:0d:b3:8a:57:b6:7f:78:a9:e5:47:0f:28:66:c2:
                    5d:88:7b:6c:60:3a:8f:5b:cb:46:9b:9b:09:8b:5b:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DE:A2:CF:05:F0:2A:F0:E2:FA:C6:74:FB:75:83:0C:64:E8:94:41
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eee5efa8-14bc-45e4-ad96-642d48356950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:7b:5e:f9:dc:32:09:e8:6f:c5:09:19:da:b6:f7:05:84:83:
         4d:18:36:cb:8b:24:5a:99:0a:e4:33:0b:c8:32:65:b7:62:dd:
         ae:bf:8e:7f:26:9c:f9:01:39:ca:ae:4b:7f:dc:a9:5b:13:2f:
         2b:c7:a8:0b:60:41:2d:6a:30:03:b1:90:af:23:31:b2:4e:82:
         4f:bc:d1:f0:e9:32:4d:f7:4f:6b:20:96:1f:9d:e7:68:5a:8a:
         1e:cf:14:88:c0:e9:46:4e:7e:90:ad:06:9b:0d:5c:40:d9:52:
         cb:b3:e7:f5:33:88:a1:65:42:b1:06:a0:86:c0:86:c8:d2:07:
         fb:c5:e6:58:a9:50:3d:7b:11:97:b7:11:f8:f1:51:18:88:73:
         27:30:fd:8a:79:cf:7e:e6:35:f2:0b:ae:48:7c:cf:99:1a:1b:
         ca:9d:fc:e9:57:db:2c:a7:a1:86:cd:b0:97:f8:92:5d:12:bb:
         d0:7f:ec:fb:9f:5a:78:05:92:84:7b:45:3f:59:c0:45:45:13:
         78:84:29:b1:e2:dd:75:69:4e:68:fd:ec:d7:d1:90:9b:b5:d2:
         df:7a:9d:90:6c:35:9d:d9:2c:8b:eb:ca:50:1a:24:17:24:27:
         35:f8:e0:bb:52:28:59:ca:82:4c:8c:18:ee:9b:3c:3d:e4:1c:
         6c:57:f8:4a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM09CRYWwZ97Rjdejk6Kd/22P7ucwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI5MDAwMDAwWhcNMjQxMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZGE1YzgxOTQxMjg5NDgwZGQwMGI1NTY4ZDcwOTZiNWFj
ZmFkNzM2ZGI3YzFmOTVjNzA1YzJkMzRhODhmNWYxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC63SVBKSv/QDlEdcOLwoCQWELkZhj1tNdO8l59VTw72bGd
1zwg++tzsOo6unE2NYn74AlqbnoTr4V0I4oVeQzT4Di5npyLLH4QsfEPRij2/7Ru
KkjyyNeSe0ag/P5B6UkukOwojNU/UzN+1Y3H81kAfV726AN+o/58BKroRgHK0t/N
oC1FyHRD5Nb0cRKSSR5j72vS3pp5HV5Udr06b5sxjGZ/snnYO2jHaW6kVe9Wo1wS
Cd8jxpd/bPyPqOCpxPxKx9PZowKTk9h8OY9g1Xcir0xBc/fiHVnz5wc8IVBx/LsN
s4pXtn94qeVHDyhmwl2Ie2xgOo9by0abmwmLW2zNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7d6izwXwKvDi+sZ0+3WDDGTolEEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2VlZTVlZmE4LTE0YmMtNDVlNC1hZDk2LTY0MmQ0ODM1Njk1MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBASbkrAwDQYJKoZIhvcNAQELBQADggEBAJ17XvncMgnob8UJGdq29wWEg00Y
NsuLJFqZCuQzC8gyZbdi3a6/jn8mnPkBOcquS3/cqVsTLyvHqAtgQS1qMAOxkK8j
MbJOgk+80fDpMk33T2sglh+d52haih7PFIjA6UZOfpCtBpsNXEDZUsuz5/UziKFl
QrEGoIbAhsjSB/vF5lipUD17EZe3EfjxURiIcycw/Yp5z37mNfILrkh8z5kaG8qd
/OlX2yynoYbNsJf4kl0Su9B/7PufWngFkoR7RT9ZwEVFE3iEKbHi3XVpTmj97NfR
kJu10t96nZBsNZ3ZLIvrylAaJBckJzX44LtSKFnKgkyMGO6bPD3kHGxX+Eo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:32 2024 by rpki-client on console-ams.rpki-client.org