Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16a57556-c2f4-44c4-90e7-315ebb51564d.roa
File:                     16a57556-c2f4-44c4-90e7-315ebb51564d.roa (raw, json)
Hash identifier:          2Ya6i4cF7xCLZie4706ONn4RSFHi4fYJuQjRfqhkHsk=
Subject key identifier:   B3:1A:78:5F:C4:46:64:A6:C4:27:20:35:EE:7B:15:90:CA:94:D6:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D61BC01256F2A244FFD495C046BA2DA3A985526
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16a57556-c2f4-44c4-90e7-315ebb51564d.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        32.247.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:61:bc:01:25:6f:2a:24:4f:fd:49:5c:04:6b:a2:da:3a:98:55:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=e9dc8fa08532ce9776fb6170ad301d495ca3c2a67637e32fce58956f7e409a9c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3e:7f:9c:96:a6:89:00:18:21:59:05:01:1c:
                    9d:19:97:16:1e:7d:75:9a:e2:d9:39:85:c6:6e:1e:
                    77:b0:0d:44:a7:a2:7d:25:e2:8f:a7:ce:3e:23:02:
                    1e:55:ca:a5:9e:d1:d8:91:e1:60:e3:51:55:6d:ab:
                    be:5b:a7:f6:a1:4e:65:b9:96:23:fd:ac:5e:41:b3:
                    b6:a3:d1:21:23:3d:07:20:d4:4f:de:4d:e4:23:d8:
                    9a:64:dc:45:cb:ab:af:73:cc:76:3a:61:10:db:95:
                    6a:c3:91:43:e0:db:e0:66:4e:55:4b:d6:3b:a6:fe:
                    c5:4b:d7:70:71:3d:32:4e:54:11:8e:68:d7:36:ce:
                    2a:68:0a:c4:6a:5d:8f:5b:d3:53:99:9e:4d:89:e9:
                    e1:fb:03:db:03:21:e1:b9:63:95:b8:7f:44:92:75:
                    35:64:76:9c:15:08:6b:6f:13:63:bf:d9:41:40:fd:
                    a0:a1:82:00:03:38:bf:cc:e8:1a:47:07:53:2c:9f:
                    6d:d9:c3:fa:f5:c2:cf:a4:1e:10:94:b7:37:cd:2e:
                    5b:00:b1:dc:ec:cf:5c:0c:28:c9:9b:c5:3f:e9:9c:
                    da:18:13:cb:de:8f:44:9f:1e:6c:be:30:ad:00:fc:
                    1c:a2:a0:8d:c9:99:e5:64:0d:32:7a:dd:87:c4:90:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1A:78:5F:C4:46:64:A6:C4:27:20:35:EE:7B:15:90:CA:94:D6:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16a57556-c2f4-44c4-90e7-315ebb51564d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:23:83:48:3a:fd:f5:8e:d6:24:b0:83:a3:b5:2c:bc:67:e5:
         28:4a:3d:30:1b:80:8a:f3:14:90:8f:cc:fe:61:47:8a:e1:97:
         2f:a2:d5:49:fe:e2:fa:dd:b6:6f:0a:e2:e2:21:4e:5f:8b:07:
         3d:ea:5e:8a:9c:df:08:ba:73:60:c0:48:14:14:7a:10:e9:f0:
         f3:34:b5:c3:3c:6a:fb:40:64:54:11:5c:d5:4b:21:a0:fe:82:
         fc:df:32:31:fb:5c:fc:87:59:8c:df:be:c4:2c:01:6e:2e:f6:
         75:6b:46:73:0d:08:bc:7d:b1:d3:50:f3:4c:00:1e:ff:01:56:
         2f:da:f6:45:08:c1:37:86:24:92:44:06:26:07:a7:9a:aa:dc:
         c0:94:cd:c7:ba:fe:9b:62:e0:d3:ff:fb:e6:45:09:f8:21:6d:
         d7:09:8e:fa:40:31:c2:7f:91:67:25:0b:66:09:5c:f4:e3:45:
         19:42:2c:ab:9a:cf:ba:24:db:53:d2:90:73:f0:f4:81:19:27:
         52:50:b9:65:5a:18:11:f9:0b:df:a0:c9:ff:fe:05:bd:ea:94:
         05:44:45:32:96:69:2a:c3:1a:6f:50:35:e9:00:01:1b:0c:46:
         05:26:a3:91:df:b3:3a:f9:43:72:4d:3b:82:91:e9:66:ad:ab:
         71:8e:c6:9c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULWG8ASVvKiRP/UlcBGui2jqYVSYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOWRjOGZhMDg1MzJjZTk3NzZmYjYxNzBhZDMwMWQ0OTVj
YTNjMmE2NzYzN2UzMmZjZTU4OTU2ZjdlNDA5YTljMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCXPn+clqaJABghWQUBHJ0ZlxYefXWa4tk5hcZuHnewDUSn
on0l4o+nzj4jAh5VyqWe0diR4WDjUVVtq75bp/ahTmW5liP9rF5Bs7aj0SEjPQcg
1E/eTeQj2Jpk3EXLq69zzHY6YRDblWrDkUPg2+BmTlVL1jum/sVL13BxPTJOVBGO
aNc2zipoCsRqXY9b01OZnk2J6eH7A9sDIeG5Y5W4f0SSdTVkdpwVCGtvE2O/2UFA
/aChggADOL/M6BpHB1Msn23Zw/r1ws+kHhCUtzfNLlsAsdzsz1wMKMmbxT/pnNoY
E8vej0SfHmy+MK0A/ByioI3JmeVkDTJ63YfEkMyVAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUsxp4X8RGZKbEJyA17nsVkMqU1uIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE2YTU3NTU2LWMyZjQtNDRjNC05MGU3LTMxNWViYjUxNTY0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAg9zANBgkqhkiG9w0BAQsFAAOCAQEACyODSDr99Y7WJLCDo7UsvGflKEo9
MBuAivMUkI/M/mFHiuGXL6LVSf7i+t22bwri4iFOX4sHPepeipzfCLpzYMBIFBR6
EOnw8zS1wzxq+0BkVBFc1UshoP6C/N8yMftc/IdZjN++xCwBbi72dWtGcw0IvH2x
01DzTAAe/wFWL9r2RQjBN4YkkkQGJgenmqrcwJTNx7r+m2Lg0//75kUJ+CFt1wmO
+kAxwn+RZyULZglc9ONFGUIsq5rPuiTbU9KQc/D0gRknUlC5ZVoYEfkL36DJ//4F
veqUBURFMpZpKsMab1A16QABGwxGBSajkd+zOvlDck07gpHpZq2rcY7GnA==
-----END CERTIFICATE-----
Generated at Sun May 5 01:12:02 2024 by rpki-client on console-ams.rpki-client.org