Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16ac9fd2-2019-4d5f-a2a8-abe2dc46356f.roa
File:                     16ac9fd2-2019-4d5f-a2a8-abe2dc46356f.roa (raw, json)
Hash identifier:          nTuH6UB2sv3raWDlh7foQf+cFJ1VCwPAFgBvfZbeS0M=
Subject key identifier:   66:48:7D:70:A9:C9:82:95:78:D1:4C:D8:04:A2:D8:2C:B5:4D:17:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       180B0947EA15629A29E080320142C0E67EEB874C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16ac9fd2-2019-4d5f-a2a8-abe2dc46356f.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        216.171.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0b:09:47:ea:15:62:9a:29:e0:80:32:01:42:c0:e6:7e:eb:87:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=bc68ce5ec9e99d399c7f79d4d459aa44446cc4c24ccab466adba9afa2fc7cba3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:78:50:76:34:e7:89:12:78:16:15:04:42:
                    37:66:65:5a:1b:94:7c:61:ff:26:65:60:ee:b9:53:
                    cf:c4:db:a0:06:09:91:ea:f7:1f:04:67:0a:b5:69:
                    90:5f:de:a3:b8:51:69:6b:a4:fe:3f:6c:7a:9e:9b:
                    e0:97:ae:17:96:18:93:39:41:39:f2:ae:0d:5c:e0:
                    11:e2:87:c6:08:63:e9:3f:1c:a4:1d:47:d4:38:35:
                    f1:8d:ff:bd:7f:33:4a:a7:09:4d:e9:96:30:63:af:
                    58:41:55:73:aa:aa:04:cc:1c:ce:bc:bf:50:ea:50:
                    42:21:84:02:0b:ae:c2:d2:c3:49:88:59:ea:3a:1c:
                    98:24:68:71:5d:fc:bc:7b:32:6a:49:37:cb:cb:c6:
                    e7:98:6b:71:b4:51:c0:01:c9:d4:5f:d0:bf:31:aa:
                    5e:bb:df:d5:81:10:b5:1a:d4:05:93:62:dc:fb:9b:
                    07:f2:7a:1f:09:d7:97:cb:e1:53:1d:c8:22:45:ec:
                    7b:b0:96:33:72:98:42:39:cc:fe:24:8b:56:b4:b1:
                    ce:6a:dd:e0:05:0a:1f:86:98:df:98:20:9a:3a:0f:
                    cb:12:fe:aa:fc:e7:e8:d5:2b:8d:af:d3:1c:ba:83:
                    69:ed:31:8a:02:ae:1b:87:0e:b6:57:bd:54:0c:3f:
                    c5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:48:7D:70:A9:C9:82:95:78:D1:4C:D8:04:A2:D8:2C:B5:4D:17:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16ac9fd2-2019-4d5f-a2a8-abe2dc46356f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:69:be:b8:56:54:90:21:09:ff:9a:99:15:70:33:09:b8:
         52:9d:78:67:1a:87:b9:4a:c6:e8:48:ad:46:a8:5b:67:58:2f:
         82:77:82:f2:5a:a2:18:7e:83:27:f2:61:cf:d4:1b:00:b9:94:
         4d:c0:a4:31:13:f4:00:11:b6:3f:e7:1e:80:a7:21:ce:b0:a8:
         bc:73:d4:29:27:61:e0:61:b7:73:78:d1:76:55:92:a7:cc:54:
         83:e6:02:f9:09:1d:6d:4c:76:74:4d:c1:b7:e5:9d:de:29:0a:
         83:c9:af:8c:a3:f6:91:59:65:ef:62:6e:29:90:03:bd:b3:29:
         27:1e:98:8b:84:23:f0:3a:7a:db:61:6e:33:a9:ca:01:3d:d8:
         c1:18:ec:ef:d5:b8:40:b0:82:54:2c:83:0a:a0:58:2a:a7:58:
         cc:28:60:a9:90:fc:1e:28:2b:47:5b:15:3e:b5:e9:05:79:2c:
         62:0e:0a:e7:e8:6e:72:f6:21:82:83:d8:a6:92:83:9b:1a:67:
         60:80:ac:d5:1c:f4:6f:3a:64:25:9d:1f:dd:24:57:6e:3c:3c:
         f0:68:0e:25:8d:f6:2c:50:f4:25:29:ad:bd:1e:03:d3:b8:96:
         07:05:55:e3:ca:a9:b5:10:38:df:40:d3:ab:1c:10:d0:49:52:
         58:54:cf:51
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGAsJR+oVYpop4IAyAULA5n7rh0wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE4MDAwMDAwWhcNMjQwNTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYzY4Y2U1ZWM5ZTk5ZDM5OWM3Zjc5ZDRkNDU5YWE0NDQ0
NmNjNGMyNGNjYWI0NjZhZGJhOWFmYTJmYzdjYmEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDI/nhQdjTniRJ4FhUEQjdmZVoblHxh/yZlYO65U8/E26AG
CZHq9x8EZwq1aZBf3qO4UWlrpP4/bHqem+CXrheWGJM5QTnyrg1c4BHih8YIY+k/
HKQdR9Q4NfGN/71/M0qnCU3pljBjr1hBVXOqqgTMHM68v1DqUEIhhAILrsLSw0mI
Weo6HJgkaHFd/Lx7MmpJN8vLxueYa3G0UcABydRf0L8xql6739WBELUa1AWTYtz7
mwfyeh8J15fL4VMdyCJF7HuwljNymEI5zP4ki1a0sc5q3eAFCh+GmN+YIJo6D8sS
/qr85+jVK42v0xy6g2ntMYoCrhuHDrZXvVQMP8VTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZkh9cKnJgpV40UzYBKLYLLVNF8kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE2YWM5ZmQyLTIwMTktNGQ1Zi1hMmE4LWFiZTJkYzQ2MzU2Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXYq4AwDQYJKoZIhvcNAQELBQADggEBAAT7ab64VlSQIQn/mpkVcDMJuFKd
eGcah7lKxuhIrUaoW2dYL4J3gvJaohh+gyfyYc/UGwC5lE3ApDET9AARtj/nHoCn
Ic6wqLxz1CknYeBht3N40XZVkqfMVIPmAvkJHW1MdnRNwbflnd4pCoPJr4yj9pFZ
Ze9ibimQA72zKScemIuEI/A6etthbjOpygE92MEY7O/VuECwglQsgwqgWCqnWMwo
YKmQ/B4oK0dbFT616QV5LGIOCufobnL2IYKD2KaSg5saZ2CArNUc9G86ZCWdH90k
V248PPBoDiWN9ixQ9CUprb0eA9O4lgcFVePKqbUQON9A06scENBJUlhUz1E=
-----END CERTIFICATE-----
Generated at Mon May 6 00:48:38 2024 by rpki-client on console-fra.rpki-client.org