Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2093266e-8e7f-4232-b5d2-9ba136505b87.roa
File:                     2093266e-8e7f-4232-b5d2-9ba136505b87.roa (raw, json)
Hash identifier:          cvac2mj/g4uPoa55yDYcjGciEGOXFRM//haZIzlrjPs=
Subject key identifier:   9B:E6:4C:E7:07:8D:74:3B:81:CD:8C:8E:B7:AD:F1:EE:32:17:45:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0597BCF33BA327491EA2AB5F8536F0A4695D1EC0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2093266e-8e7f-4232-b5d2-9ba136505b87.roa
Signing time:             Tue 21 May 2024 00:00:00 +0000
ROA not before:           Tue 21 May 2024 00:00:00 +0000
ROA not after:            Tue 25 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        13.146.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:97:bc:f3:3b:a3:27:49:1e:a2:ab:5f:85:36:f0:a4:69:5d:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 21 00:00:00 2024 GMT
            Not After : Jun 25 23:59:59 2024 GMT
        Subject: serialNumber=e364a9b39a8e5831f630de5d7fae63f8127022e9d099186bf1ccabc60255b702, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:43:31:ef:14:65:f5:9e:3a:4e:3f:be:ef:c0:
                    ba:ff:93:b0:58:7d:33:a8:a4:ae:a5:85:0d:e1:92:
                    4b:cb:c2:8c:b3:e2:ad:2c:d3:c9:e1:d4:b4:dc:1c:
                    05:10:3f:37:19:e8:64:88:95:5f:d9:36:77:95:e7:
                    4d:c7:6f:8d:85:53:b7:e0:6e:c4:ae:47:90:20:c0:
                    fe:78:e8:2e:a7:53:b6:34:4a:2c:89:0f:ba:1c:5b:
                    74:30:24:a5:6b:6c:03:e0:eb:2d:90:89:32:b4:76:
                    2f:b4:da:c0:92:73:5d:a6:6f:3e:24:ae:72:5f:72:
                    0b:ee:7e:73:72:7a:a5:18:4e:37:15:bc:4d:f0:7c:
                    dc:18:22:c3:b8:2b:31:ed:7c:ab:12:2e:92:89:27:
                    c2:57:c8:5d:df:06:5e:22:ce:25:5b:d7:89:3b:98:
                    59:21:c7:fc:9d:a1:cf:0e:c9:e1:d2:a3:3b:bf:2b:
                    48:22:d3:00:32:b5:8a:14:4b:4b:88:5b:0d:73:c6:
                    89:84:8c:f2:ad:e4:93:fa:0a:53:d6:c0:fc:18:a6:
                    21:5d:36:80:73:9e:d3:ad:0e:b5:76:a1:3c:cf:dd:
                    ad:42:af:4a:72:95:d1:83:e0:e1:83:26:58:85:c4:
                    cb:dc:69:10:ee:67:a5:0d:ce:63:0d:10:4e:41:b2:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E6:4C:E7:07:8D:74:3B:81:CD:8C:8E:B7:AD:F1:EE:32:17:45:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2093266e-8e7f-4232-b5d2-9ba136505b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:8e:32:49:33:16:ee:bf:fe:32:2a:1c:fd:07:c2:28:50:
         f7:b8:71:6c:7a:c6:0e:d7:ed:c2:52:a4:d2:29:5e:69:ac:9c:
         12:60:bf:21:a6:66:09:0a:38:0d:dd:b7:55:49:39:8d:2d:a3:
         d8:9f:bd:02:46:95:00:78:1d:eb:55:f9:dd:5b:19:62:d2:fc:
         99:c8:78:ec:91:f4:89:34:18:ed:8d:70:4a:07:b1:3b:e2:7d:
         ca:db:ce:1f:6c:ef:95:98:40:8c:38:58:5e:51:f0:48:af:c5:
         91:1f:ba:52:34:ad:0c:c4:e4:b3:30:99:e5:20:48:8a:3e:0b:
         af:fd:fb:06:ad:18:2f:65:19:51:de:12:da:2b:01:58:7e:ca:
         f9:f1:01:cc:94:e2:b6:ed:4f:df:a0:cd:e8:8a:d4:9e:7d:d4:
         d8:ab:f0:13:4f:ac:3e:89:4e:9b:a4:87:94:d6:a4:e7:e1:82:
         50:84:6b:ad:b6:95:3e:b3:2c:2a:e1:6f:a8:e4:30:cd:1c:bc:
         88:47:49:5a:9b:9b:6f:c2:3e:13:80:95:8b:b6:17:52:c5:95:
         ac:ad:3e:48:74:08:f2:f3:ce:a1:ea:27:9c:96:c0:26:d1:3b:
         2f:02:62:c3:46:a2:c0:92:ed:9d:e0:43:f1:d2:b4:11:a3:70:
         2e:5e:4d:80
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBZe88zujJ0keoqtfhTbwpGldHsAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTIxMDAwMDAwWhcNMjQwNjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMzY0YTliMzlhOGU1ODMxZjYzMGRlNWQ3ZmFlNjNmODEy
NzAyMmU5ZDA5OTE4NmJmMWNjYWJjNjAyNTViNzAyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrQzHvFGX1njpOP77vwLr/k7BYfTOopK6lhQ3hkkvLwoyz
4q0s08nh1LTcHAUQPzcZ6GSIlV/ZNneV503Hb42FU7fgbsSuR5AgwP546C6nU7Y0
SiyJD7ocW3QwJKVrbAPg6y2QiTK0di+02sCSc12mbz4krnJfcgvufnNyeqUYTjcV
vE3wfNwYIsO4KzHtfKsSLpKJJ8JXyF3fBl4iziVb14k7mFkhx/ydoc8OyeHSozu/
K0gi0wAytYoUS0uIWw1zxomEjPKt5JP6ClPWwPwYpiFdNoBzntOtDrV2oTzP3a1C
r0pyldGD4OGDJliFxMvcaRDuZ6UNzmMNEE5BspPBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUm+ZM5weNdDuBzYyOt63x7jIXRdUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIwOTMyNjZlLThlN2YtNDIzMi1iNWQyLTliYTEzNjUwNWI4Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwANkjANBgkqhkiG9w0BAQsFAAOCAQEAoVmOMkkzFu6//jIqHP0HwihQ97hx
bHrGDtftwlKk0ileaaycEmC/IaZmCQo4Dd23VUk5jS2j2J+9AkaVAHgd61X53VsZ
YtL8mch47JH0iTQY7Y1wSgexO+J9ytvOH2zvlZhAjDhYXlHwSK/FkR+6UjStDMTk
szCZ5SBIij4Lr/37Bq0YL2UZUd4S2isBWH7K+fEBzJTitu1P36DN6IrUnn3U2Kvw
E0+sPolOm6SHlNak5+GCUIRrrbaVPrMsKuFvqOQwzRy8iEdJWpubb8I+E4CVi7YX
UsWVrK0+SHQI8vPOoeonnJbAJtE7LwJiw0aiwJLtneBD8dK0EaNwLl5NgA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:08 2024 by rpki-client on console-ams.rpki-client.org