Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa
File:                     3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa (raw, json)
Hash identifier:          OjsJhzReR5QVATqc/1T75/1F4822SIewocFJDwi4OFw=
Subject key identifier:   5E:F7:33:83:4A:BD:40:9F:4D:8D:BC:0D:53:AC:7A:7E:92:79:C6:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       172DE07BC4563A30B05986AD080ABC3864067437
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.248.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2d:e0:7b:c4:56:3a:30:b0:59:86:ad:08:0a:bc:38:64:06:74:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=6c465f8ece3b4d653b36d84c704491a8a1dc9e5bd7d53af73b9317d6850bfd5a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:ca:5e:23:b5:a8:00:41:82:74:ec:c1:91:
                    a3:bc:50:c4:f3:64:bf:ab:8d:aa:3e:8d:8a:f1:57:
                    c9:79:07:75:d0:ed:3f:e1:13:96:55:de:73:b6:f2:
                    be:98:12:54:83:9e:93:dd:05:a3:a6:c9:b7:7a:b0:
                    3c:64:32:b6:df:30:2e:f4:a7:b5:58:95:c7:64:0e:
                    87:5e:c8:6d:aa:bf:ca:f7:be:90:7b:c2:a7:a5:4e:
                    b9:fc:36:90:84:e6:47:e7:d2:2a:94:c9:ab:80:e6:
                    f3:34:c0:e6:c3:bd:bf:ab:05:4f:3d:3f:4a:cc:1d:
                    08:fa:fe:0c:54:a4:a0:03:39:78:b1:07:39:d3:60:
                    97:a3:03:5d:6e:01:03:e5:d6:ee:c2:a8:a3:65:1d:
                    fe:97:00:15:8c:b0:09:0d:e7:64:4f:7f:d3:f6:3f:
                    32:54:ec:a2:15:cf:c9:04:80:e3:1f:e1:e6:2d:16:
                    e5:dc:db:f8:1a:95:ca:49:66:91:4d:3a:64:ca:17:
                    64:21:ad:c5:fa:c3:ee:72:81:9e:67:a4:76:36:c4:
                    74:41:5c:15:3e:98:da:ce:b1:49:2d:76:ec:21:63:
                    69:b3:69:2d:cd:db:f9:eb:69:7d:5d:aa:f4:fd:dc:
                    61:18:2e:9b:4f:e9:77:12:f0:24:20:1c:ed:8f:a0:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:33:83:4A:BD:40:9F:4D:8D:BC:0D:53:AC:7A:7E:92:79:C6:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c7:cf:8c:a3:7c:7d:1f:94:3e:70:a7:91:93:38:d5:1a:76:d7:
         74:b5:89:b7:50:4a:66:fa:07:0b:f4:94:c4:c7:04:83:6a:2c:
         35:67:b7:26:9e:34:7e:2f:56:df:37:4e:26:f9:1e:26:33:55:
         bb:c6:cb:b7:42:e8:66:d1:58:d8:7b:3b:48:c4:45:9d:99:b6:
         e6:8b:8f:c1:c3:5a:24:24:77:5f:8c:44:a0:13:83:ce:2c:f8:
         09:3c:a7:17:a9:c0:c2:3a:95:38:09:cd:95:44:df:a7:46:0e:
         94:5d:c5:30:8a:9e:ef:0f:55:d1:48:b7:8e:dd:b0:89:6f:8a:
         c3:c7:b8:a9:4c:d4:9a:96:a8:c4:9e:7c:21:4e:78:54:38:0f:
         1b:e7:a6:67:09:b7:fc:d5:43:41:63:43:66:f6:ba:95:68:1d:
         06:e9:dd:f8:7b:31:7a:ce:34:7c:9f:47:4c:44:b9:6d:d3:18:
         c4:a5:2f:ca:fb:f4:78:7f:a1:ed:a6:38:32:c4:97:06:50:12:
         d8:29:48:d8:00:16:ff:7f:34:93:94:d8:95:62:b1:8e:aa:d6:
         3e:6a:cb:8c:7b:b9:ac:10:8c:b2:94:85:4b:c2:12:f3:d2:0e:
         22:5d:e5:8e:a6:2a:11:ea:9b:07:da:71:ad:af:bb:c3:cd:2e:
         e5:a3:96:b9
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUFy3ge8RWOjCwWYatCAq8OGQGdDcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTI4MDAwMDAwWhcNMjQwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YzQ2NWY4ZWNlM2I0ZDY1M2IzNmQ4NGM3MDQ0OTFhOGEx
ZGM5ZTViZDdkNTNhZjczYjkzMTdkNjg1MGJmZDVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDK4MpeI7WoAEGCdOzBkaO8UMTzZL+rjao+jYrxV8l5B3XQ
7T/hE5ZV3nO28r6YElSDnpPdBaOmybd6sDxkMrbfMC70p7VYlcdkDodeyG2qv8r3
vpB7wqelTrn8NpCE5kfn0iqUyauA5vM0wObDvb+rBU89P0rMHQj6/gxUpKADOXix
BznTYJejA11uAQPl1u7CqKNlHf6XABWMsAkN52RPf9P2PzJU7KIVz8kEgOMf4eYt
FuXc2/galcpJZpFNOmTKF2QhrcX6w+5ygZ5npHY2xHRBXBU+mNrOsUktduwhY2mz
aS3N2/nraX1dqvT93GEYLptP6XcS8CQgHO2PoEYnAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUXvczg0q9QJ9NjbwNU6x6fpJ5xkowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNmNmJlOWZmLWVjMjUtNDJmMC1hNmQzLTUyY2NhMGZmOGY1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4+DANBgkqhkiG9w0BAQsFAAOCAQEAx8+Mo3x9H5Q+cKeRkzjVGnbXdLWJ
t1BKZvoHC/SUxMcEg2osNWe3Jp40fi9W3zdOJvkeJjNVu8bLt0LoZtFY2Hs7SMRF
nZm25ouPwcNaJCR3X4xEoBODziz4CTynF6nAwjqVOAnNlUTfp0YOlF3FMIqe7w9V
0Ui3jt2wiW+Kw8e4qUzUmpaoxJ58IU54VDgPG+emZwm3/NVDQWNDZva6lWgdBund
+Hsxes40fJ9HTES5bdMYxKUvyvv0eH+h7aY4MsSXBlAS2ClI2AAW/380k5TYlWKx
jqrWPmrLjHu5rBCMspSFS8IS89IOIl3ljqYqEeqbB9pxra+7w80u5aOWuQ==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:14 2024 by rpki-client on console-ams.rpki-client.org