Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52533cf4-1e0a-4411-9684-8c536f551383.roa
File:                     52533cf4-1e0a-4411-9684-8c536f551383.roa (raw, json)
Hash identifier:          tD+WfMdMmFf2KLfAzeCBxryYT0NM1t4uhcWr+Dg4Lts=
Subject key identifier:   91:EA:8A:E6:6A:91:BA:74:B2:86:8B:08:64:51:F9:DC:EE:5E:AE:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       613E744D7464DE62DA049DC773013D40CDF79830
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52533cf4-1e0a-4411-9684-8c536f551383.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        96.45.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3e:74:4d:74:64:de:62:da:04:9d:c7:73:01:3d:40:cd:f7:98:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=a312a3d6b587f9328d3c0921802fa8dbd380f2269bf44efa45dbcf21f6fb0a62, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:86:81:47:48:15:69:dc:5e:8f:af:95:6b:
                    47:9c:59:7a:55:c4:60:a9:d6:ec:49:8e:6e:d7:6f:
                    94:80:24:64:22:fb:7d:e8:1b:63:b1:7f:9f:b4:7d:
                    0a:86:f9:a5:35:2e:04:5c:dd:69:ba:20:a3:b4:7e:
                    5d:ee:58:ff:37:51:61:74:ae:7e:2d:33:6f:af:e6:
                    d8:ba:ed:9c:09:3e:0f:43:96:e8:cc:84:ac:c0:6c:
                    79:58:4f:07:9f:88:87:f6:21:4a:ef:ef:58:43:95:
                    c1:c3:05:23:67:a4:cc:98:d2:d1:36:00:eb:8a:53:
                    05:b9:5a:74:3f:77:26:cd:bc:ee:41:cc:d6:84:b0:
                    e4:42:e8:c8:19:d6:9b:04:35:00:7d:9e:92:76:dd:
                    f3:ec:06:2c:7c:97:29:df:ca:5d:cb:69:61:4d:80:
                    6d:56:89:4a:9d:35:17:30:42:8a:b6:30:a3:c0:e5:
                    ff:31:2d:fe:44:4e:d2:99:70:59:e5:f1:d8:63:c4:
                    92:ca:91:64:84:89:da:e4:f9:40:43:59:43:c9:d8:
                    13:21:1e:6e:c0:d4:97:3f:5d:ea:78:dc:2f:f6:d3:
                    69:26:1d:92:e9:9b:3d:e1:da:15:19:0b:3f:05:ae:
                    91:82:d5:ac:f3:ab:79:ac:75:33:02:ce:4a:91:fe:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EA:8A:E6:6A:91:BA:74:B2:86:8B:08:64:51:F9:DC:EE:5E:AE:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52533cf4-1e0a-4411-9684-8c536f551383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:9b:5f:9a:8e:e4:9b:87:b4:35:e6:30:f7:04:f1:a0:72:
         83:a6:5e:c8:07:df:54:34:1a:a0:73:16:78:ac:b4:51:8b:57:
         35:37:f3:fc:89:c2:09:4e:82:08:5c:8d:dd:50:e9:07:af:db:
         d4:73:8a:74:bd:c8:74:2d:ea:da:45:71:8c:81:15:d0:5b:31:
         8b:23:23:f6:d8:f6:c4:48:bc:c2:32:4f:0f:c5:74:e3:68:71:
         9e:6f:22:70:f9:eb:6b:c7:c5:ce:33:9b:bc:dd:f0:cd:52:73:
         dc:78:eb:d1:8c:22:28:0f:6f:f7:fa:30:0d:ec:e3:a7:d0:f1:
         67:94:ff:19:0c:e9:96:71:92:19:48:4b:ed:c7:eb:e1:c1:29:
         c0:b1:a5:89:d6:dc:1d:af:7c:fd:3b:1c:3b:86:bc:70:ba:17:
         e0:5e:ea:c8:05:46:b4:9e:dd:3d:00:2d:48:1d:8a:a7:22:cc:
         f3:dd:77:2c:c5:36:c6:f1:53:a8:53:ec:d4:86:81:40:5f:5f:
         e5:da:17:5b:dc:97:ef:7a:a0:06:ff:17:6f:8d:ec:00:9e:96:
         e2:0c:0f:95:b2:03:1d:90:1b:23:9b:39:00:ef:73:eb:32:52:
         c6:3b:01:5c:1c:51:c2:75:06:d5:50:e9:43:6b:fc:f1:22:d1:
         38:b3:95:db
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYT50TXRk3mLaBJ3HcwE9QM33mDAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNjA0MDAwMDAwWhcNMjQwNzA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMzEyYTNkNmI1ODdmOTMyOGQzYzA5MjE4MDJmYThkYmQz
ODBmMjI2OWJmNDRlZmE0NWRiY2YyMWY2ZmIwYTYyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1JYaBR0gVadxej6+Va0ecWXpVxGCp1uxJjm7Xb5SAJGQi
+33oG2Oxf5+0fQqG+aU1LgRc3Wm6IKO0fl3uWP83UWF0rn4tM2+v5ti67ZwJPg9D
lujMhKzAbHlYTwefiIf2IUrv71hDlcHDBSNnpMyY0tE2AOuKUwW5WnQ/dybNvO5B
zNaEsORC6MgZ1psENQB9npJ23fPsBix8lynfyl3LaWFNgG1WiUqdNRcwQoq2MKPA
5f8xLf5ETtKZcFnl8dhjxJLKkWSEidrk+UBDWUPJ2BMhHm7A1Jc/Xep43C/202km
HZLpmz3h2hUZCz8FrpGC1azzq3msdTMCzkqR/r83AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkeqK5mqRunSyhosIZFH53O5erp8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUyNTMzY2Y0LTFlMGEtNDQxMS05Njg0LThjNTM2ZjU1MTM4My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARgLaAwDQYJKoZIhvcNAQELBQADggEBABarm1+ajuSbh7Q15jD3BPGgcoOm
XsgH31Q0GqBzFnistFGLVzU38/yJwglOgghcjd1Q6Qev29RzinS9yHQt6tpFcYyB
FdBbMYsjI/bY9sRIvMIyTw/FdONocZ5vInD562vHxc4zm7zd8M1Sc9x469GMIigP
b/f6MA3s46fQ8WeU/xkM6ZZxkhlIS+3H6+HBKcCxpYnW3B2vfP07HDuGvHC6F+Be
6sgFRrSe3T0ALUgdiqcizPPddyzFNsbxU6hT7NSGgUBfX+XaF1vcl+96oAb/F2+N
7ACeluIMD5WyAx2QGyObOQDvc+syUsY7AVwcUcJ1BtVQ6UNr/PEi0Tizlds=
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:12 2024 by rpki-client on console-fra.rpki-client.org