Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4683cb-59bb-4151-9a91-41c21e883719.roa
File:                     6a4683cb-59bb-4151-9a91-41c21e883719.roa (raw, json)
Hash identifier:          9yUDTjYqrsO216lMiedg8DzbC7WbE8c6YDUA6zxlKaw=
Subject key identifier:   1A:FC:93:F7:60:B7:66:0F:B6:03:24:5B:F4:03:7E:12:26:2D:4F:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B6183C82B5E269767F4624227753829429AEABB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4683cb-59bb-4151-9a91-41c21e883719.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.152.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:61:83:c8:2b:5e:26:97:67:f4:62:42:27:75:38:29:42:9a:ea:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=764cab349ae1733a9bfa814bd6df2729c64ba3ca51a7f4c05a20c2a44172aed9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:79:e7:36:d9:4d:a1:be:73:9b:19:88:c6:
                    76:8d:eb:88:2a:8c:09:c0:b3:e4:85:91:57:31:e1:
                    70:a1:df:96:83:23:8a:35:c1:3c:ff:23:4c:66:41:
                    ab:4f:00:90:a5:c4:3a:2d:83:6b:f1:91:9d:38:d7:
                    e7:fc:59:e2:fa:b7:16:05:99:d4:6e:99:2b:a6:20:
                    85:5b:5f:38:f9:55:84:db:6f:12:5f:aa:ae:5a:04:
                    7b:04:a5:bd:c5:cd:b0:9c:13:98:fb:44:cf:6f:5c:
                    c0:6f:40:75:8a:f9:1a:8e:69:e3:b8:8c:67:81:8e:
                    f5:a1:55:98:74:25:c1:8b:5b:f4:09:00:3d:e0:26:
                    04:49:b9:d3:a4:4b:80:95:24:ba:fe:c7:34:fa:eb:
                    82:9c:40:0b:fc:8c:7f:3e:33:13:bd:7a:4c:db:8f:
                    7b:fa:17:15:c7:52:4a:af:9b:f3:dc:71:22:1c:a3:
                    9f:e4:94:a4:ab:f3:37:d5:82:7c:b2:1c:c4:cf:be:
                    bb:00:8b:d2:6d:51:c2:33:db:35:b1:9d:f5:0a:00:
                    67:2d:98:2b:08:61:13:76:c3:de:a2:88:2b:6e:a6:
                    bc:75:c5:a4:3d:49:a1:66:6f:5d:3f:30:31:51:73:
                    84:0f:54:e7:d8:e6:ab:16:98:4d:04:f9:17:72:c5:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FC:93:F7:60:B7:66:0F:B6:03:24:5B:F4:03:7E:12:26:2D:4F:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4683cb-59bb-4151-9a91-41c21e883719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.152.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:e6:53:0c:68:15:f1:41:f1:d3:05:8f:75:40:5d:75:07:2c:
         d1:f7:83:69:94:17:80:b2:c9:ea:a8:61:8c:43:80:0a:b2:da:
         69:b8:be:29:b8:9f:c7:62:be:21:75:f9:71:91:14:91:2d:39:
         7a:f5:78:d5:46:fd:c2:19:32:0b:8d:a4:6a:8d:24:72:9a:32:
         79:e7:7d:23:c3:f8:15:24:4c:27:88:8f:fe:ec:c1:20:9a:94:
         32:39:dc:57:07:70:d3:87:07:9f:b0:42:d4:27:a3:38:ed:9a:
         c1:6d:41:91:bd:ee:82:f3:11:76:23:ca:64:d5:50:26:63:0f:
         63:1e:b5:46:68:10:1f:41:f1:39:1a:da:79:70:96:01:3f:c3:
         a2:d9:8c:1c:7b:49:28:05:4f:b0:ec:17:26:a4:9b:19:6d:81:
         45:16:38:ec:32:cb:37:0c:74:4e:b4:34:19:03:12:b0:73:bc:
         36:03:bd:97:6f:47:39:45:e3:56:6f:ff:c4:b3:95:00:9c:b3:
         ad:d6:ed:a6:f0:9d:96:77:d9:dd:1a:e3:58:b4:90:8c:a2:c0:
         48:82:48:13:fc:57:bd:01:87:e5:24:b9:75:74:cc:6d:39:84:
         4f:ba:0d:cf:48:33:b2:63:54:43:19:70:56:bb:0d:4c:08:40:
         3e:0a:dc:de
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUO2GDyCteJpdn9GJCJ3U4KUKa6rswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NjRjYWIzNDlhZTE3MzNhOWJmYTgxNGJkNmRmMjcyOWM2
NGJhM2NhNTFhN2Y0YzA1YTIwYzJhNDQxNzJhZWQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCn7XnnNtlNob5zmxmIxnaN64gqjAnAs+SFkVcx4XCh35aD
I4o1wTz/I0xmQatPAJClxDotg2vxkZ041+f8WeL6txYFmdRumSumIIVbXzj5VYTb
bxJfqq5aBHsEpb3FzbCcE5j7RM9vXMBvQHWK+RqOaeO4jGeBjvWhVZh0JcGLW/QJ
AD3gJgRJudOkS4CVJLr+xzT664KcQAv8jH8+MxO9ekzbj3v6FxXHUkqvm/PccSIc
o5/klKSr8zfVgnyyHMTPvrsAi9JtUcIz2zWxnfUKAGctmCsIYRN2w96iiCtuprx1
xaQ9SaFmb10/MDFRc4QPVOfY5qsWmE0E+RdyxRG1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUGvyT92C3Zg+2AyRb9AN+EiYtT7kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZhNDY4M2NiLTU5YmItNDE1MS05YTkxLTQxYzIxZTg4MzcxOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQmDANBgkqhkiG9w0BAQsFAAOCAQEAiuZTDGgV8UHx0wWPdUBddQcs0feD
aZQXgLLJ6qhhjEOACrLaabi+Kbifx2K+IXX5cZEUkS05evV41Ub9whkyC42kao0k
cpoyeed9I8P4FSRMJ4iP/uzBIJqUMjncVwdw04cHn7BC1CejOO2awW1Bkb3ugvMR
diPKZNVQJmMPYx61RmgQH0HxORraeXCWAT/DotmMHHtJKAVPsOwXJqSbGW2BRRY4
7DLLNwx0TrQ0GQMSsHO8NgO9l29HOUXjVm//xLOVAJyzrdbtpvCdlnfZ3RrjWLSQ
jKLASIJIE/xXvQGH5SS5dXTMbTmET7oNz0gzsmNUQxlwVrsNTAhAPgrc3g==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:23 2024 by rpki-client on console-ams.rpki-client.org