Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e45a731-2af6-4d30-981a-3a79edb82e80.roa
File:                     6e45a731-2af6-4d30-981a-3a79edb82e80.roa (raw, json)
Hash identifier:          ghPeyhb0l64/FpPOO8AbDegmc1+Zfh9MrhLe27MyIvI=
Subject key identifier:   A9:DA:E9:C2:50:96:72:0E:80:AA:5F:97:A0:60:CF:CA:B7:47:71:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F4DEC77CB5116DA9A2B6A8E993533ECDCC5C794
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e45a731-2af6-4d30-981a-3a79edb82e80.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        205.187.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4d:ec:77:cb:51:16:da:9a:2b:6a:8e:99:35:33:ec:dc:c5:c7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=54d0b1c1cff0b6cb42105f1fec56a4aec1e0d466a8a145b25513dcfb25b0b75a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4c:25:76:a0:ab:9e:89:ac:e7:1c:e1:de:95:
                    17:a1:aa:e4:f7:d8:ab:dc:eb:7a:c5:2e:f3:b9:2f:
                    93:87:30:d8:27:a5:08:69:65:87:e3:f6:c3:e9:4f:
                    81:e4:c1:1c:38:2f:4b:9a:39:b0:4d:0e:7b:a6:3f:
                    29:38:ea:b6:39:cb:0c:b3:9f:9e:b0:03:75:77:21:
                    e8:a7:bf:6a:a6:ca:dc:ae:4b:d0:53:f9:39:a9:a8:
                    46:2f:37:7e:72:10:62:16:cc:a4:87:7c:96:61:4c:
                    66:55:0e:64:20:60:58:8d:f4:29:5c:d6:16:46:7d:
                    95:e3:43:3e:18:fe:19:0c:58:40:40:f7:7b:b9:c3:
                    4f:4a:52:1f:e4:f0:7e:61:ac:02:a7:14:a8:a6:75:
                    c4:75:6e:2a:3d:3f:14:22:84:95:dc:1c:da:38:17:
                    f5:e7:a0:aa:e9:e2:19:3c:26:97:b5:a3:73:3a:74:
                    41:b3:78:c5:02:43:ba:1e:98:31:3f:d5:e8:77:e0:
                    0d:87:a8:fa:dc:74:9e:c3:83:4e:82:6d:37:32:5c:
                    24:f4:e2:aa:f8:65:1d:1e:01:b3:71:37:2f:62:df:
                    a0:db:0f:18:33:35:ed:3a:aa:8e:8a:49:54:ea:c0:
                    8e:c0:40:fa:55:d7:3b:8c:69:c1:86:9c:eb:a2:63:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DA:E9:C2:50:96:72:0E:80:AA:5F:97:A0:60:CF:CA:B7:47:71:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e45a731-2af6-4d30-981a-3a79edb82e80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.187.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:80:0e:da:08:a5:ba:3c:78:21:17:42:ba:3e:84:9b:da:57:
         8a:5f:da:10:08:d6:42:4d:ba:9b:f4:a3:4d:7c:cc:23:2d:d3:
         f0:8b:ea:a0:08:49:ff:91:4b:cb:42:e8:49:13:3a:ce:45:23:
         b2:0a:64:32:bb:24:d0:7e:2f:7f:7e:b2:72:62:99:1e:e0:4a:
         7c:ec:68:0b:da:44:20:64:9d:27:37:78:b4:9d:89:af:ab:48:
         5d:23:b8:a2:9c:63:15:3a:d8:fd:05:ee:2f:0a:1d:82:b3:42:
         de:88:9b:ba:2a:b2:6f:0a:08:88:4f:c9:f9:d9:93:59:8c:8e:
         14:0f:33:75:92:41:50:9a:eb:00:9b:69:d7:a2:65:a6:e7:b1:
         cf:f3:2f:d1:0d:91:66:14:59:bc:dc:d6:6b:af:4a:53:3f:91:
         26:58:ce:2d:b4:27:26:2d:73:2d:a0:b6:be:ea:40:d7:f2:51:
         84:10:5e:51:bd:3e:93:66:14:4e:db:d2:9b:cb:89:bb:62:64:
         52:8b:d1:4d:f6:8f:47:58:d8:3c:d0:88:68:02:0f:54:57:56:
         70:47:93:1d:f4:aa:3d:f8:77:30:cd:07:89:c9:73:3f:05:f9:
         3a:0e:0b:34:68:fa:0c:c1:92:18:20:00:9b:d8:5b:2e:e4:f2:
         48:3d:48:3f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUb03sd8tRFtqaK2qOmTUz7NzFx5QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE4MDAwMDAwWhcNMjQwNTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NGQwYjFjMWNmZjBiNmNiNDIxMDVmMWZlYzU2YTRhZWMx
ZTBkNDY2YThhMTQ1YjI1NTEzZGNmYjI1YjBiNzVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdTCV2oKueiaznHOHelRehquT32Kvc63rFLvO5L5OHMNgn
pQhpZYfj9sPpT4HkwRw4L0uaObBNDnumPyk46rY5ywyzn56wA3V3Ieinv2qmytyu
S9BT+TmpqEYvN35yEGIWzKSHfJZhTGZVDmQgYFiN9Clc1hZGfZXjQz4Y/hkMWEBA
93u5w09KUh/k8H5hrAKnFKimdcR1bio9PxQihJXcHNo4F/XnoKrp4hk8Jpe1o3M6
dEGzeMUCQ7oemDE/1eh34A2HqPrcdJ7Dg06CbTcyXCT04qr4ZR0eAbNxNy9i36Db
DxgzNe06qo6KSVTqwI7AQPpV1zuMacGGnOuiY20XAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqdrpwlCWcg6Aql+XoGDPyrdHceowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlNDVhNzMxLTJhZjYtNGQzMC05ODFhLTNhNzllZGI4MmU4MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXNuwAwDQYJKoZIhvcNAQELBQADggEBAG+ADtoIpbo8eCEXQro+hJvaV4pf
2hAI1kJNupv0o018zCMt0/CL6qAISf+RS8tC6EkTOs5FI7IKZDK7JNB+L39+snJi
mR7gSnzsaAvaRCBknSc3eLSdia+rSF0juKKcYxU62P0F7i8KHYKzQt6Im7oqsm8K
CIhPyfnZk1mMjhQPM3WSQVCa6wCbadeiZabnsc/zL9ENkWYUWbzc1muvSlM/kSZY
zi20JyYtcy2gtr7qQNfyUYQQXlG9PpNmFE7b0pvLibtiZFKL0U32j0dY2DzQiGgC
D1RXVnBHkx30qj34dzDNB4nJcz8F+ToOCzRo+gzBkhggAJvYWy7k8kg9SD8=
-----END CERTIFICATE-----
Generated at Mon May 6 00:48:47 2024 by rpki-client on console-fra.rpki-client.org