Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa
File:                     721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa (raw, json)
Hash identifier:          /DtGh6dIUC8RNTJWjTX7K6PloFCTYl2HjzTBzRF6KAE=
Subject key identifier:   6B:20:E8:A2:F2:B8:A1:FF:33:1C:E9:93:81:1C:A3:8F:56:A6:BD:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D073D273F23402F64DDF655378412999A2769C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        107.176.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:07:3d:27:3f:23:40:2f:64:dd:f6:55:37:84:12:99:9a:27:69:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=406999b266a82533f6f067361e27ecb7a77aa83a8cbb72e30cec3822fc6de854, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:62:24:5b:61:d2:69:54:ba:fb:36:f4:ea:
                    5f:f5:f8:79:11:4c:4d:c5:b3:5f:a2:65:c3:ee:10:
                    5d:9f:81:2e:87:d5:e4:59:ae:a8:c7:b4:5d:63:59:
                    2b:72:1e:2b:f1:5e:0d:1f:90:bc:00:9c:08:67:8f:
                    27:0f:87:92:7a:00:2f:56:2a:33:f4:aa:39:62:bf:
                    c4:09:0f:62:bf:22:41:df:82:51:17:a6:a1:09:c1:
                    dd:7d:15:35:48:cc:77:e2:e0:e5:cd:ec:55:c3:88:
                    b6:40:9a:88:8c:16:0c:c6:45:d0:47:7a:7d:37:34:
                    90:18:5f:0d:e5:19:c4:32:4a:38:9b:b6:6c:f3:cb:
                    bf:f8:0a:47:dd:e3:07:f1:ec:a1:fb:4b:f8:96:7e:
                    65:40:91:54:c7:d4:fd:c9:c2:2e:f9:1a:12:5e:b9:
                    ef:bd:0f:65:0b:8b:20:e0:a2:f2:fe:5f:94:67:18:
                    4e:10:fa:66:5e:47:67:d5:b2:33:03:dc:f2:4a:f3:
                    11:f3:db:93:43:dc:6b:12:89:22:f3:86:98:17:ae:
                    7a:f8:c3:c0:40:cd:c0:85:ba:b6:f6:8f:23:0d:a7:
                    27:73:55:51:4b:54:fc:11:ae:00:a3:0e:b9:dc:ec:
                    d0:36:40:91:3e:81:7d:d7:e0:21:30:11:28:5e:4c:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:E8:A2:F2:B8:A1:FF:33:1C:E9:93:81:1C:A3:8F:56:A6:BD:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.176.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b9:08:c6:70:39:5e:ea:d2:4a:25:62:85:71:4e:24:93:13:1b:
         0e:49:2a:d0:31:0a:7e:bc:3d:f6:19:32:b0:09:4b:3f:20:9b:
         5a:cb:03:14:bc:0e:f3:3b:e0:dd:70:58:f7:3d:10:9e:27:6e:
         b2:a5:e0:bb:f0:71:e2:71:3e:92:07:62:47:56:74:66:7e:ed:
         03:82:4b:23:9f:c7:19:91:4d:91:b3:07:99:dc:f2:aa:42:aa:
         18:5a:7a:75:10:e5:5e:94:e8:8f:30:0d:84:2e:fc:f4:1d:8e:
         73:6b:16:9f:7f:8e:fe:b2:b6:f1:7d:c0:08:91:32:94:6f:c1:
         16:e0:a2:1f:ac:17:93:78:de:28:ef:4a:24:88:b0:9d:6a:ae:
         9a:d4:0d:c1:dc:bf:7d:02:9d:0e:11:cf:e3:f9:c0:eb:f1:f6:
         82:1c:cc:b9:f9:ec:d0:e7:bf:80:53:d4:ed:05:90:8a:0a:09:
         fb:b1:3d:2e:c2:d8:7c:a3:07:18:c1:ef:54:0a:64:6e:d0:10:
         cf:8b:db:8d:93:ac:e3:df:43:7f:d1:b0:45:81:a8:08:9a:10:
         db:d3:86:23:ef:35:56:17:cc:9b:29:4b:dd:2e:4a:7a:c4:c1:
         f6:b0:cb:02:5f:89:9b:43:64:2f:5e:c8:2b:fa:29:f1:88:0c:
         41:ec:14:90
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULQc9Jz8jQC9k3fZVN4QSmZonacYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEzMDAwMDAwWhcNMjQwNjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MDY5OTliMjY2YTgyNTMzZjZmMDY3MzYxZTI3ZWNiN2E3
N2FhODNhOGNiYjcyZTMwY2VjMzgyMmZjNmRlODU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCl8WIkW2HSaVS6+zb06l/1+HkRTE3Fs1+iZcPuEF2fgS6H
1eRZrqjHtF1jWStyHivxXg0fkLwAnAhnjycPh5J6AC9WKjP0qjliv8QJD2K/IkHf
glEXpqEJwd19FTVIzHfi4OXN7FXDiLZAmoiMFgzGRdBHen03NJAYXw3lGcQySjib
tmzzy7/4Ckfd4wfx7KH7S/iWfmVAkVTH1P3Jwi75GhJeue+9D2ULiyDgovL+X5Rn
GE4Q+mZeR2fVsjMD3PJK8xHz25ND3GsSiSLzhpgXrnr4w8BAzcCFurb2jyMNpydz
VVFLVPwRrgCjDrnc7NA2QJE+gX3X4CEwESheTBM1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUayDoovK4of8zHOmTgRyjj1amvbQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzcyMWFhN2JlLWQ0YjctNGQ0NC05N2QyLTZmYmMyMTQ0ZjQ1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwFrsDANBgkqhkiG9w0BAQsFAAOCAQEAuQjGcDle6tJKJWKFcU4kkxMbDkkq
0DEKfrw99hkysAlLPyCbWssDFLwO8zvg3XBY9z0QnidusqXgu/Bx4nE+kgdiR1Z0
Zn7tA4JLI5/HGZFNkbMHmdzyqkKqGFp6dRDlXpTojzANhC789B2Oc2sWn3+O/rK2
8X3ACJEylG/BFuCiH6wXk3jeKO9KJIiwnWqumtQNwdy/fQKdDhHP4/nA6/H2ghzM
ufns0Oe/gFPU7QWQigoJ+7E9LsLYfKMHGMHvVApkbtAQz4vbjZOs499Df9GwRYGo
CJoQ29OGI+81VhfMmylL3S5KesTB9rDLAl+Jm0NkL17IK/op8YgMQewUkA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:56 2024 by rpki-client on console-fra.rpki-client.org