Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744b2b2e-b918-40f2-ab20-ed0570abb836.roa
File:                     744b2b2e-b918-40f2-ab20-ed0570abb836.roa (raw, json)
Hash identifier:          Ejhhmwte6GoxxUc67d5zSTGQbvxvf/MwvNj0t/fxuCE=
Subject key identifier:   A6:66:5A:33:BC:87:F8:8C:26:C6:F0:3B:6F:68:1A:F2:6A:4C:D2:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58D4D90F0EE6CF9202EACB00260FD8B0B5F86367
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744b2b2e-b918-40f2-ab20-ed0570abb836.roa
Signing time:             Fri 31 May 2024 00:00:00 +0000
ROA not before:           Fri 31 May 2024 00:00:00 +0000
ROA not after:            Fri 05 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        75.3.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d4:d9:0f:0e:e6:cf:92:02:ea:cb:00:26:0f:d8:b0:b5:f8:63:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 00:00:00 2024 GMT
            Not After : Jul  5 23:59:59 2024 GMT
        Subject: serialNumber=d924ca69183bf91fc49b687176b432c1593cf8fca084c1a92581acaf40b72257, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:80:1d:48:4e:3c:f6:b7:7c:57:7f:27:1b:c5:
                    e6:74:89:d3:dd:f9:38:cc:e2:b8:e5:f9:cc:ec:b0:
                    26:a3:49:d4:c5:7d:13:ff:16:0e:78:69:88:b5:94:
                    a1:79:b4:07:6d:bf:77:05:60:08:6f:aa:1b:5e:ff:
                    08:fd:48:49:2d:29:69:a1:f0:15:d6:18:dd:2c:35:
                    db:9f:38:d2:21:f2:bb:0d:36:18:fb:25:be:e3:dd:
                    05:47:02:8d:81:0c:ff:f3:4b:85:ad:f1:0a:6e:fd:
                    65:16:f6:57:eb:3c:1b:88:ce:d9:03:7b:6e:45:81:
                    ba:3d:c9:f6:3f:69:20:9c:db:3e:e8:9f:18:81:94:
                    89:50:79:a0:5e:db:84:65:00:bb:39:71:31:d3:83:
                    fc:ad:3d:52:b0:17:a0:71:93:49:98:b3:4f:38:b0:
                    e6:4b:99:7b:f1:ca:f7:4c:e3:bd:c1:0b:b4:50:de:
                    2b:68:83:0d:da:4d:36:73:b6:8b:27:f1:50:f1:9e:
                    c6:68:15:a9:83:28:6c:b4:52:26:6d:f8:95:25:1e:
                    d6:cf:a1:ba:d4:da:3b:b1:87:a9:04:69:7d:cd:bc:
                    3d:b8:79:20:99:38:a1:81:7b:ed:72:51:1c:b7:d7:
                    37:3c:29:ff:40:d4:fb:5f:a6:f6:51:d3:af:d7:4d:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:66:5A:33:BC:87:F8:8C:26:C6:F0:3B:6F:68:1A:F2:6A:4C:D2:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744b2b2e-b918-40f2-ab20-ed0570abb836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         80:16:cc:af:82:a3:87:9a:9d:39:d5:5f:91:71:ab:80:40:20:
         14:b7:35:fc:09:40:4e:63:a0:b2:27:38:3d:58:67:25:63:9c:
         42:2c:a9:b9:4a:22:f6:9b:45:b6:91:7e:4b:e3:7d:18:79:bf:
         52:80:6e:3f:8c:8a:66:97:29:48:b2:f0:97:1c:da:bd:43:14:
         43:09:cf:d8:a4:aa:a5:fc:99:79:c7:41:e2:94:aa:68:eb:2d:
         8f:8f:be:c8:26:1d:60:12:d9:37:3e:1f:16:ed:2d:af:35:cd:
         eb:69:be:0a:11:fc:62:6e:77:b7:11:12:a1:6e:19:6d:20:2d:
         a6:12:d5:21:be:e4:04:71:47:60:81:d1:e0:f3:69:a7:ab:7e:
         95:61:31:01:49:f9:3b:47:6c:c8:3d:c9:a3:33:99:05:b2:43:
         40:9e:4f:95:5f:27:00:16:42:ff:93:ba:ab:ac:10:1f:64:63:
         47:0d:71:86:61:a0:7b:ac:87:e8:f5:79:73:78:43:f9:06:7b:
         8c:e3:2c:ed:44:2a:71:45:69:61:1e:6b:a8:6e:c4:18:f5:cd:
         7f:d5:df:ed:1c:69:92:36:2d:99:30:8d:4c:2f:b0:f2:49:57:
         e8:38:f6:0f:2b:96:aa:8f:d6:c6:ae:1d:8c:d4:30:b8:70:88:
         be:7d:cd:04
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWNTZDw7mz5IC6ssAJg/YsLX4Y2cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTMxMDAwMDAwWhcNMjQwNzA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTI0Y2E2OTE4M2JmOTFmYzQ5YjY4NzE3NmI0MzJjMTU5
M2NmOGZjYTA4NGMxYTkyNTgxYWNhZjQwYjcyMjU3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDygB1ITjz2t3xXfycbxeZ0idPd+TjM4rjl+czssCajSdTF
fRP/Fg54aYi1lKF5tAdtv3cFYAhvqhte/wj9SEktKWmh8BXWGN0sNdufONIh8rsN
Nhj7Jb7j3QVHAo2BDP/zS4Wt8Qpu/WUW9lfrPBuIztkDe25Fgbo9yfY/aSCc2z7o
nxiBlIlQeaBe24RlALs5cTHTg/ytPVKwF6Bxk0mYs084sOZLmXvxyvdM473BC7RQ
3itogw3aTTZztosn8VDxnsZoFamDKGy0UiZt+JUlHtbPobrU2juxh6kEaX3NvD24
eSCZOKGBe+1yURy31zc8Kf9A1PtfpvZR06/XTRHBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpmZaM7yH+IwmxvA7b2ga8mpM0gcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc0NGIyYjJlLWI5MTgtNDBmMi1hYjIwLWVkMDU3MGFiYjgzNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZLAwAwDQYJKoZIhvcNAQELBQADggEBAIAWzK+Co4eanTnVX5Fxq4BAIBS3
NfwJQE5joLInOD1YZyVjnEIsqblKIvabRbaRfkvjfRh5v1KAbj+MimaXKUiy8Jcc
2r1DFEMJz9ikqqX8mXnHQeKUqmjrLY+PvsgmHWAS2Tc+HxbtLa81zetpvgoR/GJu
d7cREqFuGW0gLaYS1SG+5ARxR2CB0eDzaaerfpVhMQFJ+TtHbMg9yaMzmQWyQ0Ce
T5VfJwAWQv+TuqusEB9kY0cNcYZhoHush+j1eXN4Q/kGe4zjLO1EKnFFaWEea6hu
xBj1zX/V3+0caZI2LZkwjUwvsPJJV+g49g8rlqqP1sauHYzUMLhwiL59zQQ=
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:25 2024 by rpki-client on console-ams.rpki-client.org