Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa
File:                     88612825-39ba-446a-a645-27d9ef61fe28.roa (raw, json)
Hash identifier:          54JM5VeqQbn1XLnrrtnTzh/93QzJxcifS7rruMvxvG8=
Subject key identifier:   20:A6:AD:4C:27:1D:E8:81:0C:4D:13:55:FC:C5:DE:CA:2A:B7:46:AE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0AF62756A161A69C4711704775C4FAB9523097DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa
Signing time:             Mon 03 Jun 2024 00:00:00 +0000
ROA not before:           Mon 03 Jun 2024 00:00:00 +0000
ROA not after:            Mon 08 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        198.52.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f6:27:56:a1:61:a6:9c:47:11:70:47:75:c4:fa:b9:52:30:97:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:00:00 2024 GMT
            Not After : Jul  8 23:59:59 2024 GMT
        Subject: serialNumber=b6265fc3ce7f2720c3b063c12291e0b03930f1c3c855ee5a09e709c4dbca72fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:cc:47:eb:12:29:ee:c9:5c:6f:2d:1d:1a:
                    ab:be:e2:2b:18:e7:5b:41:48:12:05:e1:ed:a2:51:
                    50:19:99:00:b3:6a:0d:11:b7:ae:0e:b6:37:84:d3:
                    4c:91:82:6c:5e:67:eb:00:97:b2:b8:13:ed:e6:64:
                    09:08:ee:65:cf:95:b4:55:05:93:4b:ee:08:a0:95:
                    9d:55:e0:33:d2:2a:25:00:34:fc:b0:db:b0:91:8b:
                    7f:4a:53:d8:37:5e:59:81:22:4f:a1:aa:b0:d8:a8:
                    ee:58:15:29:f0:5b:16:74:30:69:70:f7:d9:aa:fa:
                    f2:04:99:e5:e0:57:c3:dc:35:60:9a:9d:7e:60:bf:
                    c3:ba:b2:45:7b:9e:e9:f7:f7:c7:9d:b2:98:2a:fc:
                    e4:3d:63:8e:ef:35:c0:05:89:ee:2e:0a:3b:d1:61:
                    ee:46:43:d8:40:8c:4a:ab:cb:72:db:62:58:f5:c1:
                    03:c9:50:cb:f5:d2:0a:4e:b7:c7:cf:77:a8:79:2f:
                    c9:33:61:a0:81:9e:d0:76:01:4f:6f:0d:63:11:96:
                    1a:78:c3:aa:2a:87:ea:32:d5:cc:db:14:dc:16:c6:
                    00:37:9f:b2:6b:cb:1e:de:ca:3d:1c:49:b6:d7:a5:
                    c4:a3:6c:9c:23:ac:bc:21:f8:e0:28:01:67:21:0b:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A6:AD:4C:27:1D:E8:81:0C:4D:13:55:FC:C5:DE:CA:2A:B7:46:AE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88612825-39ba-446a-a645-27d9ef61fe28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.52.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:a2:7c:7e:78:21:8e:70:be:c8:fc:ac:1f:1a:d7:da:82:7b:
         11:0f:40:f1:52:1a:6d:43:cf:53:ea:b5:27:84:1e:33:7f:8a:
         e2:6f:ce:9c:be:ed:c7:02:11:05:09:9a:8a:2e:c6:c6:65:b0:
         c3:3c:ee:9f:69:aa:56:41:5a:10:8a:5a:37:87:ce:ea:4c:18:
         54:54:ea:53:66:6e:2e:4f:7e:d5:99:42:fb:96:f5:92:7b:5d:
         4a:53:22:d8:48:42:82:91:f8:52:95:f8:32:ae:a0:10:c4:23:
         b9:28:90:32:ad:6e:fb:a2:a1:54:72:26:21:aa:b6:18:23:6d:
         63:3f:3c:77:b3:43:cc:49:50:97:b9:7d:ab:f2:f8:df:1f:c7:
         de:78:47:61:79:f4:57:c8:b9:78:1e:8a:73:ee:72:3d:23:63:
         da:e7:17:e9:b3:89:4e:f8:2b:50:b6:51:4d:93:85:a4:30:6d:
         7e:94:75:25:e8:5a:27:5e:1c:61:bc:0e:0a:ff:73:51:1c:d4:
         74:66:af:fd:40:cb:4e:0b:c7:3e:10:e6:f0:45:5c:a8:c4:93:
         28:48:48:c8:15:3d:51:44:6f:17:91:96:5f:22:f6:6e:34:8e:
         a4:47:a8:ba:a6:70:2e:22:4b:5d:9f:3f:96:75:9a:a5:32:f1:
         84:63:75:c6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCvYnVqFhppxHEXBHdcT6uVIwl94wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNjAzMDAwMDAwWhcNMjQwNzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjI2NWZjM2NlN2YyNzIwYzNiMDYzYzEyMjkxZTBiMDM5
MzBmMWMzYzg1NWVlNWEwOWU3MDljNGRiY2E3MmZjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRGMxH6xIp7slcby0dGqu+4isY51tBSBIF4e2iUVAZmQCz
ag0Rt64OtjeE00yRgmxeZ+sAl7K4E+3mZAkI7mXPlbRVBZNL7giglZ1V4DPSKiUA
NPyw27CRi39KU9g3XlmBIk+hqrDYqO5YFSnwWxZ0MGlw99mq+vIEmeXgV8PcNWCa
nX5gv8O6skV7nun398edspgq/OQ9Y47vNcAFie4uCjvRYe5GQ9hAjEqry3LbYlj1
wQPJUMv10gpOt8fPd6h5L8kzYaCBntB2AU9vDWMRlhp4w6oqh+oy1czbFNwWxgA3
n7Jryx7eyj0cSbbXpcSjbJwjrLwh+OAoAWchC0OPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIKatTCcd6IEMTRNV/MXeyiq3Rq4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg4NjEyODI1LTM5YmEtNDQ2YS1hNjQ1LTI3ZDllZjYxZmUyOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXGNGAwDQYJKoZIhvcNAQELBQADggEBALyifH54IY5wvsj8rB8a19qCexEP
QPFSGm1Dz1PqtSeEHjN/iuJvzpy+7ccCEQUJmoouxsZlsMM87p9pqlZBWhCKWjeH
zupMGFRU6lNmbi5PftWZQvuW9ZJ7XUpTIthIQoKR+FKV+DKuoBDEI7kokDKtbvui
oVRyJiGqthgjbWM/PHezQ8xJUJe5favy+N8fx954R2F59FfIuXgeinPucj0jY9rn
F+mziU74K1C2UU2ThaQwbX6UdSXoWideHGG8Dgr/c1Ec1HRmr/1Ay04Lxz4Q5vBF
XKjEkyhISMgVPVFEbxeRll8i9m40jqRHqLqmcC4iS12fP5Z1mqUy8YRjdcY=
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:31 2024 by rpki-client on console-ams.rpki-client.org