Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b11831b-a49b-46b2-95de-a4bac45375cf.roa
File:                     8b11831b-a49b-46b2-95de-a4bac45375cf.roa (raw, json)
Hash identifier:          mOSdkOSlNmPxQB5VQcADbxq9IcVS2PwMBrrCsVP/xLw=
Subject key identifier:   81:91:31:12:13:7B:DC:30:CD:DF:0B:38:EF:EE:92:79:81:3E:A2:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B1FB986EDBEA095AEEDB96E1868D6D8F3F3EB6A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b11831b-a49b-46b2-95de-a4bac45375cf.roa
Signing time:             Mon 20 May 2024 00:00:00 +0000
ROA not before:           Mon 20 May 2024 00:00:00 +0000
ROA not after:            Mon 24 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        56.169.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1f:b9:86:ed:be:a0:95:ae:ed:b9:6e:18:68:d6:d8:f3:f3:eb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:00:00 2024 GMT
            Not After : Jun 24 23:59:59 2024 GMT
        Subject: serialNumber=c6bb2df177eeedca61839206a3d566b7a1beea82b80393e7aa4bf2fe40847b34, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:61:ad:9c:74:14:fe:1f:5c:02:9b:f4:05:
                    78:03:d6:1f:a7:2f:ee:29:22:76:43:4e:cb:8a:92:
                    0b:a4:de:fe:88:05:7b:a4:8b:4d:1f:b9:a9:b3:47:
                    35:a6:ad:72:1d:c8:8e:2a:de:72:06:fc:de:bc:b6:
                    30:72:1c:59:b4:86:b1:34:ad:dd:47:c1:cf:4c:0b:
                    1f:30:a6:59:7a:b1:51:d7:3e:de:dc:6e:36:79:35:
                    8f:2c:87:25:c8:c5:21:68:65:4a:84:a5:62:59:99:
                    39:65:c4:ea:0c:68:fc:6a:55:8b:e4:05:31:e6:e5:
                    57:a4:41:b5:6f:6b:ef:3a:cb:b9:6b:ba:0a:b0:b1:
                    1d:1c:83:e7:bb:64:14:0b:3e:ff:97:49:a5:fc:a1:
                    b2:16:b7:b0:f3:9d:44:98:e5:69:35:a0:ff:6e:06:
                    ee:b5:e8:e1:98:eb:01:e2:1b:09:5a:b6:af:4d:10:
                    24:45:f3:05:94:5e:35:c9:9d:92:a3:9c:49:77:b5:
                    20:ba:ea:2f:06:5f:7b:11:41:3e:be:d5:3d:42:ba:
                    51:21:c5:21:cf:4b:fa:57:03:0f:07:69:34:08:32:
                    06:9f:59:d7:61:dc:7b:72:2d:aa:f9:27:5d:b9:a2:
                    bf:b4:8a:9c:74:a9:dd:aa:91:a5:61:08:58:75:d7:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:91:31:12:13:7B:DC:30:CD:DF:0B:38:EF:EE:92:79:81:3E:A2:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b11831b-a49b-46b2-95de-a4bac45375cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:cb:b5:a6:0f:82:d1:25:b9:0b:5c:d6:d5:7e:c3:c0:14:96:
         0f:a7:05:59:d7:57:17:4c:f3:62:99:7b:8a:0d:f0:45:ab:32:
         08:1f:4d:83:17:ce:f6:bc:f1:c3:94:0c:e3:2e:8a:f7:b3:86:
         fb:08:55:68:d6:e2:ef:1a:7f:cc:4b:74:a4:26:4b:62:18:f4:
         cb:6f:97:5d:79:70:af:93:4c:de:f0:76:2e:fc:4d:74:b6:0f:
         8b:a7:91:17:ba:db:f7:91:d0:3f:19:e6:e2:0a:90:43:92:88:
         89:44:0a:31:a0:29:26:05:7b:85:86:fc:5c:a1:11:79:15:a2:
         e1:5d:84:ac:ff:85:7e:ec:2a:e7:66:a1:c7:0c:06:0a:59:35:
         eb:33:5f:ef:86:26:a6:11:67:d8:12:8f:4a:6d:35:ad:71:cc:
         8a:2a:02:31:cb:59:0d:04:7e:8f:23:8f:34:ef:d2:3e:b0:d1:
         4a:5f:e5:70:e1:15:05:6f:59:7d:4a:f1:b1:33:e1:49:0c:b0:
         7e:61:93:f5:08:c5:e2:7a:6e:c5:2c:e1:24:13:5b:c6:03:da:
         86:ac:3e:45:54:7a:ca:f2:e1:21:89:aa:0a:24:40:89:a7:0c:
         05:d7:6b:5c:b4:9d:8b:5b:e6:97:3a:ff:ea:b4:74:1f:0e:67:
         e6:98:17:25
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSx+5hu2+oJWu7bluGGjW2PPz62owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTIwMDAwMDAwWhcNMjQwNjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNmJiMmRmMTc3ZWVlZGNhNjE4MzkyMDZhM2Q1NjZiN2Ex
YmVlYTgyYjgwMzkzZTdhYTRiZjJmZTQwODQ3YjM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVPWGtnHQU/h9cApv0BXgD1h+nL+4pInZDTsuKkguk3v6I
BXuki00fuamzRzWmrXIdyI4q3nIG/N68tjByHFm0hrE0rd1Hwc9MCx8wpll6sVHX
Pt7cbjZ5NY8shyXIxSFoZUqEpWJZmTllxOoMaPxqVYvkBTHm5VekQbVva+86y7lr
ugqwsR0cg+e7ZBQLPv+XSaX8obIWt7DznUSY5Wk1oP9uBu616OGY6wHiGwlatq9N
ECRF8wWUXjXJnZKjnEl3tSC66i8GX3sRQT6+1T1CulEhxSHPS/pXAw8HaTQIMgaf
Wddh3HtyLar5J125or+0ipx0qd2qkaVhCFh112wrAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUgZExEhN73DDN3ws47+6SeYE+ohgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhiMTE4MzFiLWE0OWItNDZiMi05NWRlLWE0YmFjNDUzNzVjZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4qTANBgkqhkiG9w0BAQsFAAOCAQEAM8u1pg+C0SW5C1zW1X7DwBSWD6cF
WddXF0zzYpl7ig3wRasyCB9NgxfO9rzxw5QM4y6K97OG+whVaNbi7xp/zEt0pCZL
Yhj0y2+XXXlwr5NM3vB2LvxNdLYPi6eRF7rb95HQPxnm4gqQQ5KIiUQKMaApJgV7
hYb8XKEReRWi4V2ErP+Ffuwq52ahxwwGClk16zNf74YmphFn2BKPSm01rXHMiioC
MctZDQR+jyOPNO/SPrDRSl/lcOEVBW9ZfUrxsTPhSQywfmGT9QjF4npuxSzhJBNb
xgPahqw+RVR6yvLhIYmqCiRAiacMBddrXLSdi1vmlzr/6rR0Hw5n5pgXJQ==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:29 2024 by rpki-client on console-ams.rpki-client.org