Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa
File:                     8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa (raw, json)
Hash identifier:          TGxDTBmg6qHO7D0SswyoVNnMyyXMiztRQBc9IL8WQ+E=
Subject key identifier:   76:D0:95:AC:46:6D:27:E1:BF:B2:C3:C9:59:18:FB:53:EC:4C:DA:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F28102B4528AD7D1AB0E12B21A8CC126A9A2D0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa
Signing time:             Fri 31 May 2024 00:00:00 +0000
ROA not before:           Fri 31 May 2024 00:00:00 +0000
ROA not after:            Fri 05 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.178.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:28:10:2b:45:28:ad:7d:1a:b0:e1:2b:21:a8:cc:12:6a:9a:2d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 00:00:00 2024 GMT
            Not After : Jul  5 23:59:59 2024 GMT
        Subject: serialNumber=d604b8d82c9af6c15d6b4a9ae0529d5fab5e2cc14e5266a69755c9f3a7feb81f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:24:ad:9f:20:ed:68:3a:07:48:e4:89:4f:
                    da:71:db:8e:ff:05:82:b7:ab:ad:5a:4e:ff:a6:60:
                    2a:f4:c6:00:99:8c:89:1d:84:cc:8d:7a:3e:f5:04:
                    69:f9:db:4e:17:36:25:04:74:3d:83:88:66:8f:ac:
                    d0:63:87:48:7e:36:9a:ad:8a:3e:40:34:db:ac:7d:
                    a5:18:55:a4:3b:33:1d:60:d8:cd:13:53:c8:03:d7:
                    86:c9:34:63:da:b0:45:3f:59:4d:a8:6f:01:8a:f2:
                    fc:aa:03:80:c6:34:1b:3f:fb:bd:dc:9e:fa:03:64:
                    3b:52:80:0d:fb:00:40:98:9a:69:b2:33:61:55:ed:
                    81:e7:b5:85:6b:9b:72:64:7e:a1:b0:b8:da:bc:ab:
                    6f:fd:3f:56:01:ad:d4:05:49:aa:85:14:59:f3:76:
                    22:f5:e9:85:af:93:b5:76:b6:ad:72:3e:83:1d:f6:
                    20:df:57:e4:9b:a7:1d:b6:d0:e5:d8:03:d0:cf:a8:
                    c4:59:b7:af:f2:4b:ae:1d:8f:29:24:d4:16:de:3b:
                    6f:fc:b6:fc:eb:c8:74:35:ec:07:a4:7f:48:c1:60:
                    84:c3:7e:a0:d6:3f:c3:5c:9f:ee:eb:a8:64:11:41:
                    2d:2c:b1:dc:4b:47:c1:43:51:48:55:e6:03:1e:d3:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D0:95:AC:46:6D:27:E1:BF:B2:C3:C9:59:18:FB:53:EC:4C:DA:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f8be97b-27d6-4b35-9036-8e015c6e63f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:18:09:90:9a:00:b4:79:d1:ae:f9:6e:d5:b8:df:f6:3a:67:
         8d:e2:0e:db:1d:9e:98:b1:af:c9:c4:64:0d:6f:c0:46:de:f5:
         dc:f6:fa:63:61:b6:11:4a:53:62:e8:ac:57:e8:d2:63:ad:d7:
         56:b0:e7:ae:2d:a8:0a:bb:18:89:f0:84:16:9c:a0:03:09:e6:
         e7:24:5d:53:97:d5:90:a1:54:3b:a8:ae:c2:e4:64:7b:d5:b0:
         d2:b1:33:68:f3:4a:5a:26:b8:64:51:3f:ae:b9:c7:82:e2:e2:
         9d:dc:34:5c:aa:84:51:83:43:47:2e:f9:b6:08:ba:b3:bf:ce:
         d7:0b:88:96:89:61:da:07:50:84:35:e0:3c:7d:67:30:df:e7:
         f7:f8:48:0c:e2:fa:10:f4:9a:5b:7c:5a:19:47:5c:87:73:b9:
         b6:33:f2:c2:46:d0:ad:89:a7:1b:54:08:9f:cf:59:09:7f:4b:
         07:f0:d1:9c:6f:11:c8:1b:59:49:b1:da:c6:41:90:57:cf:0e:
         b0:fc:45:1f:d2:07:1c:fa:48:7e:e2:45:c2:05:ce:0a:9a:62:
         4f:91:44:4b:cf:81:d0:f5:75:9c:b9:b4:b8:bd:96:c9:c2:0f:
         e0:d2:05:33:87:a4:a2:bc:f6:af:66:bd:d2:4b:40:1d:c7:15:
         55:20:90:9b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHygQK0UorX0asOErIajMEmqaLQ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTMxMDAwMDAwWhcNMjQwNzA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNjA0YjhkODJjOWFmNmMxNWQ2YjRhOWFlMDUyOWQ1ZmFi
NWUyY2MxNGU1MjY2YTY5NzU1YzlmM2E3ZmViODFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxKSStnyDtaDoHSOSJT9px247/BYK3q61aTv+mYCr0xgCZ
jIkdhMyNej71BGn5204XNiUEdD2DiGaPrNBjh0h+Npqtij5ANNusfaUYVaQ7Mx1g
2M0TU8gD14bJNGPasEU/WU2obwGK8vyqA4DGNBs/+73cnvoDZDtSgA37AECYmmmy
M2FV7YHntYVrm3JkfqGwuNq8q2/9P1YBrdQFSaqFFFnzdiL16YWvk7V2tq1yPoMd
9iDfV+Sbpx220OXYA9DPqMRZt6/yS64djykk1BbeO2/8tvzryHQ17Aekf0jBYITD
fqDWP8Ncn+7rqGQRQS0ssdxLR8FDUUhV5gMe0xytAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUdtCVrEZtJ+G/ssPJWRj7U+xM2g8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhmOGJlOTdiLTI3ZDYtNGIzNS05MDM2LThlMDE1YzZlNjNmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4sjANBgkqhkiG9w0BAQsFAAOCAQEAGRgJkJoAtHnRrvlu1bjf9jpnjeIO
2x2emLGvycRkDW/ARt713Pb6Y2G2EUpTYuisV+jSY63XVrDnri2oCrsYifCEFpyg
Awnm5yRdU5fVkKFUO6iuwuRke9Ww0rEzaPNKWia4ZFE/rrnHguLindw0XKqEUYND
Ry75tgi6s7/O1wuIlolh2gdQhDXgPH1nMN/n9/hIDOL6EPSaW3xaGUdch3O5tjPy
wkbQrYmnG1QIn89ZCX9LB/DRnG8RyBtZSbHaxkGQV88OsPxFH9IHHPpIfuJFwgXO
CppiT5FES8+B0PV1nLm0uL2WycIP4NIFM4ekorz2r2a90ktAHccVVSCQmw==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:29 2024 by rpki-client on console-ams.rpki-client.org