Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e31855d-83f9-4a6c-a51f-b006f05db89d.roa
File:                     9e31855d-83f9-4a6c-a51f-b006f05db89d.roa (raw, json)
Hash identifier:          PLSZxPBo50qvd2KQuppOaUK65t8y9vGF9bUNjwSIScM=
Subject key identifier:   2B:23:19:02:A7:D7:B1:44:92:9A:9D:E8:03:FD:ED:2A:6A:1B:FA:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E243C3EC8FC4F13917E0BF2ECA159EDC98F9630
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e31855d-83f9-4a6c-a51f-b006f05db89d.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        40.193.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:24:3c:3e:c8:fc:4f:13:91:7e:0b:f2:ec:a1:59:ed:c9:8f:96:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=54d0c5df7d3a4ae022ae3a9cf91da3b408b927382e89d14fc67018f1b8694957, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:d4:2c:cb:76:27:d5:e3:a7:36:70:80:a5:
                    c5:05:6c:03:24:c4:77:71:15:96:7b:9b:61:f4:74:
                    e4:23:bd:d9:09:a3:9c:5c:90:26:da:2e:cd:f7:70:
                    09:c3:11:98:83:9d:4b:a4:72:33:74:9f:16:22:c9:
                    ac:e3:2c:d3:54:d6:9e:61:81:3e:09:1a:69:5f:83:
                    f3:5e:e3:3e:cf:09:b3:52:06:ec:87:79:ee:00:46:
                    c9:54:ce:5c:ca:5a:23:7d:e9:64:07:81:06:c5:ea:
                    f5:dc:86:ec:e9:39:29:0e:9b:c5:3e:78:7f:08:38:
                    07:08:63:5b:48:18:e0:d0:bf:b0:95:f6:66:8f:a5:
                    99:39:f5:c8:62:f1:00:b0:fc:ef:4a:a7:85:47:51:
                    29:15:88:02:4a:09:ff:ff:45:4f:48:9e:23:88:b6:
                    47:e7:c3:31:6f:1e:35:37:ee:6c:9e:38:ea:1c:0d:
                    f6:47:52:55:b8:f3:ba:46:a9:13:33:03:c5:93:7d:
                    37:23:36:52:f4:8a:70:8d:f0:27:86:5d:c6:74:86:
                    3b:a9:58:c8:f7:c3:1d:55:c6:36:84:a1:dc:79:80:
                    5b:81:9f:01:d0:87:60:df:d7:2d:cb:89:22:f2:c8:
                    7f:97:34:03:b3:c5:ff:b8:2f:f6:1e:c6:80:9a:5a:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:23:19:02:A7:D7:B1:44:92:9A:9D:E8:03:FD:ED:2A:6A:1B:FA:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e31855d-83f9-4a6c-a51f-b006f05db89d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:ef:2b:14:e6:5b:29:58:86:5a:b9:6c:3d:6b:97:de:34:d2:
         d2:39:55:31:67:6b:52:83:ff:4e:2c:f9:12:90:90:a2:bc:a6:
         47:d8:05:b2:bb:17:e0:51:84:bc:38:ba:93:84:6f:d3:aa:1e:
         d0:87:ec:2a:6b:25:56:6a:c2:2e:f4:4e:d0:2b:d8:b2:a2:1a:
         a8:e5:af:28:7e:8a:3f:fa:a1:cd:62:8a:2c:35:51:f3:93:fb:
         86:8d:08:53:16:f7:7f:aa:74:b0:e7:9d:8c:ab:0b:bb:3b:71:
         77:63:79:dd:5c:68:de:08:f8:f4:e2:45:33:ac:b9:4c:cc:9d:
         b9:92:9f:53:56:24:f4:38:9c:93:d5:ce:13:53:76:40:0c:fc:
         19:46:c2:94:da:91:dc:a7:dd:0e:f1:c1:78:f9:66:22:f8:5f:
         af:ed:6c:2a:d6:48:46:da:fb:92:da:ad:47:12:2a:e3:e6:5d:
         3d:26:91:60:63:c6:1e:ca:95:fa:7f:78:c4:2e:8c:c2:b2:e4:
         32:8b:80:fb:80:02:e2:d1:ef:e1:1e:e3:58:48:14:90:29:2a:
         ba:71:1f:b6:70:40:73:2f:77:c4:bd:76:87:59:ca:39:74:0b:
         da:9f:93:ad:9c:90:46:11:3d:98:49:27:de:60:76:03:fd:22:
         1a:d6:67:62
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUXiQ8Psj8TxORfgvy7KFZ7cmPljAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NGQwYzVkZjdkM2E0YWUwMjJhZTNhOWNmOTFkYTNiNDA4
YjkyNzM4MmU4OWQxNGZjNjcwMThmMWI4Njk0OTU3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGjtQsy3Yn1eOnNnCApcUFbAMkxHdxFZZ7m2H0dOQjvdkJ
o5xckCbaLs33cAnDEZiDnUukcjN0nxYiyazjLNNU1p5hgT4JGmlfg/Ne4z7PCbNS
BuyHee4ARslUzlzKWiN96WQHgQbF6vXchuzpOSkOm8U+eH8IOAcIY1tIGODQv7CV
9maPpZk59chi8QCw/O9Kp4VHUSkViAJKCf//RU9IniOItkfnwzFvHjU37myeOOoc
DfZHUlW487pGqRMzA8WTfTcjNlL0inCN8CeGXcZ0hjupWMj3wx1VxjaEodx5gFuB
nwHQh2Df1y3LiSLyyH+XNAOzxf+4L/YexoCaWpCXAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUKyMZAqfXsUSSmp3oA/3tKmob+tcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzllMzE4NTVkLTgzZjktNGE2Yy1hNTFmLWIwMDZmMDVkYjg5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAowTANBgkqhkiG9w0BAQsFAAOCAQEAJ+8rFOZbKViGWrlsPWuX3jTS0jlV
MWdrUoP/Tiz5EpCQorymR9gFsrsX4FGEvDi6k4Rv06oe0IfsKmslVmrCLvRO0CvY
sqIaqOWvKH6KP/qhzWKKLDVR85P7ho0IUxb3f6p0sOedjKsLuztxd2N53Vxo3gj4
9OJFM6y5TMyduZKfU1Yk9Dick9XOE1N2QAz8GUbClNqR3KfdDvHBePlmIvhfr+1s
KtZIRtr7ktqtRxIq4+ZdPSaRYGPGHsqV+n94xC6MwrLkMouA+4AC4tHv4R7jWEgU
kCkqunEftnBAcy93xL12h1nKOXQL2p+TrZyQRhE9mEkn3mB2A/0iGtZnYg==
-----END CERTIFICATE-----
Generated at Mon May 6 00:46:54 2024 by rpki-client on console-ams.rpki-client.org