Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa
File:                     ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa (raw, json)
Hash identifier:          srZvONW4w20Z+nkf+wuRAV8X4pupW+LKeZv9GNEKSOo=
Subject key identifier:   06:40:85:22:D8:DA:BE:DD:ED:17:8A:37:F5:2A:D5:BB:19:AF:92:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58780D537B28BAD84B3E951FA2E9ACBB9006C376
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa
Signing time:             Wed 19 Jun 2024 00:00:00 +0000
ROA not before:           Wed 19 Jun 2024 00:00:00 +0000
ROA not after:            Wed 24 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        147.106.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:78:0d:53:7b:28:ba:d8:4b:3e:95:1f:a2:e9:ac:bb:90:06:c3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 19 00:00:00 2024 GMT
            Not After : Jul 24 23:59:59 2024 GMT
        Subject: serialNumber=add3d037b07fd398b4a3aa0c1d12fa4f538407329e785213493776a94940143f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:7c:d6:7b:89:d5:cc:80:a4:2a:82:42:78:
                    2c:eb:57:1e:77:da:e2:4b:68:b6:4f:e2:a2:1a:69:
                    f8:e7:61:48:3f:c5:d4:02:ac:fe:9a:43:ac:bf:00:
                    18:33:12:c8:b2:57:d3:cd:05:f1:25:89:6d:b5:da:
                    83:04:b2:42:ac:e8:e9:66:e3:dc:d7:fd:24:ca:bb:
                    1d:b7:72:60:fc:d2:3f:8b:5e:7e:52:59:b9:b6:47:
                    06:fa:dc:43:4d:3c:04:a7:e7:1b:80:52:93:b4:d9:
                    9c:ee:0a:9f:d8:ba:be:b9:90:71:b4:b8:da:7c:a0:
                    ba:57:ce:88:00:23:2f:cd:56:ce:25:5d:f5:df:db:
                    e9:36:9c:a9:cb:d4:1d:a9:af:18:04:b2:fc:a7:e9:
                    b3:1b:60:0c:17:d8:ba:b5:1a:b3:5b:1e:85:e0:da:
                    35:19:91:86:8b:ed:74:24:8e:d1:02:3a:b9:04:a1:
                    74:78:1b:fd:e6:f0:fd:77:d1:8f:6b:52:89:02:a1:
                    e7:fe:89:8b:d6:8f:c9:96:5c:a8:c6:16:ed:4c:f5:
                    0a:84:cc:fd:98:f6:48:a9:be:61:9b:81:09:77:8a:
                    fc:f3:8e:4d:91:4f:a5:b9:62:4e:88:2a:f2:c8:a8:
                    15:56:af:db:87:64:1f:97:08:98:ef:d0:d2:c7:64:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:85:22:D8:DA:BE:DD:ED:17:8A:37:F5:2A:D5:BB:19:AF:92:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.106.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:c5:b8:dd:76:3a:81:45:e0:58:07:03:67:7f:e8:da:56:06:
         72:0c:f1:6a:b7:7c:d6:2f:c4:03:75:9c:67:1b:08:3c:75:e4:
         c4:2c:64:74:fe:3e:88:d2:6b:78:1e:3a:8d:62:3a:a9:55:e4:
         37:67:ad:e1:6f:52:2e:07:15:45:b0:4e:19:11:2f:21:6d:eb:
         cd:3e:3b:41:9a:ce:f4:91:ce:ad:3c:dd:cb:52:48:36:dc:9f:
         05:4b:6b:e0:48:9c:36:81:96:e0:94:3b:6f:0e:39:19:70:30:
         14:fb:24:40:d6:12:c7:c3:d6:84:68:3d:63:b8:51:83:6e:4c:
         3a:cf:e4:38:ed:1b:7e:01:1c:d2:6c:37:72:7b:ed:5b:46:d5:
         ce:fd:0d:48:f0:a0:ca:ed:a9:eb:a7:0c:6d:14:0c:8e:66:02:
         16:b6:d9:84:01:62:d2:ac:15:41:56:df:0f:33:6e:1f:28:92:
         6c:1e:33:e2:bf:a8:fb:dc:b3:37:e0:42:7c:f8:54:39:2e:0b:
         45:42:90:49:1c:3f:8c:26:46:ca:5c:71:e9:db:d1:e1:28:83:
         36:07:0c:ad:ac:5b:7d:a9:cf:4c:20:4d:1a:5d:6e:97:85:0f:
         4e:a6:15:07:f4:d1:a4:9b:f0:63:ce:65:db:b5:08:90:a9:15:
         e9:01:6d:91
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWHgNU3southLPpUfoumsu5AGw3YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNjE5MDAwMDAwWhcNMjQwNzI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZGQzZDAzN2IwN2ZkMzk4YjRhM2FhMGMxZDEyZmE0ZjUz
ODQwNzMyOWU3ODUyMTM0OTM3NzZhOTQ5NDAxNDNmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUU3zWe4nVzICkKoJCeCzrVx532uJLaLZP4qIaafjnYUg/
xdQCrP6aQ6y/ABgzEsiyV9PNBfEliW212oMEskKs6Olm49zX/STKux23cmD80j+L
Xn5SWbm2Rwb63ENNPASn5xuAUpO02ZzuCp/Yur65kHG0uNp8oLpXzogAIy/NVs4l
XfXf2+k2nKnL1B2prxgEsvyn6bMbYAwX2Lq1GrNbHoXg2jUZkYaL7XQkjtECOrkE
oXR4G/3m8P130Y9rUokCoef+iYvWj8mWXKjGFu1M9QqEzP2Y9kipvmGbgQl3ivzz
jk2RT6W5Yk6IKvLIqBVWr9uHZB+XCJjv0NLHZM1RAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBkCFItjavt3tF4o39SrVuxmvknQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiNWI4ZDEwLTVmMTctNGM0Yi1hYWU4LWEyNjUzOTk3NzBjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAaTasAwDQYJKoZIhvcNAQELBQADggEBAA/FuN12OoFF4FgHA2d/6NpWBnIM
8Wq3fNYvxAN1nGcbCDx15MQsZHT+PojSa3geOo1iOqlV5DdnreFvUi4HFUWwThkR
LyFt680+O0GazvSRzq083ctSSDbcnwVLa+BInDaBluCUO28OORlwMBT7JEDWEsfD
1oRoPWO4UYNuTDrP5DjtG34BHNJsN3J77VtG1c79DUjwoMrtqeunDG0UDI5mAha2
2YQBYtKsFUFW3w8zbh8okmweM+K/qPvcszfgQnz4VDkuC0VCkEkcP4wmRspccenb
0eEogzYHDK2sW32pz0wgTRpdbpeFD06mFQf00aSb8GPOZdu1CJCpFekBbZE=
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:36 2024 by rpki-client on console-ams.rpki-client.org