Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd98541-f4af-488a-b83d-cc1c7bea199e.roa
File:                     acd98541-f4af-488a-b83d-cc1c7bea199e.roa (raw, json)
Hash identifier:          8SVHAlwrsHw4aAAyTcRyMb+dZ4lRap9g6Skr+E4s+UQ=
Subject key identifier:   FD:CC:7A:FC:80:D4:E5:D1:E3:00:EE:0C:55:67:22:04:8F:D4:BB:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2972F2903DA4DD501C3AC9E41CABDD8564E7133E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd98541-f4af-488a-b83d-cc1c7bea199e.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.155.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:72:f2:90:3d:a4:dd:50:1c:3a:c9:e4:1c:ab:dd:85:64:e7:13:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=3b8b166756082ffc85b5914e6dc0310dcb204ca7b9d9200f9f97246597b8ae99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:c1:84:f6:9c:05:cc:4f:a4:af:4a:19:90:
                    a6:d8:c4:ea:6b:2f:c9:23:4c:28:f5:4f:47:60:77:
                    f1:b8:01:6e:78:de:9b:35:05:e0:6e:63:6e:0c:00:
                    e9:d2:14:86:66:57:34:b7:16:67:f2:c3:6a:b6:d9:
                    d2:65:cd:51:2a:94:7e:12:e9:2f:36:41:7e:30:5b:
                    2c:9f:45:8d:af:8b:43:66:f1:d2:6b:5a:41:3a:ed:
                    20:6f:de:39:9f:11:ed:02:0c:5b:c0:2d:8b:70:48:
                    75:d1:6c:79:d1:14:f4:8b:56:0b:a2:03:86:6a:53:
                    0f:98:c2:0b:22:84:69:a9:50:34:1e:25:d2:0a:10:
                    06:41:e1:3b:f5:c9:e2:dd:18:90:0c:8e:cc:d4:fe:
                    6a:e7:73:01:31:c1:0e:be:37:ce:cf:c5:93:fc:48:
                    d9:dd:7d:88:57:20:db:e6:02:8e:b8:9a:33:11:9a:
                    27:93:4f:ff:21:f0:48:21:ef:0a:2b:92:50:9d:92:
                    39:aa:fc:d8:f2:9c:ab:b4:a0:34:30:19:de:4d:c7:
                    ee:96:95:75:53:80:9c:cc:e1:c5:f0:ae:9a:cd:ed:
                    1a:c3:f4:2d:e8:d0:b9:10:10:ee:83:2a:00:24:12:
                    05:42:db:82:1e:73:e6:db:9e:4b:42:37:b8:a4:62:
                    43:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CC:7A:FC:80:D4:E5:D1:E3:00:EE:0C:55:67:22:04:8F:D4:BB:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd98541-f4af-488a-b83d-cc1c7bea199e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.155.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:8b:1a:60:8f:43:21:e7:90:e3:17:49:91:bc:53:41:f6:e3:
         75:9f:2e:2f:f9:76:13:84:ec:26:43:f4:3f:8f:0b:13:e8:99:
         06:dc:62:d6:61:7f:62:2f:70:67:30:21:e8:c3:e0:fc:7e:15:
         15:e8:9f:59:04:4a:a2:b0:72:6b:79:28:b9:22:16:72:da:71:
         6d:e4:cd:6d:15:a4:84:f7:e7:cf:2f:af:31:8f:8c:1f:00:8b:
         08:cf:c9:8b:ca:d9:ee:2f:7b:ed:31:a4:02:1f:08:7c:31:c3:
         81:57:28:5a:40:18:6d:1b:4a:fc:ca:69:d3:28:75:73:bb:8e:
         7a:07:e2:5f:1e:7e:4a:44:38:d1:49:7a:49:70:c0:e3:be:d9:
         c4:c8:41:df:41:97:62:d5:90:0e:0b:8d:8a:bb:b4:db:a5:09:
         14:82:e1:c8:30:76:49:18:a8:07:6c:81:11:0b:b4:0c:e1:a2:
         f7:16:96:58:99:c1:c1:b7:7d:b6:47:0e:7c:42:30:ed:80:9e:
         31:ff:24:16:d1:fe:a9:f4:64:3a:f2:30:b0:26:0a:21:5e:40:
         c0:bd:25:6b:66:9c:eb:74:0c:7b:cb:52:7d:35:a3:72:b5:b5:
         4a:e4:53:59:5a:8f:8f:82:09:0e:0f:da:31:63:1f:5e:12:99:
         56:72:fc:9b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUKXLykD2k3VAcOsnkHKvdhWTnEz4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYjhiMTY2NzU2MDgyZmZjODViNTkxNGU2ZGMwMzEwZGNi
MjA0Y2E3YjlkOTIwMGY5Zjk3MjQ2NTk3YjhhZTk5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwacGE9pwFzE+kr0oZkKbYxOprL8kjTCj1T0dgd/G4AW54
3ps1BeBuY24MAOnSFIZmVzS3Fmfyw2q22dJlzVEqlH4S6S82QX4wWyyfRY2vi0Nm
8dJrWkE67SBv3jmfEe0CDFvALYtwSHXRbHnRFPSLVguiA4ZqUw+YwgsihGmpUDQe
JdIKEAZB4Tv1yeLdGJAMjszU/mrncwExwQ6+N87PxZP8SNndfYhXINvmAo64mjMR
mieTT/8h8Egh7worklCdkjmq/NjynKu0oDQwGd5Nx+6WlXVTgJzM4cXwrprN7RrD
9C3o0LkQEO6DKgAkEgVC24Iec+bbnktCN7ikYkPHAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU/cx6/IDU5dHjAO4MVWciBI/Uu/YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FjZDk4NTQxLWY0YWYtNDg4YS1iODNkLWNjMWM3YmVhMTk5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4mzANBgkqhkiG9w0BAQsFAAOCAQEAQIsaYI9DIeeQ4xdJkbxTQfbjdZ8u
L/l2E4TsJkP0P48LE+iZBtxi1mF/Yi9wZzAh6MPg/H4VFeifWQRKorBya3kouSIW
ctpxbeTNbRWkhPfnzy+vMY+MHwCLCM/Ji8rZ7i977TGkAh8IfDHDgVcoWkAYbRtK
/Mpp0yh1c7uOegfiXx5+SkQ40Ul6SXDA477ZxMhB30GXYtWQDguNiru026UJFILh
yDB2SRioB2yBEQu0DOGi9xaWWJnBwbd9tkcOfEIw7YCeMf8kFtH+qfRkOvIwsCYK
IV5AwL0la2ac63QMe8tSfTWjcrW1SuRTWVqPj4IJDg/aMWMfXhKZVnL8mw==
-----END CERTIFICATE-----
Generated at Mon May 6 00:48:54 2024 by rpki-client on console-fra.rpki-client.org