Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa
File:                     c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa (raw, json)
Hash identifier:          RCIQCL/qvt5Wyl6dlZIYBha+LFDchIOJs7N5kzaS48A=
Subject key identifier:   0E:EE:19:DC:6D:EF:76:2D:29:6B:D8:E2:D3:59:74:E9:8B:CD:1E:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       196028466781E43C03C58EACC0B27DE0FF663A1E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa
Signing time:             Wed 22 May 2024 00:00:00 +0000
ROA not before:           Wed 22 May 2024 00:00:00 +0000
ROA not after:            Wed 26 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        93.75.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:60:28:46:67:81:e4:3c:03:c5:8e:ac:c0:b2:7d:e0:ff:66:3a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 22 00:00:00 2024 GMT
            Not After : Jun 26 23:59:59 2024 GMT
        Subject: serialNumber=6b46a3d8f74b45c402df5695f620ef5703cfd4558807e750484b92d05b36a168, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:94:b0:a2:86:96:a4:bb:77:b4:13:42:d3:
                    e9:db:56:7f:21:e7:f8:0c:81:34:57:47:2d:9b:dd:
                    15:78:0f:6d:e4:7f:71:ac:fb:89:72:8f:98:94:0b:
                    15:8c:c9:aa:80:e5:af:36:bb:d1:b0:97:38:8c:bc:
                    d8:fc:ec:e4:93:ba:bc:d4:2c:48:47:70:b3:ab:b6:
                    28:41:d0:d4:53:c5:2d:0a:f6:ce:b6:a5:48:9f:f0:
                    41:7d:d1:11:f3:03:8b:33:d7:93:be:b6:32:48:57:
                    72:35:4a:aa:23:49:eb:16:64:56:0e:ed:3b:53:07:
                    87:dc:7d:d8:db:28:41:1a:4b:e5:b8:95:26:6a:be:
                    ed:d8:50:ab:f9:73:96:6a:b9:a9:d4:b1:91:d3:8b:
                    27:c6:ec:b8:99:fa:29:b6:4b:56:83:5f:c8:60:15:
                    8b:d6:7b:33:99:31:de:9c:5c:82:cf:cd:82:8a:bc:
                    92:4f:c1:4c:1f:9f:9b:b2:1e:ab:22:ca:4c:c6:be:
                    11:d8:ac:24:55:85:21:ab:3c:5f:10:60:75:cf:92:
                    03:97:f5:c2:d1:a5:f4:78:93:42:53:ed:e9:95:21:
                    82:94:80:c8:55:65:a7:4c:e3:71:2f:b1:19:a2:9e:
                    66:4e:a8:a7:0d:14:d6:59:ca:cb:a3:86:aa:40:d7:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EE:19:DC:6D:EF:76:2D:29:6B:D8:E2:D3:59:74:E9:8B:CD:1E:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:b7:7d:db:1d:6c:b9:21:74:97:ec:21:65:c7:36:8b:f3:4d:
         38:86:52:58:3e:cd:18:46:ad:ce:dd:29:6b:c9:73:65:99:c3:
         44:91:e6:85:7d:13:02:2d:cf:5d:e2:03:05:2c:3a:3c:d8:02:
         bf:4f:ee:e9:fc:a0:a1:19:a2:df:b2:1f:24:04:28:14:fd:9c:
         54:01:04:32:e5:6c:2f:c3:f3:17:bd:ad:96:00:bb:cf:12:e1:
         e9:52:ac:ba:65:e6:a3:0f:18:ef:87:81:9d:14:54:17:09:b2:
         8a:00:d7:6c:92:a5:f7:11:1b:5f:d6:08:79:9b:78:30:a2:a4:
         77:04:3f:41:6a:cb:ef:57:81:de:c0:6a:b1:77:e2:4b:e0:54:
         9d:70:06:6f:8a:48:01:7c:7b:37:30:46:56:81:a4:59:46:5d:
         a2:1c:02:52:1f:13:29:fa:d7:48:f8:74:86:77:2d:1e:2d:cd:
         17:c2:5b:65:7f:56:b6:1c:91:12:4f:4d:2b:a2:64:1f:e6:b5:
         4d:5a:15:ee:76:94:4a:92:8d:07:d9:d4:94:1c:9d:f4:dc:d6:
         a1:16:ea:61:2c:1e:ac:fa:3c:49:62:6e:12:7c:bb:97:80:9c:
         c2:a3:86:84:bc:8b:c2:a2:ad:16:11:93:d0:dc:36:53:56:66:
         74:16:ad:b4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUGWAoRmeB5DwDxY6swLJ94P9mOh4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTIyMDAwMDAwWhcNMjQwNjI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2YjQ2YTNkOGY3NGI0NWM0MDJkZjU2OTVmNjIwZWY1NzAz
Y2ZkNDU1ODgwN2U3NTA0ODRiOTJkMDViMzZhMTY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0hpSwooaWpLt3tBNC0+nbVn8h5/gMgTRXRy2b3RV4D23k
f3Gs+4lyj5iUCxWMyaqA5a82u9GwlziMvNj87OSTurzULEhHcLOrtihB0NRTxS0K
9s62pUif8EF90RHzA4sz15O+tjJIV3I1SqojSesWZFYO7TtTB4fcfdjbKEEaS+W4
lSZqvu3YUKv5c5ZquanUsZHTiyfG7LiZ+im2S1aDX8hgFYvWezOZMd6cXILPzYKK
vJJPwUwfn5uyHqsiykzGvhHYrCRVhSGrPF8QYHXPkgOX9cLRpfR4k0JT7emVIYKU
gMhVZadM43EvsRminmZOqKcNFNZZysujhqpA111PAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUDu4Z3G3vdi0pa9ji01l06YvNHt0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M3ZDA3YWU2LWIwMDYtNDM2Mi1hYTM1LWVmMjNjN2ZkMTQzOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBdSzANBgkqhkiG9w0BAQsFAAOCAQEAr7d92x1suSF0l+whZcc2i/NNOIZS
WD7NGEatzt0pa8lzZZnDRJHmhX0TAi3PXeIDBSw6PNgCv0/u6fygoRmi37IfJAQo
FP2cVAEEMuVsL8PzF72tlgC7zxLh6VKsumXmow8Y74eBnRRUFwmyigDXbJKl9xEb
X9YIeZt4MKKkdwQ/QWrL71eB3sBqsXfiS+BUnXAGb4pIAXx7NzBGVoGkWUZdohwC
Uh8TKfrXSPh0hnctHi3NF8JbZX9WthyREk9NK6JkH+a1TVoV7naUSpKNB9nUlByd
9NzWoRbqYSwerPo8SWJuEny7l4CcwqOGhLyLwqKtFhGT0Nw2U1ZmdBattA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:39 2024 by rpki-client on console-ams.rpki-client.org