Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2587f55-6fda-4e04-9968-9e4e95d6fce3.roa
File:                     d2587f55-6fda-4e04-9968-9e4e95d6fce3.roa (raw, json)
Hash identifier:          ku9TLmuY7t2QkeH0qj7e7QsYa8jKt2Trnk2hlOv+yDE=
Subject key identifier:   79:AE:60:F1:A9:7D:4C:5A:B1:F4:0F:30:19:10:F1:06:23:06:68:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61C3B37B56BA45154F3B93225B736868E04398B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2587f55-6fda-4e04-9968-9e4e95d6fce3.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        158.56.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c3:b3:7b:56:ba:45:15:4f:3b:93:22:5b:73:68:68:e0:43:98:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=e39c5135e56ea780db23804141908624856105a308cef7f40dc37c7e47dd0933, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:5e:ea:d8:22:f5:b9:e2:ef:ec:d9:54:1b:
                    56:b7:df:a2:91:5d:2e:cc:25:56:2a:e2:42:1f:ae:
                    42:fa:74:9a:fd:92:3d:c0:95:56:b2:8e:e3:b4:d2:
                    c2:f9:9c:90:6d:74:6d:6a:67:46:32:a3:72:30:a1:
                    aa:d5:dd:52:82:89:f7:45:4d:05:71:2f:66:3d:56:
                    bc:48:0a:fb:d8:c5:f0:cc:be:fa:a9:dd:ce:3b:84:
                    57:75:78:67:56:e2:74:74:9e:37:26:89:b2:6a:8d:
                    ec:eb:ca:a1:8d:cd:d0:07:95:b1:a6:4d:80:7d:32:
                    a3:08:51:c1:89:01:d6:38:87:06:54:5f:d9:ab:3f:
                    11:8e:9e:e5:f8:0e:ac:e3:07:17:87:68:68:93:b9:
                    1d:40:ab:05:7d:2e:8c:6e:74:44:9b:6c:fb:d1:2d:
                    b9:f8:a4:b3:62:10:e7:e6:94:cf:db:3d:e1:df:86:
                    fb:af:ae:cd:d1:d2:da:1e:f1:41:ce:b0:c5:56:f3:
                    23:7e:c2:32:f7:f5:ec:89:19:51:d3:6c:c2:8b:83:
                    25:8b:15:fb:8c:eb:82:0f:f9:bc:75:86:93:b5:5d:
                    de:e1:1d:11:06:f4:3a:74:cd:a4:10:0e:1f:35:b8:
                    7b:b1:fb:51:19:a7:d0:0b:a6:5e:ad:3d:01:9f:85:
                    f8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AE:60:F1:A9:7D:4C:5A:B1:F4:0F:30:19:10:F1:06:23:06:68:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2587f55-6fda-4e04-9968-9e4e95d6fce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.56.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:91:ca:eb:aa:a2:44:5e:cf:b8:db:8b:c5:fd:99:0b:b5:50:
         90:17:1a:96:2a:87:73:47:15:be:f8:c8:1d:95:a9:5e:58:1b:
         f5:0d:f5:ea:73:28:3c:af:7b:b6:cc:4a:a5:31:7a:71:fa:43:
         c0:da:ca:a0:ba:dd:35:6a:06:c1:53:f3:cb:2a:ec:b8:7b:65:
         39:05:5e:94:fb:0d:34:d0:6c:5a:89:d1:51:42:df:25:c1:6e:
         d4:64:15:04:ef:64:8a:3e:6a:2a:00:4e:ec:56:f8:ef:f1:6b:
         d0:25:f9:06:0e:94:1f:7c:99:18:0c:5e:b5:ff:11:f5:90:0d:
         55:44:59:fa:d4:3d:1f:02:c2:9b:71:12:73:bb:4d:df:a1:17:
         27:df:0c:4f:65:ee:57:3c:59:63:47:7f:c7:89:36:d2:37:9f:
         1e:37:1d:bc:a8:04:a7:7e:30:86:dc:d9:e2:ad:29:42:d0:1c:
         f0:62:59:bf:fc:29:a7:23:9d:52:3b:0a:8f:35:d5:bd:1e:96:
         31:c8:40:5f:1d:47:2c:1d:82:88:ea:9d:70:4b:2f:2a:44:e8:
         c5:20:a2:0c:3b:c6:fe:b9:ba:c2:fa:27:e8:64:00:a0:bf:10:
         20:da:d9:b1:95:6c:da:a8:77:2e:0b:36:b4:a3:ea:f3:9e:38:
         2f:14:d5:53
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUYcOze1a6RRVPO5MiW3NoaOBDmLQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEzMDAwMDAwWhcNMjQwNjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMzljNTEzNWU1NmVhNzgwZGIyMzgwNDE0MTkwODYyNDg1
NjEwNWEzMDhjZWY3ZjQwZGMzN2M3ZTQ3ZGQwOTMzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCNgF7q2CL1ueLv7NlUG1a336KRXS7MJVYq4kIfrkL6dJr9
kj3AlVayjuO00sL5nJBtdG1qZ0Yyo3IwoarV3VKCifdFTQVxL2Y9VrxICvvYxfDM
vvqp3c47hFd1eGdW4nR0njcmibJqjezryqGNzdAHlbGmTYB9MqMIUcGJAdY4hwZU
X9mrPxGOnuX4DqzjBxeHaGiTuR1AqwV9LoxudESbbPvRLbn4pLNiEOfmlM/bPeHf
hvuvrs3R0toe8UHOsMVW8yN+wjL39eyJGVHTbMKLgyWLFfuM64IP+bx1hpO1Xd7h
HREG9Dp0zaQQDh81uHux+1EZp9ALpl6tPQGfhfjfAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUea5g8al9TFqx9A8wGRDxBiMGaJcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QyNTg3ZjU1LTZmZGEtNGUwNC05OTY4LTllNGU5NWQ2ZmNlMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCeODANBgkqhkiG9w0BAQsFAAOCAQEAA5HK66qiRF7PuNuLxf2ZC7VQkBca
liqHc0cVvvjIHZWpXlgb9Q316nMoPK97tsxKpTF6cfpDwNrKoLrdNWoGwVPzyyrs
uHtlOQVelPsNNNBsWonRUULfJcFu1GQVBO9kij5qKgBO7Fb47/Fr0CX5Bg6UH3yZ
GAxetf8R9ZANVURZ+tQ9HwLCm3ESc7tN36EXJ98MT2XuVzxZY0d/x4k20jefHjcd
vKgEp34whtzZ4q0pQtAc8GJZv/wppyOdUjsKjzXVvR6WMchAXx1HLB2CiOqdcEsv
KkToxSCiDDvG/rm6wvon6GQAoL8QINrZsZVs2qh3Lgs2tKPq8544LxTVUw==
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:04 2024 by rpki-client on console-fra.rpki-client.org