Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e8571-dd75-4fa7-8974-4183693302fd.roa
File:                     d39e8571-dd75-4fa7-8974-4183693302fd.roa (raw, json)
Hash identifier:          21Yw9wEIqz+MF3S23+cmIbTU62Y1WeWf4VwsXpGtz6I=
Subject key identifier:   7F:E8:EB:0F:AB:D5:DD:37:D1:E2:83:59:5D:C3:8E:7F:BF:BB:8F:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07A1F11F3363C7208ED12B0CA2958457F7B4CB39
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e8571-dd75-4fa7-8974-4183693302fd.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        40.210.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a1:f1:1f:33:63:c7:20:8e:d1:2b:0c:a2:95:84:57:f7:b4:cb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=e350f7a5dc1aa78ccdfb3905e1100bbdbe90b643667223f9fbdd2e042b85cef2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:f2:32:de:fb:f7:a3:2f:07:7d:ce:55:47:
                    16:50:96:dc:f4:e1:51:59:f3:4e:e3:ec:5d:9e:35:
                    f1:df:e8:20:05:c9:ea:58:09:96:a1:73:38:96:3e:
                    09:17:0f:16:fd:cb:b3:27:aa:a9:2a:a2:51:a6:9c:
                    60:90:f6:4c:fd:72:6d:82:4d:f5:e2:d2:60:40:32:
                    d2:a4:c5:a8:cc:b4:bb:52:9c:ba:8e:55:43:6e:42:
                    67:37:af:ec:f0:c1:71:74:df:58:19:a0:99:69:9c:
                    88:a1:c5:e1:d8:1b:08:fc:a3:24:9e:bb:51:f7:92:
                    e6:5f:bb:31:5c:27:81:fe:08:28:79:04:f2:48:d4:
                    4d:ba:4c:e6:2b:74:6d:3b:29:b8:81:26:88:9a:64:
                    ed:df:af:86:bf:31:8a:8d:04:a6:64:1f:6e:ef:63:
                    e1:fe:c9:70:1c:d4:a8:be:1f:d6:c4:10:8b:98:fa:
                    b3:34:d4:1b:e7:5d:41:ad:5d:7e:c4:e5:ec:9e:a1:
                    08:85:e4:04:72:93:ac:2f:01:1d:f8:17:77:4d:76:
                    96:3a:36:0b:e1:9c:1c:1f:db:cb:9f:c8:ea:fb:03:
                    91:f3:ed:8a:d2:3d:99:52:14:c1:db:4d:f9:fd:63:
                    41:b8:3e:8a:13:c1:c7:81:89:c7:d4:09:3a:62:3e:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E8:EB:0F:AB:D5:DD:37:D1:E2:83:59:5D:C3:8E:7F:BF:BB:8F:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e8571-dd75-4fa7-8974-4183693302fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:7b:49:a1:eb:ea:a9:10:a6:c8:12:eb:b6:a8:12:66:9b:70:
         3f:1e:08:79:88:49:87:2d:5e:43:94:cc:11:ab:9a:8b:b2:77:
         21:a7:5f:32:6b:65:20:68:02:3d:13:22:f1:ef:a9:cf:70:d9:
         d0:86:bd:50:7c:30:2f:cc:96:f9:79:bc:e9:05:f1:ed:28:0e:
         d1:a1:44:cc:1c:b1:52:15:bd:f0:d3:2f:56:7c:4f:9c:6c:d2:
         83:76:b1:4f:e0:b1:42:7d:80:df:d2:6d:a5:8a:d9:49:1c:47:
         34:b8:6a:02:c3:79:2a:9d:71:5e:90:08:52:f0:d6:06:21:60:
         7a:18:5d:fb:6c:94:37:3d:66:48:3a:2a:97:c0:d6:f4:60:c2:
         dd:30:6e:2f:47:c2:b1:d3:47:0c:f9:0c:45:1a:a2:a7:86:18:
         76:5e:7a:06:ee:17:93:64:91:35:6f:13:b1:d6:1b:8f:ed:c5:
         c5:cc:e0:3b:9b:e4:1d:61:06:4f:9a:67:1b:bd:dd:aa:ee:e4:
         83:0e:7b:86:92:97:59:b1:e9:d1:b5:e2:0f:32:d3:99:dd:12:
         ef:7d:5b:67:db:7c:da:30:2d:86:de:65:8a:89:11:44:e7:a3:
         b5:de:3c:05:0f:d9:5a:12:30:c6:2c:e9:08:6c:33:86:8e:d3:
         b3:2c:c6:24
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUB6HxHzNjxyCO0SsMopWEV/e0yzkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMzUwZjdhNWRjMWFhNzhjY2RmYjM5MDVlMTEwMGJiZGJl
OTBiNjQzNjY3MjIzZjlmYmRkMmUwNDJiODVjZWYyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXTPIy3vv3oy8Hfc5VRxZQltz04VFZ807j7F2eNfHf6CAF
yepYCZahcziWPgkXDxb9y7MnqqkqolGmnGCQ9kz9cm2CTfXi0mBAMtKkxajMtLtS
nLqOVUNuQmc3r+zwwXF031gZoJlpnIihxeHYGwj8oySeu1H3kuZfuzFcJ4H+CCh5
BPJI1E26TOYrdG07KbiBJoiaZO3fr4a/MYqNBKZkH27vY+H+yXAc1Ki+H9bEEIuY
+rM01BvnXUGtXX7E5eyeoQiF5ARyk6wvAR34F3dNdpY6NgvhnBwf28ufyOr7A5Hz
7YrSPZlSFMHbTfn9Y0G4PooTwceBicfUCTpiPpn/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUf+jrD6vV3TfR4oNZXcOOf7+7j24wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QzOWU4NTcxLWRkNzUtNGZhNy04OTc0LTQxODM2OTMzMDJmZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAo0jANBgkqhkiG9w0BAQsFAAOCAQEAsHtJoevqqRCmyBLrtqgSZptwPx4I
eYhJhy1eQ5TMEauai7J3IadfMmtlIGgCPRMi8e+pz3DZ0Ia9UHwwL8yW+Xm86QXx
7SgO0aFEzByxUhW98NMvVnxPnGzSg3axT+CxQn2A39JtpYrZSRxHNLhqAsN5Kp1x
XpAIUvDWBiFgehhd+2yUNz1mSDoql8DW9GDC3TBuL0fCsdNHDPkMRRqip4YYdl56
Bu4Xk2SRNW8TsdYbj+3FxczgO5vkHWEGT5pnG73dqu7kgw57hpKXWbHp0bXiDzLT
md0S731bZ9t82jAtht5liokRROejtd48BQ/ZWhIwxizpCGwzho7TsyzGJA==
-----END CERTIFICATE-----
Generated at Sun May 5 01:12:14 2024 by rpki-client on console-ams.rpki-client.org