Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6d3233a-3d4d-453d-9bfc-83b1a7f67668.roa
File:                     d6d3233a-3d4d-453d-9bfc-83b1a7f67668.roa (raw, json)
Hash identifier:          nEEVMLMnzCRBhLo59d//pU9HnsvzNzpa71giM26aQiU=
Subject key identifier:   68:0D:1B:A6:0C:1E:4F:33:3E:05:8F:20:B3:2A:6D:AB:7A:78:64:2C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1BA8825A405754BA98D6B9F69BE0F423816F1A39
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6d3233a-3d4d-453d-9bfc-83b1a7f67668.roa
Signing time:             Wed 12 Jun 2024 00:00:00 +0000
ROA not before:           Wed 12 Jun 2024 00:00:00 +0000
ROA not after:            Wed 17 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a8:82:5a:40:57:54:ba:98:d6:b9:f6:9b:e0:f4:23:81:6f:1a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 12 00:00:00 2024 GMT
            Not After : Jul 17 23:59:59 2024 GMT
        Subject: serialNumber=1d08baad593770532027ef5ee8e605345841f9013bd3865cc5b976dcb7d3ddd2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:f2:d1:c5:a6:59:11:7a:3c:21:8e:59:c1:
                    b5:f8:b7:9f:21:56:6d:c5:55:03:56:a4:9d:fc:a9:
                    5a:82:02:e8:1d:5a:92:7a:69:4b:39:9e:a2:11:79:
                    26:c9:fc:f7:9f:2c:7d:61:23:5b:68:81:d9:e4:59:
                    9c:b9:b1:90:c4:14:1a:c7:19:97:db:df:1e:bf:1b:
                    97:bf:15:cf:ea:c7:20:cc:e6:0e:31:7b:d0:14:4b:
                    20:24:1b:84:31:5f:f3:00:f7:98:c1:e7:19:38:8d:
                    b8:c4:ea:c6:a3:e4:c7:b4:2d:01:f8:89:e5:0e:0a:
                    d6:32:53:6b:cf:a2:2d:c1:69:dd:11:b4:85:be:f2:
                    92:a0:07:d1:3d:d8:9d:7f:c2:99:af:70:c7:fc:b3:
                    0b:c9:8f:42:14:32:01:a5:dd:d8:48:d6:d5:ea:79:
                    b9:9b:b6:0e:29:e8:34:3d:db:3f:bd:b6:32:0d:a3:
                    27:33:71:3e:d0:0b:99:9c:e6:5b:af:62:25:f9:ff:
                    1a:ee:99:33:62:75:99:d0:01:e8:1a:59:e8:57:58:
                    a4:53:f9:5f:6e:18:5b:17:7a:01:76:dd:ae:cf:1e:
                    28:0a:a1:81:98:14:a3:2e:98:52:80:d2:55:a4:b8:
                    49:91:9c:5b:16:10:80:f8:92:3c:93:e0:48:62:c6:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0D:1B:A6:0C:1E:4F:33:3E:05:8F:20:B3:2A:6D:AB:7A:78:64:2C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6d3233a-3d4d-453d-9bfc-83b1a7f67668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:88:81:06:c4:37:e6:d5:3a:70:40:3d:cb:0b:17:83:74:a4:
         b6:c5:68:53:2a:17:01:6b:7f:8b:5d:e6:8e:62:08:9c:54:8d:
         83:57:2a:fb:b9:09:a0:7a:16:81:01:84:44:cd:67:ed:75:b2:
         ca:ef:09:7d:64:3e:b2:68:dd:94:a2:44:2e:51:b1:93:5a:5a:
         51:cf:b0:19:2c:86:e6:86:d4:43:c3:5e:2a:c1:a9:c5:41:57:
         d6:e4:5a:6c:3d:23:f4:73:9c:51:96:e4:78:02:ba:3f:6d:c8:
         a5:b6:1b:bf:39:48:07:dc:ee:14:2c:b8:be:57:95:35:ec:62:
         63:ee:35:bd:1b:76:c4:29:b9:49:85:1b:60:a5:8e:dd:f1:8e:
         10:0d:1e:16:22:ed:c5:dc:40:73:e5:8e:b9:f1:81:22:94:af:
         42:4e:97:f6:60:af:82:cc:e7:8e:07:ad:f4:96:81:28:27:f9:
         8c:2b:81:1e:55:b6:df:4b:bc:24:4f:20:c5:99:a2:f3:4b:e1:
         64:c4:38:43:74:f4:a5:f6:92:6c:f2:21:28:08:a4:4d:ce:0b:
         1a:ff:15:17:70:55:f6:dd:f8:4f:97:cf:9a:ff:c4:63:bf:fc:
         4e:9a:0e:b3:50:39:db:e4:d9:3b:f2:96:ad:7e:0a:26:d4:0b:
         b1:b7:d1:d3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUG6iCWkBXVLqY1rn2m+D0I4FvGjkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNjEyMDAwMDAwWhcNMjQwNzE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZDA4YmFhZDU5Mzc3MDUzMjAyN2VmNWVlOGU2MDUzNDU4
NDFmOTAxM2JkMzg2NWNjNWI5NzZkY2I3ZDNkZGQyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC22/LRxaZZEXo8IY5ZwbX4t58hVm3FVQNWpJ38qVqCAugd
WpJ6aUs5nqIReSbJ/PefLH1hI1togdnkWZy5sZDEFBrHGZfb3x6/G5e/Fc/qxyDM
5g4xe9AUSyAkG4QxX/MA95jB5xk4jbjE6saj5Me0LQH4ieUOCtYyU2vPoi3Bad0R
tIW+8pKgB9E92J1/wpmvcMf8swvJj0IUMgGl3dhI1tXqebmbtg4p6DQ92z+9tjIN
oyczcT7QC5mc5luvYiX5/xrumTNidZnQAegaWehXWKRT+V9uGFsXegF23a7PHigK
oYGYFKMumFKA0lWkuEmRnFsWEID4kjyT4EhixqFJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUaA0bpgweTzM+BY8gsyptq3p4ZCwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q2ZDMyMzNhLTNkNGQtNDUzZC05YmZjLTgzYjFhN2Y2NzY2OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABmIgQbEN+bVOnBAPcsLF4N0pLbF
aFMqFwFrf4td5o5iCJxUjYNXKvu5CaB6FoEBhETNZ+11ssrvCX1kPrJo3ZSiRC5R
sZNaWlHPsBkshuaG1EPDXirBqcVBV9bkWmw9I/RznFGW5HgCuj9tyKW2G785SAfc
7hQsuL5XlTXsYmPuNb0bdsQpuUmFG2Cljt3xjhANHhYi7cXcQHPljrnxgSKUr0JO
l/Zgr4LM544HrfSWgSgn+YwrgR5Vtt9LvCRPIMWZovNL4WTEOEN09KX2kmzyISgI
pE3OCxr/FRdwVfbd+E+Xz5r/xGO//E6aDrNQOdvk2Tvylq1+CibUC7G30dM=
-----END CERTIFICATE-----
Generated at Wed Jun 12 22:42:17 2024 by rpki-client on console-ams.rpki-client.org