Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04ff99ad-1a1f-4006-8a3e-ac6c60945d45.roa
File:                     04ff99ad-1a1f-4006-8a3e-ac6c60945d45.roa (raw, json)
Hash identifier:          Yuwpv2lDvgMOlvB0DiEYCT77fYzJ8gle8hk316/70PA=
Subject key identifier:   8B:A5:11:7B:78:0B:EA:2A:9C:2A:7D:86:08:55:6B:8E:BB:B7:25:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       373AC59003CA48226B593D07B08BEF75E80BF082
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04ff99ad-1a1f-4006-8a3e-ac6c60945d45.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.116.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3a:c5:90:03:ca:48:22:6b:59:3d:07:b0:8b:ef:75:e8:0b:f0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=a52feae69510db5b8def8a2592cda9903dc1a676241c0df33fc72a33b09f4204, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:5f:17:69:57:b7:66:f3:89:57:c3:cd:95:
                    e6:69:3a:a6:c6:b7:06:08:f0:5d:84:8f:c4:af:ad:
                    c6:e5:33:87:53:ed:cd:93:db:66:6d:c3:8f:ac:b1:
                    6e:22:e4:82:41:15:0d:0a:16:48:a8:3f:38:0a:99:
                    d5:4e:a5:f7:23:92:be:ba:1d:83:17:9c:4a:19:5c:
                    dd:f8:61:11:39:07:f0:76:a5:98:0d:57:bd:66:a2:
                    b4:14:9b:7a:22:18:10:8a:ef:7d:d3:4e:53:4b:37:
                    43:af:9a:be:e1:91:54:5d:7e:5b:72:b0:46:4c:65:
                    d7:6d:38:7a:a6:09:27:09:fb:de:dd:c3:21:93:0c:
                    e1:fb:a0:9e:41:64:49:79:4f:04:42:1a:48:7e:dd:
                    ca:96:6a:98:81:19:70:bd:75:90:ff:04:3d:d8:73:
                    b0:46:10:d3:e0:5d:6a:71:76:21:5e:4a:0b:b3:c0:
                    ac:52:d9:0a:05:7a:d9:29:46:dc:a3:6e:3e:5e:80:
                    02:2b:b0:c0:15:c5:cd:5f:7e:2e:07:a7:1c:6d:77:
                    b5:67:ab:ba:13:af:84:ac:47:c6:38:fe:8c:ef:84:
                    5c:ab:e3:ef:0f:16:40:b6:d3:e5:49:3b:cd:e8:f8:
                    21:be:01:b2:05:27:68:69:99:b1:0c:df:bf:e1:f3:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A5:11:7B:78:0B:EA:2A:9C:2A:7D:86:08:55:6B:8E:BB:B7:25:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04ff99ad-1a1f-4006-8a3e-ac6c60945d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.116.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:74:42:04:b1:3c:10:e0:21:3e:6b:ed:a5:bc:b7:81:29:24:
         50:d1:07:c4:1f:14:4f:fe:b8:87:40:70:06:85:04:22:57:50:
         99:48:1b:8b:26:26:df:3e:be:6a:fd:2c:ee:b6:26:cd:a2:04:
         1b:55:39:cc:87:71:90:7d:59:ce:57:3e:56:26:ba:df:6a:f5:
         66:74:0c:c7:4a:21:a7:a3:77:b9:f7:f1:e1:12:62:14:e8:37:
         77:fe:6b:4c:28:eb:b7:fd:5d:0f:8c:97:01:2f:1c:b7:53:63:
         b4:bc:7c:9e:82:de:aa:c4:d0:94:96:66:18:9d:bd:75:6a:de:
         c9:a2:cb:20:b3:20:53:7e:0f:44:ab:6e:8a:21:36:d8:b9:45:
         28:54:0d:9e:e0:39:ac:70:48:c0:43:d8:88:73:76:35:6e:f1:
         81:1b:23:46:84:f1:da:a6:d5:c3:9e:ea:59:8f:17:11:fe:ea:
         2e:bd:33:0a:f5:a0:b9:04:d0:d9:ce:72:15:eb:ff:bd:39:7a:
         d2:7a:52:56:5d:9f:ef:c4:b8:18:ba:69:b6:3d:97:87:72:40:
         51:70:80:6b:a8:b1:6a:bf:65:0a:64:0a:ec:e7:3b:3b:89:c3:
         dc:82:60:34:dc:0e:49:c6:5f:3f:0d:7e:f3:a8:d3:71:f1:97:
         af:5b:96:6f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUNzrFkAPKSCJrWT0HsIvvdegL8IIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNTJmZWFlNjk1MTBkYjViOGRlZjhhMjU5MmNkYTk5MDNk
YzFhNjc2MjQxYzBkZjMzZmM3MmEzM2IwOWY0MjA0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbd18XaVe3ZvOJV8PNleZpOqbGtwYI8F2Ej8SvrcblM4dT
7c2T22Ztw4+ssW4i5IJBFQ0KFkioPzgKmdVOpfcjkr66HYMXnEoZXN34YRE5B/B2
pZgNV71morQUm3oiGBCK733TTlNLN0Ovmr7hkVRdfltysEZMZddtOHqmCScJ+97d
wyGTDOH7oJ5BZEl5TwRCGkh+3cqWapiBGXC9dZD/BD3Yc7BGENPgXWpxdiFeSguz
wKxS2QoFetkpRtyjbj5egAIrsMAVxc1ffi4Hpxxtd7Vnq7oTr4SsR8Y4/ozvhFyr
4+8PFkC20+VJO83o+CG+AbIFJ2hpmbEM37/h838DAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUi6URe3gL6iqcKn2GCFVrjru3JawwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA0ZmY5OWFkLTFhMWYtNDAwNi04YTNlLWFjNmM2MDk0NWQ0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2dDANBgkqhkiG9w0BAQsFAAOCAQEABnRCBLE8EOAhPmvtpby3gSkkUNEH
xB8UT/64h0BwBoUEIldQmUgbiyYm3z6+av0s7rYmzaIEG1U5zIdxkH1Zzlc+Via6
32r1ZnQMx0ohp6N3uffx4RJiFOg3d/5rTCjrt/1dD4yXAS8ct1NjtLx8noLeqsTQ
lJZmGJ29dWreyaLLILMgU34PRKtuiiE22LlFKFQNnuA5rHBIwEPYiHN2NW7xgRsj
RoTx2qbVw57qWY8XEf7qLr0zCvWguQTQ2c5yFev/vTl60npSVl2f78S4GLpptj2X
h3JAUXCAa6ixar9lCmQK7Oc7O4nD3IJgNNwOScZfPw1+86jTcfGXr1uWbw==
-----END CERTIFICATE-----
Generated at Thu May 2 08:02:23 2024 by rpki-client on console-ams.rpki-client.org