Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa
File:                     05ae7013-1fbb-4d48-8f95-be150236ce6c.roa (raw, json)
Hash identifier:          1XFOJLnwpoXPiraEmgINPQpczI9taUX/l1pobK89b+A=
Subject key identifier:   D2:86:90:C7:F1:95:B5:10:1E:33:0B:FD:63:D1:FD:B5:01:5E:DB:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       331D26B11EE5958BEAA494B720442054271C7B0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        151.148.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1d:26:b1:1e:e5:95:8b:ea:a4:94:b7:20:44:20:54:27:1c:7b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=94253ddc6b54da9645336fcb92242aa69b4214043705b7869156ca749cf06c92, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:18:72:e5:73:c9:fc:72:44:79:f7:26:9d:
                    d7:bc:90:17:22:31:6d:29:2f:9e:0f:8a:ea:8c:5d:
                    f2:d0:db:ff:27:c6:90:db:14:1a:54:b5:ef:d5:fe:
                    f5:c9:e6:0b:8f:56:4c:b6:be:71:8c:ea:b7:bb:d3:
                    b6:4d:d3:30:32:d2:fa:8a:66:af:e4:6f:51:b6:e7:
                    37:3a:17:38:64:de:51:a6:10:88:49:3b:30:78:9a:
                    03:b7:9b:39:a7:ab:f1:69:d6:bf:fe:36:0d:b4:82:
                    a9:2f:7f:ef:27:38:ee:06:a0:c1:90:c5:9f:d8:2c:
                    2d:1a:7f:2f:dd:c9:60:d6:dd:50:98:43:e7:d0:43:
                    b0:2c:99:14:46:b7:27:04:53:41:7b:01:34:5c:98:
                    7b:fb:c2:14:12:f1:a9:63:f0:c5:d4:3a:69:9f:11:
                    c9:48:64:1f:a9:91:cd:c6:0e:b7:fc:ce:e7:a0:48:
                    7c:07:c5:58:5e:21:07:cc:90:68:3e:db:1e:e4:2a:
                    40:2b:3a:df:cb:64:dc:af:ef:cf:44:d2:08:13:42:
                    bd:d3:a8:e6:ac:f5:cd:56:ad:e3:8a:29:90:35:cb:
                    4e:be:be:9a:6f:4c:73:e8:84:4f:e7:44:7a:11:56:
                    40:20:ed:33:44:c0:5c:fd:99:ad:e2:43:14:ef:eb:
                    1c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:86:90:C7:F1:95:B5:10:1E:33:0B:FD:63:D1:FD:B5:01:5E:DB:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:7d:87:60:62:67:f1:95:24:2f:eb:18:66:f5:de:20:b1:8b:
         35:5e:d7:b9:94:8a:2f:d4:59:17:a4:11:f3:44:2b:3f:5d:cc:
         58:e8:e9:b5:98:ca:14:18:08:26:da:8d:74:7c:5b:64:e4:eb:
         5e:18:73:f9:b7:ac:64:60:82:c5:e0:71:b2:1c:a5:eb:f5:7b:
         44:7a:0a:b1:99:f9:3f:65:cd:e8:50:cb:3c:dd:7b:74:67:77:
         0e:30:21:fb:89:3f:2f:1c:06:72:d4:c2:84:dd:09:c7:21:1b:
         e8:73:d6:29:72:c8:5b:c2:bc:15:ce:17:4b:fc:63:36:e4:c6:
         c1:21:c4:aa:0f:68:29:a1:fb:1d:b2:72:2e:c6:d3:17:17:9e:
         97:42:8a:59:67:cd:c6:69:d7:34:ef:db:1d:1f:bf:a1:24:68:
         75:c8:fe:47:5f:38:56:28:6d:54:54:5c:84:ce:05:df:ef:a8:
         b4:c4:88:7d:00:91:fa:39:9d:d8:03:2b:39:c4:68:61:56:63:
         a2:af:32:5a:41:8b:d7:9e:ca:10:ca:ab:8e:39:5b:cf:3e:8d:
         3e:44:3c:da:87:36:cc:83:20:80:8c:df:d3:2f:2d:57:12:5c:
         63:f4:6c:b4:e4:3e:32:4d:43:84:15:cf:01:79:9a:bf:f9:4e:
         6e:85:8c:e3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMx0msR7llYvqpJS3IEQgVCccew8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDI1M2RkYzZiNTRkYTk2NDUzMzZmY2I5MjI0MmFhNjli
NDIxNDA0MzcwNWI3ODY5MTU2Y2E3NDljZjA2YzkyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzxhhy5XPJ/HJEefcmnde8kBciMW0pL54PiuqMXfLQ2/8n
xpDbFBpUte/V/vXJ5guPVky2vnGM6re707ZN0zAy0vqKZq/kb1G25zc6Fzhk3lGm
EIhJOzB4mgO3mzmnq/Fp1r/+Ng20gqkvf+8nOO4GoMGQxZ/YLC0afy/dyWDW3VCY
Q+fQQ7AsmRRGtycEU0F7ATRcmHv7whQS8alj8MXUOmmfEclIZB+pkc3GDrf8zueg
SHwHxVheIQfMkGg+2x7kKkArOt/LZNyv789E0ggTQr3TqOas9c1WreOKKZA1y06+
vppvTHPohE/nRHoRVkAg7TNEwFz9ma3iQxTv6xxvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0oaQx/GVtRAeMwv9Y9H9tQFe2+4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA1YWU3MDEzLTFmYmItNGQ0OC04Zjk1LWJlMTUwMjM2Y2U2Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACXlCQwDQYJKoZIhvcNAQELBQADggEBAEd9h2BiZ/GVJC/rGGb13iCxizVe
17mUii/UWRekEfNEKz9dzFjo6bWYyhQYCCbajXR8W2Tk614Yc/m3rGRggsXgcbIc
pev1e0R6CrGZ+T9lzehQyzzde3Rndw4wIfuJPy8cBnLUwoTdCcchG+hz1ilyyFvC
vBXOF0v8YzbkxsEhxKoPaCmh+x2yci7G0xcXnpdCillnzcZp1zTv2x0fv6EkaHXI
/kdfOFYobVRUXITOBd/vqLTEiH0Akfo5ndgDKznEaGFWY6KvMlpBi9eeyhDKq445
W88+jT5EPNqHNsyDIICM39MvLVcSXGP0bLTkPjJNQ4QVzwF5mr/5Tm6FjOM=
-----END CERTIFICATE-----
Generated at Thu May 2 08:02:23 2024 by rpki-client on console-ams.rpki-client.org