Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa
File:                     08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa (raw, json)
Hash identifier:          LxnYeJyHHmsbsZ+U8bWycQSn0G88Twlo6m/+YAsldlc=
Subject key identifier:   FA:CF:E3:E5:4C:B0:17:59:89:ED:BA:A2:1F:23:26:F0:56:FF:7C:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D1AC3D1BC4CAFFADD70009935A9861B0AF85395
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        104.153.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1a:c3:d1:bc:4c:af:fa:dd:70:00:99:35:a9:86:1b:0a:f8:53:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=249fa78f4d173baaeab91200328dc7731065d3e15a0df373fdd9cd23203e9fa7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:ca:7c:c4:82:a1:89:3b:4f:ac:5d:65:d5:
                    34:1c:ed:85:a2:6b:03:0e:06:0d:96:da:5e:fb:ec:
                    70:52:1e:88:df:b3:66:5c:6f:52:27:25:33:42:5d:
                    93:2b:5b:17:87:07:0e:5e:c6:fa:e8:05:39:6d:2d:
                    e3:71:1e:20:5b:90:88:21:ef:51:fa:07:ee:af:b5:
                    a1:c6:00:56:16:8e:5c:44:7c:4d:52:53:dd:07:0e:
                    30:89:05:80:80:e1:df:a8:e6:15:94:ea:12:83:15:
                    c4:d6:d6:75:01:ce:15:c7:42:20:3d:61:5d:6f:02:
                    7b:79:e8:1c:9f:11:53:32:5e:58:69:6f:4c:53:bd:
                    86:7d:3e:3c:05:e5:1d:c5:46:68:de:b4:a1:9d:64:
                    d1:39:53:3a:a9:7f:3c:0b:f2:f4:17:7b:71:38:d7:
                    e3:09:b8:af:ff:62:4d:91:55:50:be:c5:23:cf:f0:
                    fc:81:b1:ff:6c:91:bd:47:a7:50:50:a5:2c:ff:4c:
                    cd:7f:da:cf:73:d9:a3:94:d4:69:ec:cc:17:3d:94:
                    70:57:91:51:78:f1:15:0f:af:0a:18:b3:48:21:7f:
                    6f:b5:d8:63:be:47:dd:1c:b7:f1:fe:78:eb:68:2c:
                    a3:27:e3:c0:f1:bf:3a:44:46:7c:b9:23:68:98:e3:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CF:E3:E5:4C:B0:17:59:89:ED:BA:A2:1F:23:26:F0:56:FF:7C:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:33:c3:2b:7a:b1:74:10:21:4a:2a:0e:4c:5c:a5:83:0b:c4:
         c4:3c:ec:7d:af:2d:20:c6:35:38:fd:b0:1f:31:14:e8:38:bc:
         21:fa:cc:44:ec:d2:bb:0b:60:c4:6e:a3:3e:93:28:71:b9:17:
         b9:65:09:28:5a:69:e2:19:45:80:c9:b4:ca:05:5e:c2:1f:68:
         a5:01:4c:5e:4b:4e:a3:29:bc:ff:4b:7c:bb:f4:23:ce:33:7d:
         66:80:e8:a8:c8:e0:70:58:a1:be:40:02:4f:4f:74:77:ec:65:
         e7:aa:79:9a:e1:ae:09:4c:c5:b1:4f:33:56:e0:b2:51:8b:0b:
         40:8a:7b:83:49:d6:a0:71:31:ef:f7:b9:0a:ee:0a:12:12:5b:
         b5:a5:f7:bf:e6:24:12:0d:86:ba:66:03:65:a6:d9:ae:df:b8:
         54:32:b1:41:c6:cf:1e:46:82:92:dd:6e:04:2c:a0:d0:6a:fb:
         b2:b8:82:a0:71:8a:da:89:45:86:29:32:9b:37:b8:f8:76:f5:
         c3:15:10:ad:c2:ba:bf:58:1a:48:1f:94:fe:fd:39:be:40:76:
         35:1d:68:4b:05:1f:a8:ef:d6:66:2e:e1:8c:e2:d0:00:41:1e:
         ec:5e:e0:38:9a:1b:4f:20:b4:02:b4:5e:5f:f1:9d:09:9a:5c:
         05:11:97:8d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPRrD0bxMr/rdcACZNamGGwr4U5UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDlmYTc4ZjRkMTczYmFhZWFiOTEyMDAzMjhkYzc3MzEw
NjVkM2UxNWEwZGYzNzNmZGQ5Y2QyMzIwM2U5ZmE3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHI8p8xIKhiTtPrF1l1TQc7YWiawMOBg2W2l777HBSHojf
s2Zcb1InJTNCXZMrWxeHBw5exvroBTltLeNxHiBbkIgh71H6B+6vtaHGAFYWjlxE
fE1SU90HDjCJBYCA4d+o5hWU6hKDFcTW1nUBzhXHQiA9YV1vAnt56ByfEVMyXlhp
b0xTvYZ9PjwF5R3FRmjetKGdZNE5UzqpfzwL8vQXe3E41+MJuK//Yk2RVVC+xSPP
8PyBsf9skb1Hp1BQpSz/TM1/2s9z2aOU1GnszBc9lHBXkVF48RUPrwoYs0ghf2+1
2GO+R90ct/H+eOtoLKMn48DxvzpERny5I2iY43mjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+s/j5UywF1mJ7bqiHyMm8Fb/fBgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA4ZjY5MjFjLThiMzMtNDZlOC04Y2JkLWFlMGQ1MDE2YmI3MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABomXQwDQYJKoZIhvcNAQELBQADggEBANczwyt6sXQQIUoqDkxcpYMLxMQ8
7H2vLSDGNTj9sB8xFOg4vCH6zETs0rsLYMRuoz6TKHG5F7llCShaaeIZRYDJtMoF
XsIfaKUBTF5LTqMpvP9LfLv0I84zfWaA6KjI4HBYob5AAk9PdHfsZeeqeZrhrglM
xbFPM1bgslGLC0CKe4NJ1qBxMe/3uQruChISW7Wl97/mJBINhrpmA2Wm2a7fuFQy
sUHGzx5GgpLdbgQsoNBq+7K4gqBxitqJRYYpMps3uPh29cMVEK3Cur9YGkgflP79
Ob5AdjUdaEsFH6jv1mYu4Yzi0ABBHuxe4DiaG08gtAK0Xl/xnQmaXAURl40=
-----END CERTIFICATE-----
Generated at Wed Apr 24 15:48:54 2024 by rpki-client on console-ams.rpki-client.org