Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4939d5-bdf6-4674-b927-d463fb918e11.roa
File:                     0e4939d5-bdf6-4674-b927-d463fb918e11.roa (raw, json)
Hash identifier:          zyP1YxbctO1lj5nxi+owWjUloXcOXEF9yGsNQOAwRjY=
Subject key identifier:   29:8C:84:D4:C1:B3:08:9C:34:4E:AC:7C:DB:04:23:83:0B:DD:BF:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       066A7DC18210275E3ABD49F6C158303B54C47E15
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4939d5-bdf6-4674-b927-d463fb918e11.roa
Signing time:             Mon 28 Aug 2023 00:00:00 +0000
ROA not before:           Mon 28 Aug 2023 00:00:00 +0000
ROA not after:            Mon 02 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        162.85.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Aug 2023 08:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6a:7d:c1:82:10:27:5e:3a:bd:49:f6:c1:58:30:3b:54:c4:7e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 28 00:00:00 2023 GMT
            Not After : Oct  2 23:59:59 2023 GMT
        Subject: serialNumber=cb7a016ca281b1fbd350511d63b21ef4a2c9ce79aee2bc59a9d274ebcf491108, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:da:aa:42:4a:73:df:dd:67:0b:0d:3e:0b:
                    73:ea:97:28:e9:ce:6f:15:28:dd:7d:d9:4c:46:6b:
                    0f:75:77:96:b0:76:8a:c4:0d:35:f1:ab:32:04:ec:
                    c6:5b:bb:50:78:72:18:e3:ae:c9:45:ce:94:43:6b:
                    40:a6:3d:f5:f5:9e:0d:dd:be:94:c3:bf:03:86:b1:
                    fd:b0:63:9a:e5:7f:1a:f3:60:ac:6f:6c:a9:88:71:
                    e4:52:5c:af:7d:23:c8:9e:18:72:f8:c6:49:5a:c4:
                    d1:ff:6b:4e:c9:3f:84:1b:8b:f7:1c:74:3c:09:09:
                    91:cb:c8:70:9d:29:e7:67:74:83:97:3d:01:b7:2a:
                    83:0f:ee:64:f5:4a:b5:80:c6:bd:db:ef:bb:2c:47:
                    c8:28:65:c8:94:d0:89:c6:f7:82:04:d1:47:bd:26:
                    70:dd:5c:a5:a7:e1:4b:9b:d6:f1:7b:71:45:6c:d1:
                    63:a6:63:f7:f6:cc:80:97:86:d4:d8:23:bf:b1:0e:
                    29:42:bf:63:8c:a9:9f:ac:21:32:f9:ec:0d:b3:1a:
                    07:1c:28:f6:5c:08:f9:59:ab:97:63:42:70:56:a4:
                    c5:93:66:10:f0:bb:8e:d0:20:97:7c:44:f1:7d:fc:
                    9b:6d:c2:5a:61:e9:0e:bc:4a:d6:2a:35:d6:7e:e7:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8C:84:D4:C1:B3:08:9C:34:4E:AC:7C:DB:04:23:83:0B:DD:BF:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4939d5-bdf6-4674-b927-d463fb918e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:59:75:fa:1a:9e:82:85:a9:6c:93:49:81:a0:7d:53:79:8c:
         32:86:e8:05:70:1c:09:81:d5:71:5c:16:31:4f:23:87:99:8a:
         54:d2:41:19:53:dd:ed:24:d8:36:7d:f9:26:59:68:5d:1c:b7:
         6d:bd:99:b5:89:16:02:c5:4b:0f:2a:e4:c0:3a:be:14:5a:f7:
         a7:5e:26:1c:bc:18:af:67:0b:28:09:a3:cf:f8:cc:83:0c:3c:
         66:bd:57:02:6f:5f:fc:c0:8b:b3:27:81:49:25:b1:95:ae:b0:
         77:f8:f7:13:d0:2d:ac:37:cd:c0:59:b6:d7:57:b9:5b:1c:5c:
         fd:91:ca:95:61:54:71:3b:4e:5a:76:5e:25:64:5d:7b:cc:18:
         be:e4:50:b1:22:02:48:e2:ec:55:cf:4e:04:1a:cd:25:a9:e8:
         d7:ea:e1:a1:32:bd:e4:f9:ac:45:9f:93:25:bd:4c:22:fb:8f:
         71:af:06:ff:0b:6a:9c:47:4f:5d:1d:3e:3a:e0:0a:24:1e:72:
         d3:68:ac:b7:ca:1a:5e:9b:e4:d3:ac:6a:2a:ba:19:34:aa:7f:
         b4:d5:a9:91:9e:d5:44:bd:c3:c5:43:11:82:bc:d4:eb:66:d2:
         ed:fb:52:7b:43:2d:ad:c8:aa:04:25:15:f9:dd:ff:a7:13:93:
         2a:21:a5:e7
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBmp9wYIQJ146vUn2wVgwO1TEfhUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYjdhMDE2Y2EyODFiMWZiZDM1MDUxMWQ2M2IyMWVmNGEy
YzljZTc5YWVlMmJjNTlhOWQyNzRlYmNmNDkxMTA4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeTdqqQkpz391nCw0+C3Pqlyjpzm8VKN192UxGaw91d5aw
dorEDTXxqzIE7MZbu1B4chjjrslFzpRDa0CmPfX1ng3dvpTDvwOGsf2wY5rlfxrz
YKxvbKmIceRSXK99I8ieGHL4xklaxNH/a07JP4Qbi/ccdDwJCZHLyHCdKedndIOX
PQG3KoMP7mT1SrWAxr3b77ssR8goZciU0InG94IE0Ue9JnDdXKWn4Uub1vF7cUVs
0WOmY/f2zICXhtTYI7+xDilCv2OMqZ+sITL57A2zGgccKPZcCPlZq5djQnBWpMWT
ZhDwu47QIJd8RPF9/Jttwlph6Q68StYqNdZ+53aVAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUKYyE1MGzCJw0Tqx82wQjgwvdvy8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBlNDkzOWQ1LWJkZjYtNDY3NC1iOTI3LWQ0NjNmYjkxOGUxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCiVTANBgkqhkiG9w0BAQsFAAOCAQEAill1+hqegoWpbJNJgaB9U3mMMobo
BXAcCYHVcVwWMU8jh5mKVNJBGVPd7STYNn35JlloXRy3bb2ZtYkWAsVLDyrkwDq+
FFr3p14mHLwYr2cLKAmjz/jMgww8Zr1XAm9f/MCLsyeBSSWxla6wd/j3E9AtrDfN
wFm211e5Wxxc/ZHKlWFUcTtOWnZeJWRde8wYvuRQsSICSOLsVc9OBBrNJano1+rh
oTK95PmsRZ+TJb1MIvuPca8G/wtqnEdPXR0+OuAKJB5y02ist8oaXpvk06xqKroZ
NKp/tNWpkZ7VRL3DxUMRgrzU62bS7ftSe0MtrciqBCUV+d3/pxOTKiGl5w==
-----END CERTIFICATE-----
Generated at Mon Aug 28 20:45:32 2023 by rpki-client on console-ams.rpki-client.org