Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/184ac44b-0b64-4b5c-a6f0-b85c611c8065.roa
File:                     184ac44b-0b64-4b5c-a6f0-b85c611c8065.roa (raw, json)
Hash identifier:          w9wXJrtYTnA3pUjxy8YZN/ExOf3x3/LnvKLfFGsA8rQ=
Subject key identifier:   7A:D5:2F:7B:2D:F8:7D:4D:1C:69:1D:BE:7C:3F:07:A7:A2:BB:F6:AB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53C0981D57B60D58A17496DDAC4688ACFEC1A7A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/184ac44b-0b64-4b5c-a6f0-b85c611c8065.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        207.207.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c0:98:1d:57:b6:0d:58:a1:74:96:dd:ac:46:88:ac:fe:c1:a7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=a305a1854e98aa8ab41f49c95eef56cc45f0c4a2e687fc41c8ec1751d15f4463, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:26:45:a9:6d:42:69:5a:85:df:cb:80:35:42:
                    3b:05:2c:e6:67:c3:61:ff:7e:f3:25:67:0b:22:f1:
                    c7:96:d5:ef:19:7a:83:38:31:bd:b6:c4:99:f9:ad:
                    5a:bf:6f:af:67:93:b0:78:24:3c:51:65:8f:36:3d:
                    e9:a2:b7:4f:fb:60:99:c8:42:37:7c:50:a9:44:b9:
                    ec:7f:eb:7f:cd:00:02:ee:3e:66:2f:e0:f2:ac:cb:
                    b9:d0:71:79:fa:c6:42:fa:c7:8e:1f:dc:38:94:da:
                    51:c6:e9:23:d6:7c:22:03:bf:7c:f9:fc:11:9c:28:
                    d1:07:9b:55:4b:15:de:e5:5b:2f:0c:ba:28:06:99:
                    78:51:17:79:37:b5:74:8d:76:db:19:b5:82:44:38:
                    e4:7d:2e:58:bd:0b:4a:99:8c:58:3e:ed:62:a3:5e:
                    2f:8d:ff:c2:97:10:0a:87:ad:ba:13:6b:31:65:da:
                    a3:53:a1:47:80:a9:f9:e8:72:d2:9b:56:8d:7c:c5:
                    e0:3e:3c:b8:19:67:11:51:91:05:fd:22:6a:95:90:
                    e1:7e:53:3a:d1:c8:f3:a3:c7:cd:e2:2a:c3:82:ff:
                    70:29:9a:36:4a:93:23:30:5f:10:12:da:00:b7:82:
                    59:b3:e2:6f:08:f0:4c:be:e5:5c:6b:d4:af:d5:2e:
                    a2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D5:2F:7B:2D:F8:7D:4D:1C:69:1D:BE:7C:3F:07:A7:A2:BB:F6:AB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/184ac44b-0b64-4b5c-a6f0-b85c611c8065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:af:1a:a9:83:64:ea:6d:9d:8c:f5:53:9a:6b:3b:b1:4c:d9:
         2e:b6:14:02:16:5d:a4:08:8f:9c:17:49:eb:38:f7:54:af:67:
         ae:11:9c:cd:55:9a:22:11:bc:6d:67:8c:c2:a5:00:f0:ff:cf:
         eb:0f:48:d2:7c:73:9b:9f:1e:d1:a4:57:83:f2:e1:46:94:7f:
         fb:80:a1:48:1a:a9:be:bd:c7:ed:ad:a3:f8:bf:d2:c8:28:fd:
         6d:46:b2:8e:1c:f1:51:15:45:fa:22:a3:35:47:20:ed:84:bd:
         fa:c1:e7:8f:12:22:2d:4a:f3:9b:2d:5e:1f:5e:2b:8d:d0:32:
         26:aa:d5:3c:a0:39:33:4d:f6:f7:e2:3b:b4:3f:e5:ea:3d:f8:
         42:a2:ac:6e:e4:2f:f5:c4:ca:3b:32:57:47:81:35:7a:61:d6:
         a1:6e:ed:6f:b6:d7:1e:cd:53:9c:4b:37:fc:42:fe:9e:fb:97:
         a7:f6:15:ba:d0:0a:b6:ab:2f:e3:64:1e:13:43:61:bd:d0:d6:
         fd:01:35:51:84:e8:2a:8b:7c:46:81:f1:2e:eb:0e:10:bb:68:
         0e:23:94:97:5a:ef:33:26:fb:f8:b5:9c:ed:36:eb:23:00:c1:
         a2:10:52:7f:22:b1:ea:ac:6b:a2:49:d1:b1:61:c7:8a:c0:d3:
         b0:a1:3e:ed
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU8CYHVe2DVihdJbdrEaIrP7Bp6kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEzMDAwMDAwWhcNMjQwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMzA1YTE4NTRlOThhYThhYjQxZjQ5Yzk1ZWVmNTZjYzQ1
ZjBjNGEyZTY4N2ZjNDFjOGVjMTc1MWQxNWY0NDYzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDwJkWpbUJpWoXfy4A1QjsFLOZnw2H/fvMlZwsi8ceW1e8Z
eoM4Mb22xJn5rVq/b69nk7B4JDxRZY82Pemit0/7YJnIQjd8UKlEuex/63/NAALu
PmYv4PKsy7nQcXn6xkL6x44f3DiU2lHG6SPWfCIDv3z5/BGcKNEHm1VLFd7lWy8M
uigGmXhRF3k3tXSNdtsZtYJEOOR9Lli9C0qZjFg+7WKjXi+N/8KXEAqHrboTazFl
2qNToUeAqfnoctKbVo18xeA+PLgZZxFRkQX9ImqVkOF+UzrRyPOjx83iKsOC/3Ap
mjZKkyMwXxAS2gC3glmz4m8I8Ey+5Vxr1K/VLqLXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUetUvey34fU0caR2+fD8Hp6K79qswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE4NGFjNDRiLTBiNjQtNGI1Yy1hNmYwLWI4NWM2MTFjODA2NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXPz0AwDQYJKoZIhvcNAQELBQADggEBAIWvGqmDZOptnYz1U5prO7FM2S62
FAIWXaQIj5wXSes491SvZ64RnM1VmiIRvG1njMKlAPD/z+sPSNJ8c5ufHtGkV4Py
4UaUf/uAoUgaqb69x+2to/i/0sgo/W1Gso4c8VEVRfoiozVHIO2EvfrB548SIi1K
85stXh9eK43QMiaq1TygOTNN9vfiO7Q/5eo9+EKirG7kL/XEyjsyV0eBNXph1qFu
7W+21x7NU5xLN/xC/p77l6f2FbrQCrarL+NkHhNDYb3Q1v0BNVGE6CqLfEaB8S7r
DhC7aA4jlJda7zMm+/i1nO026yMAwaIQUn8iseqsa6JJ0bFhx4rA07ChPu0=
-----END CERTIFICATE-----
Generated at Thu May 2 03:11:27 2024 by rpki-client on console-ams.rpki-client.org