Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203b501d-ebeb-4fcd-86f7-98b9ffc1813b.roa
File:                     203b501d-ebeb-4fcd-86f7-98b9ffc1813b.roa (raw, json)
Hash identifier:          OLLCP1Mc7w+0K3yVt9EZKovVcQxqcTIDNlfrtA5kFcQ=
Subject key identifier:   01:53:9E:B1:7A:7D:35:1B:67:2D:EB:8A:C6:B0:43:80:5D:E0:FE:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       076AFF9716564DB3E527FE9F43A3C06E8A3F9AF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203b501d-ebeb-4fcd-86f7-98b9ffc1813b.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        192.26.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6a:ff:97:16:56:4d:b3:e5:27:fe:9f:43:a3:c0:6e:8a:3f:9a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=26f46eedf669df330491f867dbc10bb2c62c97e49c7c7d9b6184a7a0388bd8d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:0a:cd:b1:3c:de:2c:53:8c:9e:02:93:68:
                    07:c9:b3:a1:cf:a5:5e:81:d9:bc:8d:b2:06:f9:59:
                    e1:be:eb:d8:23:7c:e2:4b:3a:4a:28:86:42:17:28:
                    c3:f6:e2:e7:3a:6d:8b:93:23:5d:85:4e:93:94:67:
                    c9:89:a3:b1:fe:48:43:5c:eb:54:20:e8:7d:be:35:
                    7e:75:71:81:97:f0:67:e4:9e:79:1e:c6:35:17:af:
                    66:49:cc:45:30:e3:c2:f0:f2:a7:de:b2:20:0d:56:
                    cc:9b:d4:1d:3d:e7:e5:5f:22:c1:81:db:9d:2f:4f:
                    c9:6d:d7:8f:23:3d:24:23:09:cd:83:1e:05:f9:de:
                    a2:ab:d4:ea:ff:a8:c0:3b:d8:8e:6b:2f:5a:38:c0:
                    eb:9e:0b:ff:04:84:8e:d5:d1:14:3c:51:90:ef:50:
                    f7:18:f3:c9:10:21:8c:43:25:27:e5:a6:20:25:a7:
                    fd:66:1f:b7:3d:fd:6b:eb:00:4d:1b:fd:9c:3e:6d:
                    03:12:92:4f:09:3f:49:ab:e8:26:c4:e8:32:b4:1a:
                    26:9f:57:81:da:2c:d3:42:9a:41:ba:ca:50:74:c1:
                    69:d6:5b:14:ee:04:18:75:8c:0a:65:28:b9:f3:69:
                    45:b9:a0:e5:e1:16:71:57:72:39:22:29:a8:b6:94:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:53:9E:B1:7A:7D:35:1B:67:2D:EB:8A:C6:B0:43:80:5D:E0:FE:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203b501d-ebeb-4fcd-86f7-98b9ffc1813b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:53:1e:82:2a:81:8b:b3:ec:bf:76:18:9f:85:b8:4a:e4:20:
         80:ea:3f:39:f1:d1:39:40:33:1e:16:dd:37:41:64:6b:fc:7c:
         84:85:48:bf:52:d2:0e:17:80:d1:c0:3a:d2:9a:44:70:7b:3f:
         51:f9:20:d0:76:85:eb:95:e9:bc:86:69:f2:d5:27:1e:7b:69:
         fe:b5:22:9f:9b:09:b4:85:f3:bd:eb:29:d0:2b:b9:03:95:18:
         c4:2b:e1:11:34:69:5d:07:9c:9e:53:89:f0:3d:7f:98:dd:dd:
         5a:c1:5f:d6:cb:e8:f8:84:de:08:11:c1:9a:1e:a7:96:03:90:
         0f:7b:85:eb:ef:00:ae:e1:6e:b2:03:2a:e0:17:c0:e4:2b:a5:
         2c:c2:9f:a0:e6:dc:ac:7e:16:df:b6:d8:66:8e:3f:bb:1b:79:
         82:87:ec:87:01:b3:68:af:fa:fe:a8:ee:dc:23:e8:5e:a6:7c:
         88:7a:ac:b8:66:22:b2:16:85:93:c6:6e:41:6a:95:7f:fb:2a:
         57:0a:a7:89:7a:d6:13:15:60:56:d6:59:fa:ee:7d:9d:31:8e:
         9c:53:6c:43:4b:9e:f6:4b:45:22:26:38:1b:73:94:1b:6e:18:
         1d:72:d2:9e:6c:35:6b:47:d1:e4:c5:63:83:8d:c4:d1:c2:69:
         c4:2c:c1:fc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUB2r/lxZWTbPlJ/6fQ6PAboo/mvIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNmY0NmVlZGY2NjlkZjMzMDQ5MWY4NjdkYmMxMGJiMmM2
MmM5N2U0OWM3YzdkOWI2MTg0YTdhMDM4OGJkOGQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC75grNsTzeLFOMngKTaAfJs6HPpV6B2byNsgb5WeG+69gj
fOJLOkoohkIXKMP24uc6bYuTI12FTpOUZ8mJo7H+SENc61Qg6H2+NX51cYGX8Gfk
nnkexjUXr2ZJzEUw48Lw8qfesiANVsyb1B095+VfIsGB250vT8lt148jPSQjCc2D
HgX53qKr1Or/qMA72I5rL1o4wOueC/8EhI7V0RQ8UZDvUPcY88kQIYxDJSflpiAl
p/1mH7c9/WvrAE0b/Zw+bQMSkk8JP0mr6CbE6DK0GiafV4HaLNNCmkG6ylB0wWnW
WxTuBBh1jAplKLnzaUW5oOXhFnFXcjkiKai2lKKDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAVOesXp9NRtnLeuKxrBDgF3g/o8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIwM2I1MDFkLWViZWItNGZjZC04NmY3LTk4YjlmZmMxODEzYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADAGhkwDQYJKoZIhvcNAQELBQADggEBAKhTHoIqgYuz7L92GJ+FuErkIIDq
Pznx0TlAMx4W3TdBZGv8fISFSL9S0g4XgNHAOtKaRHB7P1H5INB2heuV6byGafLV
Jx57af61Ip+bCbSF873rKdAruQOVGMQr4RE0aV0HnJ5TifA9f5jd3VrBX9bL6PiE
3ggRwZoep5YDkA97hevvAK7hbrIDKuAXwOQrpSzCn6Dm3Kx+Ft+22GaOP7sbeYKH
7IcBs2iv+v6o7twj6F6mfIh6rLhmIrIWhZPGbkFqlX/7KlcKp4l61hMVYFbWWfru
fZ0xjpxTbENLnvZLRSImOBtzlBtuGB1y0p5sNWtH0eTFY4ONxNHCacQswfw=
-----END CERTIFICATE-----
Generated at Wed Apr 24 15:48:56 2024 by rpki-client on console-ams.rpki-client.org