Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22397cac-406e-4c89-85e5-b4a29edd8651.roa
File:                     22397cac-406e-4c89-85e5-b4a29edd8651.roa (raw, json)
Hash identifier:          IcxiXdruBrobGMZabEyRtzNsfYRrIdOIViOL03aK+sQ=
Subject key identifier:   7F:7F:E5:FE:9A:5C:0C:40:33:56:E4:B6:BE:DA:0A:DD:90:11:5B:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       128F55C9B9757727B5A865106AE020AB11625BB0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22397cac-406e-4c89-85e5-b4a29edd8651.roa
Signing time:             Tue 09 Apr 2024 00:00:00 +0000
ROA not before:           Tue 09 Apr 2024 00:00:00 +0000
ROA not after:            Tue 14 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.25.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8f:55:c9:b9:75:77:27:b5:a8:65:10:6a:e0:20:ab:11:62:5b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  9 00:00:00 2024 GMT
            Not After : May 14 23:59:59 2024 GMT
        Subject: serialNumber=030f0a636cada4b1865c2a31a890d66da7f46caa84eaac3fc68f95cca6482e82, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:34:e9:4a:8f:ff:e8:65:14:06:e4:57:3f:
                    33:ab:96:7e:49:44:be:33:4a:cf:0f:3d:b2:c9:67:
                    e5:8f:8c:52:33:85:69:6d:99:4c:2a:d7:f3:02:fa:
                    1f:a2:a6:cb:f4:c0:79:f1:ae:fa:28:e7:af:3c:cb:
                    37:35:54:83:68:21:f1:12:a7:c7:60:68:1c:ab:c4:
                    10:70:69:ff:79:1a:1d:38:26:d9:94:a9:2b:16:fc:
                    ac:f2:88:7e:8e:72:22:10:61:e4:4c:6f:f3:a4:10:
                    68:c1:05:8f:32:d8:43:0d:49:72:eb:3b:cf:c2:65:
                    5f:b9:8d:9c:4d:cd:a6:f5:42:3e:03:64:6e:d9:17:
                    f6:0b:c7:e9:ff:7e:76:36:97:04:d3:a2:df:fd:c3:
                    8f:19:e2:09:67:ee:2b:0e:54:5e:32:1d:2e:a9:48:
                    b6:13:05:76:8f:ee:c1:6c:09:c8:0b:40:93:11:33:
                    a5:0a:6c:d0:8a:51:41:22:9a:35:80:2e:ca:d6:db:
                    f1:bf:d7:c7:d9:16:f6:77:3b:a3:9f:94:00:d6:4b:
                    7c:a2:8b:32:0e:1f:8b:e9:14:c4:80:f3:2d:c6:aa:
                    e4:ee:6a:ca:fa:62:28:d5:8f:d0:af:69:86:84:41:
                    08:58:37:d1:a4:b1:40:96:6c:19:3f:e7:54:2c:a1:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7F:E5:FE:9A:5C:0C:40:33:56:E4:B6:BE:DA:0A:DD:90:11:5B:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22397cac-406e-4c89-85e5-b4a29edd8651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.25.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:7d:a5:b2:44:77:86:71:64:ab:4b:01:ff:63:17:64:57:
         ae:e4:82:dc:30:37:97:20:5b:4e:c4:59:f3:11:84:d7:06:00:
         ba:16:1b:c6:a8:3e:b6:9f:34:87:3e:52:d8:a7:ae:8f:74:ec:
         21:7b:43:22:33:ce:1d:85:d5:4e:eb:aa:d8:94:9e:80:f6:2f:
         a5:90:46:cd:e6:a3:c1:b3:c3:a7:ed:c4:99:97:03:4e:5e:08:
         d0:90:fb:a4:2d:c2:70:1d:72:fc:6e:d3:96:a0:54:2a:2e:8b:
         a3:dc:14:6f:7b:34:8f:99:ea:0a:7a:48:ba:87:8c:42:1e:11:
         87:49:12:8e:8e:e1:63:e0:1f:17:04:38:a0:6f:80:b8:07:d9:
         d5:be:f6:d5:18:e6:7a:b2:fd:e0:de:03:98:24:ee:50:eb:b4:
         26:74:01:16:a7:41:ea:a6:cf:49:99:16:20:7e:4c:8e:d6:2a:
         77:03:39:5c:35:0a:4e:1a:b9:29:32:2f:dc:52:22:17:89:fb:
         68:61:fd:6b:7c:ec:a6:42:29:94:66:25:73:54:f3:d6:b0:d1:
         0e:62:4d:ca:cd:72:35:26:46:85:9e:4d:25:bc:2e:df:a3:c3:
         f5:9e:67:26:ec:89:66:2c:0e:26:6e:0e:9c:90:36:9a:ba:4b:
         4e:6c:51:75
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEo9Vybl1dye1qGUQauAgqxFiW7AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA5MDAwMDAwWhcNMjQwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMzBmMGE2MzZjYWRhNGIxODY1YzJhMzFhODkwZDY2ZGE3
ZjQ2Y2FhODRlYWFjM2ZjNjhmOTVjY2E2NDgyZTgyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9SzTpSo//6GUUBuRXPzOrln5JRL4zSs8PPbLJZ+WPjFIz
hWltmUwq1/MC+h+ipsv0wHnxrvoo5688yzc1VINoIfESp8dgaByrxBBwaf95Gh04
JtmUqSsW/KzyiH6OciIQYeRMb/OkEGjBBY8y2EMNSXLrO8/CZV+5jZxNzab1Qj4D
ZG7ZF/YLx+n/fnY2lwTTot/9w48Z4gln7isOVF4yHS6pSLYTBXaP7sFsCcgLQJMR
M6UKbNCKUUEimjWALsrW2/G/18fZFvZ3O6OflADWS3yiizIOH4vpFMSA8y3GquTu
asr6YijVj9CvaYaEQQhYN9GksUCWbBk/51QsoQZrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUf3/l/ppcDEAzVuS2vtoK3ZARW/YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIyMzk3Y2FjLTQwNmUtNGM4OS04NWU1LWI0YTI5ZWRkODY1MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2GQ8wDQYJKoZIhvcNAQELBQADggEBAI/gfaWyRHeGcWSrSwH/YxdkV67k
gtwwN5cgW07EWfMRhNcGALoWG8aoPrafNIc+Utinro907CF7QyIzzh2F1U7rqtiU
noD2L6WQRs3mo8Gzw6ftxJmXA05eCNCQ+6QtwnAdcvxu05agVCoui6PcFG97NI+Z
6gp6SLqHjEIeEYdJEo6O4WPgHxcEOKBvgLgH2dW+9tUY5nqy/eDeA5gk7lDrtCZ0
ARanQeqmz0mZFiB+TI7WKncDOVw1Ck4auSkyL9xSIheJ+2hh/Wt87KZCKZRmJXNU
89aw0Q5iTcrNcjUmRoWeTSW8Lt+jw/WeZybsiWYsDiZuDpyQNpq6S05sUXU=
-----END CERTIFICATE-----
Generated at Thu May 2 05:26:18 2024 by rpki-client on console-fra.rpki-client.org