Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2504a759-2889-4336-bad8-56846963d889.roa
File:                     2504a759-2889-4336-bad8-56846963d889.roa (raw, json)
Hash identifier:          V4IuyqQEDNeMU6t7XkXfkq1xRPStBjTQYYvYQigY1z4=
Subject key identifier:   F7:5B:8D:95:30:A9:8D:6B:31:03:02:B2:E6:30:7A:AB:64:92:DE:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4913F26BE619B0C43DE32509C22D396A245A3B62
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2504a759-2889-4336-bad8-56846963d889.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        139.96.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:13:f2:6b:e6:19:b0:c4:3d:e3:25:09:c2:2d:39:6a:24:5a:3b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=98c7b74b9c27041130167037e5a7d89a5bddbdf27d168201a16cebbdcf848eec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:3b:fc:e8:fc:ea:e4:78:4a:63:f1:60:a7:
                    fe:7a:fe:9b:1f:dc:d6:56:1f:86:55:ef:4d:0e:c4:
                    d9:6a:8b:f7:a1:f3:d8:9d:7a:10:5d:db:e9:6f:05:
                    4e:8f:8b:93:87:5e:2a:f8:fe:f3:8a:2f:44:f3:35:
                    9b:d7:97:be:95:97:38:86:7b:91:0b:a5:4c:ae:30:
                    ca:78:eb:7a:fa:cf:fc:09:ae:9f:37:c9:5f:99:33:
                    f0:ac:d2:18:37:4c:73:83:c9:51:df:27:1c:19:82:
                    33:6c:2a:5a:8b:fa:ae:4b:57:a1:c1:77:19:a2:a0:
                    c9:c5:01:c7:f2:92:e9:4e:99:3a:07:b7:67:3b:aa:
                    62:2a:00:47:ce:54:7d:bd:3c:43:1c:30:1e:56:ee:
                    31:b8:fe:83:e3:66:15:ab:1a:5e:39:00:49:5c:99:
                    a7:db:29:9e:1a:33:f9:af:7a:86:2f:82:68:99:21:
                    ba:0d:00:69:06:c7:e5:e7:dd:7c:e9:1a:97:a5:a2:
                    11:af:15:8a:2f:a2:58:28:b1:df:2d:e5:d7:7d:34:
                    66:0b:c4:e3:bf:f2:1c:d2:6b:bf:ec:55:96:aa:6a:
                    3e:fe:6c:6e:b5:7e:2e:0c:4e:ac:29:cf:2f:13:89:
                    c0:af:03:3f:94:84:eb:de:a3:b8:9f:e0:e1:ba:c5:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5B:8D:95:30:A9:8D:6B:31:03:02:B2:E6:30:7A:AB:64:92:DE:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2504a759-2889-4336-bad8-56846963d889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.96.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:bf:b6:43:30:d7:e0:5f:21:d2:4b:18:7d:2f:aa:3f:0a:c5:
         2a:fc:60:90:78:6f:07:b4:f8:e6:0e:89:77:51:1a:1b:b8:98:
         92:b6:a4:20:a2:76:ea:27:db:53:9d:dd:f7:06:93:7e:c8:72:
         07:d9:9f:7f:c9:5c:5e:88:41:4d:4f:ed:1a:c1:63:51:c1:1d:
         e5:c3:49:80:67:95:35:9d:57:93:59:50:6d:4a:db:4b:92:fe:
         01:db:40:3b:63:c1:b3:91:5a:9d:70:a8:cb:4b:9f:de:7e:4b:
         42:a6:a3:c8:19:bb:a2:f0:48:94:f3:af:78:4e:8f:bb:6c:e2:
         c4:cd:d6:47:06:86:f3:6e:ea:96:ad:54:c1:42:42:16:af:53:
         e2:89:2b:64:8d:00:ac:25:2a:4d:91:37:c9:bc:28:76:39:f7:
         16:30:e2:7a:34:42:64:c2:b2:b1:de:cc:25:b8:b8:10:c1:63:
         2d:0b:ac:45:58:52:39:9a:bb:89:ce:d6:05:86:86:35:e8:f1:
         e7:85:eb:b3:61:00:9f:85:ab:d5:53:e1:0d:67:35:e9:1d:09:
         33:ac:f6:35:56:9a:e5:d5:3f:67:6d:b5:21:06:0f:99:88:0e:
         5e:a3:6d:3d:82:65:0a:80:ef:da:58:9f:05:d7:ed:27:c8:a9:
         69:36:ed:aa
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSRPya+YZsMQ94yUJwi05aiRaO2IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEwMDAwMDAwWhcNMjQwNTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5OGM3Yjc0YjljMjcwNDExMzAxNjcwMzdlNWE3ZDg5YTVi
ZGRiZGYyN2QxNjgyMDFhMTZjZWJiZGNmODQ4ZWVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPqjv86Pzq5HhKY/Fgp/56/psf3NZWH4ZV700OxNlqi/eh
89idehBd2+lvBU6Pi5OHXir4/vOKL0TzNZvXl76VlziGe5ELpUyuMMp463r6z/wJ
rp83yV+ZM/Cs0hg3THODyVHfJxwZgjNsKlqL+q5LV6HBdxmioMnFAcfykulOmToH
t2c7qmIqAEfOVH29PEMcMB5W7jG4/oPjZhWrGl45AElcmafbKZ4aM/mveoYvgmiZ
IboNAGkGx+Xn3XzpGpelohGvFYovolgosd8t5dd9NGYLxOO/8hzSa7/sVZaqaj7+
bG61fi4MTqwpzy8TicCvAz+UhOveo7if4OG6xX9rAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU91uNlTCpjWsxAwKy5jB6q2SS3sIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI1MDRhNzU5LTI4ODktNDMzNi1iYWQ4LTU2ODQ2OTYzZDg4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCLYDANBgkqhkiG9w0BAQsFAAOCAQEAl7+2QzDX4F8h0ksYfS+qPwrFKvxg
kHhvB7T45g6Jd1EaG7iYkrakIKJ26ifbU53d9waTfshyB9mff8lcXohBTU/tGsFj
UcEd5cNJgGeVNZ1Xk1lQbUrbS5L+AdtAO2PBs5FanXCoy0uf3n5LQqajyBm7ovBI
lPOveE6Pu2zixM3WRwaG827qlq1UwUJCFq9T4okrZI0ArCUqTZE3ybwodjn3FjDi
ejRCZMKysd7MJbi4EMFjLQusRVhSOZq7ic7WBYaGNejx54Xrs2EAn4Wr1VPhDWc1
6R0JM6z2NVaa5dU/Z221IQYPmYgOXqNtPYJlCoDv2lifBdftJ8ipaTbtqg==
-----END CERTIFICATE-----
Generated at Wed Apr 24 15:48:56 2024 by rpki-client on console-ams.rpki-client.org