Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2504a759-2889-4336-bad8-56846963d889.roa
File:                     2504a759-2889-4336-bad8-56846963d889.roa (raw, json)
Hash identifier:          EVyy35DYGeaveAiGqu2pVfb77auNHKzUWZKhc7iCI4c=
Subject key identifier:   63:4E:14:9E:16:2A:E8:F7:BD:91:FA:2D:84:06:B0:2F:65:0C:DD:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57234072FD7AF225127A1BAE9F8BA9E3E11D64FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2504a759-2889-4336-bad8-56846963d889.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        139.96.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Sep 2023 12:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:23:40:72:fd:7a:f2:25:12:7a:1b:ae:9f:8b:a9:e3:e1:1d:64:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=97339aca82a345726dabf6b6d3f639537d72f02e355999646f7765475dd608a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0d:59:88:9a:93:f6:c8:15:fd:5c:89:c9:c7:
                    11:29:a0:04:74:4f:a2:f2:08:2a:c2:7c:6b:21:8c:
                    ec:d7:05:68:ce:4c:a0:d4:51:1d:63:4f:50:b4:b0:
                    17:0e:c1:b8:23:5b:b7:f3:d7:a3:e9:68:e4:64:fc:
                    69:9b:25:a5:40:ac:b2:13:5c:25:6a:ce:fa:79:e7:
                    a3:2a:21:a8:e7:2c:fa:3c:0a:52:a1:d4:bf:1f:c7:
                    1e:14:f3:cc:72:17:80:80:43:1d:10:1c:81:13:a7:
                    cb:a6:3e:f8:e2:7b:a6:7d:3f:d2:5a:ba:4a:4f:9e:
                    d5:aa:a9:ee:e3:05:ba:3e:ab:3a:a6:83:28:e1:a6:
                    41:5d:ec:86:da:ee:75:e7:1e:88:5d:21:d6:93:ee:
                    da:db:b9:45:be:05:98:f4:c6:6c:7c:fa:ce:e1:a1:
                    5c:03:30:f1:6d:a8:ec:63:4a:37:e2:41:7d:9f:9d:
                    80:e5:35:7d:be:1a:c1:97:f5:eb:cd:4e:b5:0f:76:
                    ba:82:fa:fc:48:e0:9e:6f:9e:a7:47:cb:24:31:f6:
                    9e:12:9c:4d:fc:03:d4:19:b8:32:f1:7f:7d:98:77:
                    2b:a3:f7:63:b3:89:80:52:26:4b:a1:9c:17:e8:8c:
                    c7:35:5c:05:81:81:b8:77:15:f3:c1:bf:46:44:30:
                    f5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4E:14:9E:16:2A:E8:F7:BD:91:FA:2D:84:06:B0:2F:65:0C:DD:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2504a759-2889-4336-bad8-56846963d889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.96.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:fa:6d:84:70:6f:0f:14:4d:8d:46:81:cb:8d:97:e1:aa:90:
         37:db:2a:0c:fb:ff:e9:97:99:fb:33:c8:b8:30:73:b2:6b:07:
         5b:aa:f3:f7:23:ff:fa:ed:99:a8:1f:a6:e1:16:8f:2c:04:9d:
         fb:c6:fe:07:6e:ae:e3:9d:26:cd:d9:c3:fa:25:1c:1c:ec:f4:
         ec:8d:f7:eb:35:99:7c:7d:bb:a0:23:3b:d2:f1:bc:c4:ba:08:
         42:0e:57:1d:2f:45:f5:0d:e3:e7:51:2c:bc:48:3a:c2:3d:1e:
         66:d1:a1:22:66:30:05:4d:23:6e:73:a7:9b:2d:fb:e1:07:b3:
         11:b1:12:00:a8:6f:a2:04:2d:58:ca:a7:ad:21:f8:59:3e:f5:
         85:a1:a2:03:0b:b4:6c:6c:ee:87:55:f8:f4:50:9c:29:21:6e:
         88:8c:bc:0c:7a:36:28:77:8c:5a:61:77:1b:5f:65:a6:b0:8d:
         0b:96:27:99:0a:c6:b8:68:12:12:c4:6b:06:8a:e7:4b:62:0e:
         aa:7c:98:6c:07:01:6b:21:b8:14:31:22:f7:45:58:bb:16:fb:
         83:75:c0:52:f0:8f:bb:d6:63:7f:aa:ed:01:bf:c7:b4:9b:f8:
         63:aa:b2:f9:a9:6a:51:c5:26:36:e5:5c:70:76:70:94:64:2c:
         99:15:9e:4a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUVyNAcv168iUSehuun4up4+EdZPwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NzMzOWFjYTgyYTM0NTcyNmRhYmY2YjZkM2Y2Mzk1Mzdk
NzJmMDJlMzU1OTk5NjQ2Zjc3NjU0NzVkZDYwOGE5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCIDVmImpP2yBX9XInJxxEpoAR0T6LyCCrCfGshjOzXBWjO
TKDUUR1jT1C0sBcOwbgjW7fz16PpaORk/GmbJaVArLITXCVqzvp556MqIajnLPo8
ClKh1L8fxx4U88xyF4CAQx0QHIETp8umPvjie6Z9P9JaukpPntWqqe7jBbo+qzqm
gyjhpkFd7Iba7nXnHohdIdaT7trbuUW+BZj0xmx8+s7hoVwDMPFtqOxjSjfiQX2f
nYDlNX2+GsGX9evNTrUPdrqC+vxI4J5vnqdHyyQx9p4SnE38A9QZuDLxf32Ydyuj
92OziYBSJkuhnBfojMc1XAWBgbh3FfPBv0ZEMPXzAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUY04UnhYq6Pe9kfothAawL2UM3bYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI1MDRhNzU5LTI4ODktNDMzNi1iYWQ4LTU2ODQ2OTYzZDg4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCLYDANBgkqhkiG9w0BAQsFAAOCAQEAJfpthHBvDxRNjUaBy42X4aqQN9sq
DPv/6ZeZ+zPIuDBzsmsHW6rz9yP/+u2ZqB+m4RaPLASd+8b+B26u450mzdnD+iUc
HOz07I336zWZfH27oCM70vG8xLoIQg5XHS9F9Q3j51EsvEg6wj0eZtGhImYwBU0j
bnOnmy374QezEbESAKhvogQtWMqnrSH4WT71haGiAwu0bGzuh1X49FCcKSFuiIy8
DHo2KHeMWmF3G19lprCNC5YnmQrGuGgSEsRrBornS2IOqnyYbAcBayG4FDEi90VY
uxb7g3XAUvCPu9Zjf6rtAb/HtJv4Y6qy+alqUcUmNuVccHZwlGQsmRWeSg==
-----END CERTIFICATE-----
Generated at Fri Sep 22 00:30:05 2023 by rpki-client on console-fra.rpki-client.org