Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26c99c08-48f7-4b2d-bfd6-8532096d3614.roa
File:                     26c99c08-48f7-4b2d-bfd6-8532096d3614.roa (raw, json)
Hash identifier:          jM9RbciWz4HPBRuv49anpztCzqJFgUlxI6uwEDqSruI=
Subject key identifier:   58:6A:3F:42:FB:DC:E2:68:17:C3:91:48:94:54:39:F6:3A:A0:E3:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F90E02B8824349307A9B308126B8F7A9E44C9F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26c99c08-48f7-4b2d-bfd6-8532096d3614.roa
Signing time:             Mon 28 Aug 2023 00:00:00 +0000
ROA not before:           Mon 28 Aug 2023 00:00:00 +0000
ROA not after:            Mon 02 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        162.213.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Aug 2023 08:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:90:e0:2b:88:24:34:93:07:a9:b3:08:12:6b:8f:7a:9e:44:c9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 28 00:00:00 2023 GMT
            Not After : Oct  2 23:59:59 2023 GMT
        Subject: serialNumber=d2632074c2f5e57ea081447a4b0a459ad42bcc81ed673044d8615793a2822bae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:49:45:af:10:84:bf:01:78:a0:15:96:ea:
                    72:3f:b7:88:ad:e0:ca:4a:28:02:15:48:a1:a7:97:
                    fb:d9:15:2f:68:a9:95:86:53:d9:de:56:c9:da:3d:
                    24:39:c1:33:46:e9:21:be:6a:8a:e6:ee:81:3c:7a:
                    f2:7d:ed:91:b0:f9:99:84:b1:21:45:52:cc:62:fa:
                    98:c4:b1:8c:f0:3c:4b:f6:72:43:bc:2b:96:93:aa:
                    97:a3:a9:ca:d1:83:2d:74:a1:cd:d3:de:a0:86:1c:
                    c9:63:b8:b8:bd:60:ea:46:2f:fc:03:6b:e3:eb:ee:
                    c4:86:eb:32:a3:98:a3:61:da:a9:a5:51:44:9e:e3:
                    08:7f:69:a8:97:e2:16:42:39:c2:5a:40:39:98:8d:
                    6c:ea:58:de:f5:06:70:dc:7f:bc:cf:2f:c3:66:0f:
                    e1:14:4e:9a:16:a9:0d:98:24:8f:69:99:a2:39:16:
                    10:ef:86:10:ba:82:16:35:9f:d2:18:16:4e:c5:2b:
                    e2:00:c0:48:f1:7f:82:6f:53:5f:bb:03:6d:8d:d8:
                    12:b4:5e:d6:e9:23:7b:0e:e3:72:b1:62:59:0f:da:
                    22:cb:f1:36:06:89:12:bf:46:58:69:ab:5d:9a:19:
                    be:cd:51:e9:54:b9:03:1f:e6:18:3e:0d:8a:6d:8b:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6A:3F:42:FB:DC:E2:68:17:C3:91:48:94:54:39:F6:3A:A0:E3:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26c99c08-48f7-4b2d-bfd6-8532096d3614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:85:47:44:4a:3c:fc:b7:89:64:2a:5a:3e:41:62:0d:c3:18:
         08:23:55:33:c4:ce:88:c7:4f:27:c3:68:87:e7:56:df:2d:f7:
         a6:7c:ce:0b:65:ce:c0:81:bc:43:af:27:9f:e4:8a:b9:57:23:
         76:62:99:fe:ba:ed:8f:d2:9c:7a:03:25:cb:8b:be:1c:4b:db:
         dd:1e:29:6c:5c:2d:d1:4c:78:f7:f8:c3:98:a5:88:c2:4c:1b:
         b7:17:2b:f8:1c:77:35:4e:4c:18:b2:df:a8:95:22:e9:b2:c7:
         be:ad:ec:47:9b:bb:c3:d1:87:47:7c:24:4d:85:30:a8:d0:6d:
         87:e1:98:d1:03:89:2b:a4:67:80:63:6e:bf:89:06:6f:9c:01:
         5d:91:85:b7:e6:f9:78:2d:04:4a:a1:2f:b6:2e:dd:e9:ba:3f:
         e8:96:cc:5f:f4:ba:f9:5b:ce:69:fc:00:5b:34:a6:c6:6c:77:
         e9:83:27:bd:c0:f5:c8:51:e8:de:4e:fa:0e:cb:56:95:07:62:
         c6:a9:c9:8f:0a:84:ae:77:f6:bc:3c:b3:6c:d4:62:51:c3:2a:
         66:dc:08:33:d8:59:4d:d6:76:be:26:90:ed:19:1f:2f:d8:ae:
         76:60:f9:a6:34:8b:d8:1a:3c:54:a1:20:59:f1:9b:ba:7f:2e:
         a8:52:92:84
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUf5DgK4gkNJMHqbMIEmuPep5EyfkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMjYzMjA3NGMyZjVlNTdlYTA4MTQ0N2E0YjBhNDU5YWQ0
MmJjYzgxZWQ2NzMwNDRkODYxNTc5M2EyODIyYmFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6sElFrxCEvwF4oBWW6nI/t4it4MpKKAIVSKGnl/vZFS9o
qZWGU9neVsnaPSQ5wTNG6SG+aorm7oE8evJ97ZGw+ZmEsSFFUsxi+pjEsYzwPEv2
ckO8K5aTqpejqcrRgy10oc3T3qCGHMljuLi9YOpGL/wDa+Pr7sSG6zKjmKNh2qml
UUSe4wh/aaiX4hZCOcJaQDmYjWzqWN71BnDcf7zPL8NmD+EUTpoWqQ2YJI9pmaI5
FhDvhhC6ghY1n9IYFk7FK+IAwEjxf4JvU1+7A22N2BK0XtbpI3sO43KxYlkP2iLL
8TYGiRK/Rlhpq12aGb7NUelUuQMf5hg+DYpti4mbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWGo/Qvvc4mgXw5FIlFQ59jqg43MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI2Yzk5YzA4LTQ4ZjctNGIyZC1iZmQ2LTg1MzIwOTZkMzYxNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAKi1egwDQYJKoZIhvcNAQELBQADggEBAJyFR0RKPPy3iWQqWj5BYg3DGAgj
VTPEzojHTyfDaIfnVt8t96Z8zgtlzsCBvEOvJ5/kirlXI3Zimf667Y/SnHoDJcuL
vhxL290eKWxcLdFMePf4w5iliMJMG7cXK/gcdzVOTBiy36iVIumyx76t7Eebu8PR
h0d8JE2FMKjQbYfhmNEDiSukZ4Bjbr+JBm+cAV2Rhbfm+XgtBEqhL7Yu3em6P+iW
zF/0uvlbzmn8AFs0psZsd+mDJ73A9chR6N5O+g7LVpUHYsapyY8KhK539rw8s2zU
YlHDKmbcCDPYWU3Wdr4mkO0ZHy/YrnZg+aY0i9gaPFShIFnxm7p/LqhSkoQ=
-----END CERTIFICATE-----
Generated at Mon Aug 28 20:42:18 2023 by rpki-client on console-fra.rpki-client.org