Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27105f6b-3654-48b0-a7b3-6aa841954f21.roa
File:                     27105f6b-3654-48b0-a7b3-6aa841954f21.roa (raw, json)
Hash identifier:          uQ5xlYFOEbZ4Mz9pY7USUYKUIN6IvWRQEktDAzxdJQ8=
Subject key identifier:   EB:11:C6:DF:5E:D6:49:0D:15:B2:5A:0D:1C:68:97:DD:6D:7A:78:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1073599D8A418AD641869467A30C5C32BBCB5765
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27105f6b-3654-48b0-a7b3-6aa841954f21.roa
Signing time:             Sat 27 Apr 2024 00:00:00 +0000
ROA not before:           Sat 27 Apr 2024 00:00:00 +0000
ROA not after:            Sat 01 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        93.76.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:73:59:9d:8a:41:8a:d6:41:86:94:67:a3:0c:5c:32:bb:cb:57:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:00:00 2024 GMT
            Not After : Jun  1 23:59:59 2024 GMT
        Subject: serialNumber=e971763445eada7dff6877a6875ef2af8ff28312c460966d4b9b13d6d842b0aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:c7:26:cc:70:bc:ba:d9:f4:36:45:b0:9e:
                    d2:9e:17:60:1f:b2:58:2a:3e:b3:0f:1f:10:57:26:
                    83:cc:1e:92:5e:28:92:79:e4:30:16:3b:fb:4f:5d:
                    95:42:64:d3:26:80:98:00:74:b2:08:4f:44:9e:3f:
                    84:aa:a0:db:51:92:18:e1:35:a0:ef:00:3e:0d:48:
                    a4:d0:77:b9:fd:d5:0b:35:e3:c2:40:ec:19:ad:e6:
                    9a:bf:95:a8:9a:b6:09:83:e4:65:da:1d:9a:52:07:
                    de:07:13:f7:2a:7c:71:05:82:41:cc:ba:15:59:5c:
                    20:05:ca:05:6f:a2:ee:65:0f:2a:47:f7:65:0e:cb:
                    3a:eb:d9:2e:75:e6:8e:ff:6c:50:59:e2:d0:73:cf:
                    c3:13:10:e3:8e:00:36:8f:81:5f:0d:d7:69:35:2b:
                    e2:ce:e2:5d:c1:56:31:ff:bf:42:5c:c1:1c:4e:e5:
                    ab:d7:b9:75:7f:f7:a1:9e:a9:c9:7b:e3:85:c7:f2:
                    a7:2b:27:c5:83:ee:e5:c2:f0:e9:52:83:20:19:78:
                    5d:07:1f:32:18:29:4b:ba:71:cd:b3:03:1f:2f:5d:
                    f0:c5:54:50:89:9c:93:fd:ad:c4:a2:1c:cf:c1:5f:
                    a5:a8:a1:5a:60:d9:73:bf:45:37:98:3a:6a:a9:e2:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:11:C6:DF:5E:D6:49:0D:15:B2:5A:0D:1C:68:97:DD:6D:7A:78:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27105f6b-3654-48b0-a7b3-6aa841954f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.76.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6a:bc:bb:fe:a6:bd:97:78:b5:41:69:0c:9b:9b:eb:0c:8d:28:
         df:91:e1:fe:70:45:3d:f7:b0:49:21:bd:c5:b5:f4:db:d1:c8:
         4a:a1:d2:b0:06:bd:a1:68:ea:b9:2c:c7:11:c2:18:cd:92:d4:
         b4:dc:68:2a:f9:8a:9c:14:97:d6:29:79:01:77:54:d3:b6:13:
         14:f8:43:30:f5:96:84:50:de:33:fd:d9:8f:8c:f8:bb:68:45:
         7a:b7:9f:be:d6:53:76:dd:59:a6:98:67:5a:de:52:d1:5f:60:
         36:62:76:4e:f3:31:86:61:cb:f9:14:d1:61:4a:e5:f0:51:e8:
         16:88:b3:e5:a8:77:a6:a9:8c:71:86:15:de:dd:b8:10:67:56:
         ec:b1:26:cd:41:b9:5d:93:8c:91:57:3f:41:b6:c2:7e:8a:cd:
         a8:78:2a:05:6c:45:b7:a6:00:6a:88:56:d1:53:e9:53:94:54:
         a7:36:bb:33:aa:48:4e:3d:fc:e3:75:9f:cf:90:8b:9d:6c:15:
         f0:63:4e:e2:1d:87:7b:af:53:95:df:4a:6a:87:bf:8b:36:77:
         2d:e6:96:77:cf:05:b2:c2:95:7c:79:c2:13:49:2f:95:69:00:
         d7:e4:85:3d:b1:ec:8c:df:b5:35:53:e3:24:64:53:95:88:1f:
         4f:02:e6:46
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEHNZnYpBitZBhpRnowxcMrvLV2UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI3MDAwMDAwWhcNMjQwNjAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlOTcxNzYzNDQ1ZWFkYTdkZmY2ODc3YTY4NzVlZjJhZjhm
ZjI4MzEyYzQ2MDk2NmQ0YjliMTNkNmQ4NDJiMGFhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDkascmzHC8utn0NkWwntKeF2AfslgqPrMPHxBXJoPMHpJe
KJJ55DAWO/tPXZVCZNMmgJgAdLIIT0SeP4SqoNtRkhjhNaDvAD4NSKTQd7n91Qs1
48JA7Bmt5pq/laiatgmD5GXaHZpSB94HE/cqfHEFgkHMuhVZXCAFygVvou5lDypH
92UOyzrr2S515o7/bFBZ4tBzz8MTEOOOADaPgV8N12k1K+LO4l3BVjH/v0JcwRxO
5avXuXV/96Geqcl744XH8qcrJ8WD7uXC8OlSgyAZeF0HHzIYKUu6cc2zAx8vXfDF
VFCJnJP9rcSiHM/BX6WooVpg2XO/RTeYOmqp4tO5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6xHG317WSQ0VsloNHGiX3W16eEEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI3MTA1ZjZiLTM2NTQtNDhiMC1hN2IzLTZhYTg0MTk1NGYyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAddTIAwDQYJKoZIhvcNAQELBQADggEBAGq8u/6mvZd4tUFpDJub6wyNKN+R
4f5wRT33sEkhvcW19NvRyEqh0rAGvaFo6rksxxHCGM2S1LTcaCr5ipwUl9YpeQF3
VNO2ExT4QzD1loRQ3jP92Y+M+LtoRXq3n77WU3bdWaaYZ1reUtFfYDZidk7zMYZh
y/kU0WFK5fBR6BaIs+Wod6apjHGGFd7duBBnVuyxJs1BuV2TjJFXP0G2wn6Kzah4
KgVsRbemAGqIVtFT6VOUVKc2uzOqSE49/ON1n8+Qi51sFfBjTuIdh3uvU5XfSmqH
v4s2dy3mlnfPBbLClXx5whNJL5VpANfkhT2x7IzftTVT4yRkU5WIH08C5kY=
-----END CERTIFICATE-----
Generated at Wed May 1 20:47:52 2024 by rpki-client on console-ams.rpki-client.org