Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284c9a1b-7e4b-433f-b1f1-f4cebfb67dc5.roa
File:                     284c9a1b-7e4b-433f-b1f1-f4cebfb67dc5.roa (raw, json)
Hash identifier:          fJMHce0egDhzrecixyMYdZIAaM8phjJBfJDIjGS1VQ8=
Subject key identifier:   F9:AF:C8:F6:5B:0E:74:9B:3C:79:C2:0F:FA:52:92:6E:D8:5A:86:DF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29CEF102239704C340A8C87C0C232E96EF8B366D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284c9a1b-7e4b-433f-b1f1-f4cebfb67dc5.roa
Signing time:             Mon 28 Aug 2023 00:00:00 +0000
ROA not before:           Mon 28 Aug 2023 00:00:00 +0000
ROA not after:            Mon 02 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        67.220.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Aug 2023 08:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ce:f1:02:23:97:04:c3:40:a8:c8:7c:0c:23:2e:96:ef:8b:36:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 28 00:00:00 2023 GMT
            Not After : Oct  2 23:59:59 2023 GMT
        Subject: serialNumber=e6b988ef762cd7a7b9cde427d24d12f890b2cec5d8428fd394822fc2580925b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:bd:1b:c2:8a:f2:9f:dc:06:f0:8a:bc:6a:
                    52:fa:cc:ba:e4:63:95:c2:24:4b:16:bf:e7:06:7a:
                    8a:cf:0b:74:78:56:4e:58:1d:82:0d:52:d8:48:b6:
                    4e:8f:b5:5c:e7:57:12:e7:5c:3c:73:b0:88:bf:e6:
                    11:8a:f5:e4:5a:dd:a6:3a:66:f1:25:68:81:22:78:
                    31:32:d5:7f:99:8f:a2:58:32:52:85:4c:00:dc:a4:
                    4b:8d:25:3b:f9:92:6d:a3:98:1e:64:47:49:f4:b6:
                    78:3e:11:ac:50:70:e5:66:05:00:5e:67:e7:51:88:
                    af:b4:9e:aa:f1:47:8f:c5:95:7b:bb:42:55:f4:89:
                    00:85:da:2a:9c:90:a8:ee:b2:38:60:d1:3f:94:48:
                    7f:17:34:14:0f:4e:02:b8:72:fb:37:57:c5:e6:6f:
                    65:16:b4:90:d6:83:ef:a2:00:69:91:46:1e:c9:9e:
                    32:7e:24:ea:01:c5:28:c1:c1:dc:63:a5:4a:c3:19:
                    03:9b:3f:5c:ec:bb:aa:8a:30:80:99:d8:62:e6:65:
                    45:43:c4:94:7f:63:0d:66:4e:cd:47:82:2f:5a:12:
                    2e:9c:95:ef:34:47:b9:07:3f:c8:02:c5:c3:2e:a1:
                    6e:c2:4b:c2:d3:1b:a7:f4:7f:fc:84:cc:ad:73:3c:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AF:C8:F6:5B:0E:74:9B:3C:79:C2:0F:FA:52:92:6E:D8:5A:86:DF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284c9a1b-7e4b-433f-b1f1-f4cebfb67dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:2f:bb:7c:44:88:c6:f8:a2:eb:f2:f4:bc:fc:8e:62:30:b6:
         98:fa:01:49:86:7b:80:a5:b1:c7:43:7c:68:13:66:35:30:c6:
         96:6e:e1:6e:64:82:9d:8c:0f:a8:aa:bf:93:b3:a4:32:bd:8e:
         e8:43:0a:93:d9:a8:ff:5c:bc:0a:29:7f:d8:33:45:6a:be:64:
         3f:c3:a0:ea:8e:96:27:81:ce:a3:af:e4:9a:aa:22:e2:10:99:
         91:f3:86:c2:ca:b3:a3:ad:87:78:0d:90:6a:bc:08:7f:be:2f:
         8b:39:cb:2b:24:82:71:ed:42:06:59:ca:71:58:c4:f1:80:82:
         4a:29:08:d9:30:ab:f9:f7:0d:bc:2b:f2:23:4b:e3:29:4c:d4:
         71:79:b2:39:15:19:94:99:d9:7d:8f:c0:7c:86:b0:c3:69:03:
         8b:54:04:02:db:9b:01:10:c7:03:d8:cf:d7:69:f9:58:71:f8:
         ab:6b:b1:64:51:f5:7e:56:0c:d9:dc:7c:2a:a7:68:8c:76:f6:
         89:c6:ae:05:f5:f0:cd:f5:e5:9b:55:c6:51:53:3d:3d:59:5c:
         bc:65:d9:99:54:d6:4f:17:15:27:ae:bb:c0:1d:05:bd:a0:5d:
         86:64:a9:77:e9:c9:07:8c:4c:6e:08:76:7b:77:5b:f4:da:75:
         8d:21:7c:1b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKc7xAiOXBMNAqMh8DCMulu+LNm0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNmI5ODhlZjc2MmNkN2E3YjljZGU0MjdkMjRkMTJmODkw
YjJjZWM1ZDg0MjhmZDM5NDgyMmZjMjU4MDkyNWI2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFKr0bworyn9wG8Iq8alL6zLrkY5XCJEsWv+cGeorPC3R4
Vk5YHYINUthItk6PtVznVxLnXDxzsIi/5hGK9eRa3aY6ZvElaIEieDEy1X+Zj6JY
MlKFTADcpEuNJTv5km2jmB5kR0n0tng+EaxQcOVmBQBeZ+dRiK+0nqrxR4/FlXu7
QlX0iQCF2iqckKjusjhg0T+USH8XNBQPTgK4cvs3V8Xmb2UWtJDWg++iAGmRRh7J
njJ+JOoBxSjBwdxjpUrDGQObP1zsu6qKMICZ2GLmZUVDxJR/Yw1mTs1Hgi9aEi6c
le80R7kHP8gCxcMuoW7CS8LTG6f0f/yEzK1zPN/HAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+a/I9lsOdJs8ecIP+lKSbthaht8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI4NGM5YTFiLTdlNGItNDMzZi1iMWYxLWY0Y2ViZmI2N2RjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVD3OAwDQYJKoZIhvcNAQELBQADggEBACIvu3xEiMb4ouvy9Lz8jmIwtpj6
AUmGe4ClscdDfGgTZjUwxpZu4W5kgp2MD6iqv5OzpDK9juhDCpPZqP9cvAopf9gz
RWq+ZD/DoOqOlieBzqOv5JqqIuIQmZHzhsLKs6Oth3gNkGq8CH++L4s5yyskgnHt
QgZZynFYxPGAgkopCNkwq/n3Dbwr8iNL4ylM1HF5sjkVGZSZ2X2PwHyGsMNpA4tU
BALbmwEQxwPYz9dp+Vhx+KtrsWRR9X5WDNncfCqnaIx29onGrgX18M315ZtVxlFT
PT1ZXLxl2ZlU1k8XFSeuu8AdBb2gXYZkqXfpyQeMTG4Idnt3W/TadY0hfBs=
-----END CERTIFICATE-----
Generated at Mon Aug 28 20:17:36 2023 by rpki-client on console-fra.rpki-client.org