Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa
File:                     31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa (raw, json)
Hash identifier:          Ap4gjOou9DCeLRhJfxupHpkRza62OR7FYWpX2CLPAaA=
Subject key identifier:   8A:1C:E8:9E:66:68:91:79:DE:8C:42:93:85:2C:C3:B8:64:CC:BB:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       620378182A67D199332C536D6F95BDAD1450C327
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        72.29.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:03:78:18:2a:67:d1:99:33:2c:53:6d:6f:95:bd:ad:14:50:c3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=96fca5b776f6ac8cb7f447b3f677e7fe7275f263b5efd6239a509e06b75509e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:78:06:01:5d:d5:7b:4d:f1:66:fd:11:17:
                    91:46:81:d6:4f:6c:90:c0:18:ac:bf:4d:69:a3:c1:
                    25:27:e9:2e:ff:c1:8a:f9:83:6a:a4:2d:56:c8:aa:
                    5f:13:4b:0e:c4:d5:fe:41:b8:70:2b:28:c4:70:ae:
                    f7:b2:ca:0a:cf:ad:5e:ca:6a:31:93:bf:62:e1:4f:
                    4c:6d:6d:55:df:6e:30:50:42:4f:66:8d:63:21:2a:
                    aa:e4:09:d4:74:01:66:e0:a9:d7:4d:f8:fa:51:ca:
                    12:9a:f4:fc:3d:85:24:02:19:21:a7:ec:e1:1d:51:
                    8f:5e:de:40:96:ea:6a:14:29:47:d3:2c:03:4a:5b:
                    78:02:6c:57:71:9b:20:01:8a:93:ab:1d:d3:47:21:
                    ce:34:53:30:57:d6:40:0f:ed:3e:fc:ca:f9:a6:44:
                    42:2f:e6:0d:f4:5d:81:b8:d4:40:f5:68:c3:bd:5e:
                    e5:f9:c3:c0:2a:ed:69:89:90:36:49:73:3b:15:29:
                    26:67:52:a2:e9:e8:31:1a:fa:d0:d6:d9:42:13:76:
                    d6:ba:d6:ff:8f:d5:32:cf:e1:f4:ed:e7:03:eb:5c:
                    49:44:bc:f5:bc:e0:09:1f:6f:5e:62:fa:47:97:93:
                    5f:f5:39:5a:7a:8a:e1:01:95:da:cf:63:af:2b:d9:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1C:E8:9E:66:68:91:79:DE:8C:42:93:85:2C:C3:B8:64:CC:BB:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:75:d4:33:5b:5f:90:67:7d:15:f8:cc:ef:0b:51:a5:36:24:
         5b:95:a7:9d:62:23:cc:12:6b:c9:3f:83:93:41:65:5e:f8:d4:
         db:c2:18:ef:d6:28:58:16:0a:8b:12:79:51:09:59:67:3a:d9:
         7a:86:30:e6:a6:0a:d8:9e:2d:6b:0f:f7:55:55:3c:4f:a7:95:
         4c:bb:45:e9:40:60:bb:86:be:09:e8:95:54:fe:e0:4a:96:b5:
         2d:ad:95:14:7d:ee:df:26:df:47:d9:6a:5e:84:51:7d:39:2a:
         76:f3:e2:61:c6:c9:b4:a6:23:6f:1d:96:8b:28:79:39:7a:a0:
         9d:0a:4c:f6:ad:84:67:4b:65:c4:96:bc:ba:2f:39:1c:9c:97:
         08:8d:2c:91:c0:88:4b:5f:d2:3f:eb:46:9b:d2:d7:b6:1b:a9:
         36:ea:2c:d4:3e:96:ba:c0:93:10:89:d9:94:48:70:d0:b8:5e:
         53:ed:f8:5c:81:3e:17:fd:77:60:a0:a5:2e:15:e0:42:4e:a8:
         20:04:58:40:07:13:50:a8:0d:84:11:d1:d0:17:07:40:30:d2:
         88:ab:a9:4f:cd:85:10:0a:40:5c:85:a4:ac:3f:65:a0:98:ee:
         72:db:37:07:3a:ca:90:36:a9:f7:5e:6b:d9:45:4b:fe:ae:5d:
         e7:c4:1b:8d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYgN4GCpn0ZkzLFNtb5W9rRRQwycwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NmZjYTViNzc2ZjZhYzhjYjdmNDQ3YjNmNjc3ZTdmZTcy
NzVmMjYzYjVlZmQ2MjM5YTUwOWUwNmI3NTUwOWU1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYcXgGAV3Ve03xZv0RF5FGgdZPbJDAGKy/TWmjwSUn6S7/
wYr5g2qkLVbIql8TSw7E1f5BuHArKMRwrveyygrPrV7KajGTv2LhT0xtbVXfbjBQ
Qk9mjWMhKqrkCdR0AWbgqddN+PpRyhKa9Pw9hSQCGSGn7OEdUY9e3kCW6moUKUfT
LANKW3gCbFdxmyABipOrHdNHIc40UzBX1kAP7T78yvmmREIv5g30XYG41ED1aMO9
XuX5w8Aq7WmJkDZJczsVKSZnUqLp6DEa+tDW2UITdta61v+P1TLP4fTt5wPrXElE
vPW84Akfb15i+keXk1/1OVp6iuEBldrPY68r2YhxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUihzonmZokXnejEKThSzDuGTMuzgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMxZDI2YTE4LTQ4ZjQtNGIzYy1iMWMxLTEyM2VmN2Y3ZjIzNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVIHQAwDQYJKoZIhvcNAQELBQADggEBAKh11DNbX5BnfRX4zO8LUaU2JFuV
p51iI8wSa8k/g5NBZV741NvCGO/WKFgWCosSeVEJWWc62XqGMOamCtieLWsP91VV
PE+nlUy7RelAYLuGvgnolVT+4EqWtS2tlRR97t8m30fZal6EUX05Knbz4mHGybSm
I28dlosoeTl6oJ0KTPathGdLZcSWvLovORyclwiNLJHAiEtf0j/rRpvS17YbqTbq
LNQ+lrrAkxCJ2ZRIcNC4XlPt+FyBPhf9d2CgpS4V4EJOqCAEWEAHE1CoDYQR0dAX
B0Aw0oirqU/NhRAKQFyFpKw/ZaCY7nLbNwc6ypA2qfdea9lFS/6uXefEG40=
-----END CERTIFICATE-----
Generated at Thu May 2 06:12:32 2024 by rpki-client on console-fra.rpki-client.org