Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa
File:                     3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa (raw, json)
Hash identifier:          g3+JAzyPtNCHj4XGhr1Yn10XDlwQGDRk2dNOTySUvlk=
Subject key identifier:   9A:F2:B9:17:2D:82:48:A3:33:4D:C6:0F:ED:A2:5D:59:FF:11:1C:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62E958DCEACB3B35AE2F5B8DFA2D88219281DF48
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        208.78.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e9:58:dc:ea:cb:3b:35:ae:2f:5b:8d:fa:2d:88:21:92:81:df:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=cd995c94f6bc43c9c1b8610a80769a0299b641ff8adb0260b2b7e57fdc44b083, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:ff:7c:bd:fd:f8:9a:17:f3:6a:3a:59:45:
                    dc:2c:f5:0a:9e:b6:8c:cf:f1:f6:89:fb:39:60:eb:
                    1f:53:43:8e:42:cb:37:2d:26:53:fb:6b:20:2f:25:
                    90:7f:9c:cf:50:5b:57:88:c1:38:13:27:2c:96:55:
                    bf:8e:69:66:56:24:ac:02:96:bb:1d:a1:60:1d:17:
                    f1:a6:30:b4:4e:0a:0b:8b:c0:fa:98:d6:d1:58:0a:
                    bf:26:09:78:3d:36:8c:cb:10:63:bf:e3:dc:6a:41:
                    bf:34:04:0a:dc:8a:ac:fa:18:2c:22:fc:aa:93:eb:
                    8b:5a:da:c4:b8:5d:84:34:b1:d2:46:b4:63:c2:c2:
                    ac:81:89:55:f0:9f:cc:0e:7f:87:e0:65:d9:8c:97:
                    41:b9:47:41:01:d4:f8:01:db:06:58:f9:eb:2f:f8:
                    9e:f7:ef:b4:e0:8f:be:3e:a6:50:aa:e0:e1:7e:4f:
                    58:d4:0a:ae:6e:59:77:90:92:1e:fe:b0:03:18:9f:
                    86:63:ac:7c:62:41:69:59:72:47:be:b4:17:e6:70:
                    eb:cd:9b:7f:c9:20:d6:04:6d:59:8f:08:6c:89:80:
                    1f:ad:44:5c:08:cd:30:25:d5:56:8a:83:d5:ea:b3:
                    13:40:13:07:be:5b:c2:9d:ce:d7:bf:1e:9b:4c:6a:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F2:B9:17:2D:82:48:A3:33:4D:C6:0F:ED:A2:5D:59:FF:11:1C:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:44:a0:c4:4f:8d:12:40:b8:2c:93:73:8d:30:42:89:62:
         8d:44:83:49:a6:7c:7e:ed:2d:32:d8:8b:f3:30:04:9d:4c:2e:
         b7:cc:29:ee:bb:8b:5f:6c:ec:2c:53:cd:ce:a7:02:79:78:05:
         28:30:65:6f:7b:dd:56:ba:6a:2a:13:9b:dd:9d:0a:70:60:7e:
         35:5a:8b:33:13:b3:5e:5e:4c:68:5c:26:d4:1d:35:85:57:63:
         b6:4c:20:b0:d3:e1:a2:13:2a:3c:7c:c0:34:82:72:0c:ba:7a:
         16:d3:05:46:13:1c:ca:5c:50:e8:98:27:61:00:b4:3c:7f:97:
         97:c0:28:a5:26:25:83:47:73:4d:0d:c1:a6:ac:b5:e2:54:e1:
         26:93:ca:0d:99:68:7b:ef:71:d9:8c:e8:e4:6e:fb:6d:e3:05:
         b6:f3:a2:4d:29:c9:6f:17:b3:57:1c:1a:15:fd:8e:bb:dc:2c:
         13:9b:5a:e0:ca:1d:4c:f2:af:1a:c7:4f:c0:50:bd:cd:ea:e2:
         f8:cf:03:de:78:05:82:56:93:45:d8:19:25:6b:2f:6d:55:81:
         b9:c1:32:3e:44:d9:08:e8:94:a4:b7:7d:53:18:4b:10:bb:16:
         ce:55:31:fa:83:11:62:57:19:a4:ed:88:45:7c:a2:dc:4b:aa:
         22:17:d4:16
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYulY3OrLOzWuL1uN+i2IIZKB30gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI0MDAwMDAwWhcNMjQwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZDk5NWM5NGY2YmM0M2M5YzFiODYxMGE4MDc2OWEwMjk5
YjY0MWZmOGFkYjAyNjBiMmI3ZTU3ZmRjNDRiMDgzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSfv98vf34mhfzajpZRdws9QqetozP8faJ+zlg6x9TQ45C
yzctJlP7ayAvJZB/nM9QW1eIwTgTJyyWVb+OaWZWJKwClrsdoWAdF/GmMLROCguL
wPqY1tFYCr8mCXg9NozLEGO/49xqQb80BArciqz6GCwi/KqT64ta2sS4XYQ0sdJG
tGPCwqyBiVXwn8wOf4fgZdmMl0G5R0EB1PgB2wZY+esv+J7377Tgj74+plCq4OF+
T1jUCq5uWXeQkh7+sAMYn4ZjrHxiQWlZcke+tBfmcOvNm3/JINYEbVmPCGyJgB+t
RFwIzTAl1VaKg9XqsxNAEwe+W8Kdzte/HptMaiJXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmvK5Fy2CSKMzTcYP7aJdWf8RHP0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNhYzhiMDNlLTA3NTItNGY0My04YjM4LWVlY2EyNmM5Y2ZmYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPQToAwDQYJKoZIhvcNAQELBQADggEBAEHiRKDET40SQLgsk3ONMEKJYo1E
g0mmfH7tLTLYi/MwBJ1MLrfMKe67i19s7CxTzc6nAnl4BSgwZW973Va6aioTm92d
CnBgfjVaizMTs15eTGhcJtQdNYVXY7ZMILDT4aITKjx8wDSCcgy6ehbTBUYTHMpc
UOiYJ2EAtDx/l5fAKKUmJYNHc00NwaasteJU4SaTyg2ZaHvvcdmM6ORu+23jBbbz
ok0pyW8Xs1ccGhX9jrvcLBObWuDKHUzyrxrHT8BQvc3q4vjPA954BYJWk0XYGSVr
L21VgbnBMj5E2QjolKS3fVMYSxC7Fs5VMfqDEWJXGaTtiEV8otxLqiIX1BY=
-----END CERTIFICATE-----
Generated at Thu May 2 17:41:06 2024 by rpki-client on console-fra.rpki-client.org