Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45396181-d099-460b-8475-8ec08021bd09.roa
File:                     45396181-d099-460b-8475-8ec08021bd09.roa (raw, json)
Hash identifier:          U9bSkTL3tljIy+qCAJWn+XFfJ4T7++gLwsaNz270EDY=
Subject key identifier:   03:F4:49:20:42:5A:7E:84:7C:5D:9F:88:33:8A:5B:93:CE:A1:1D:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       383D5DD79EA5A6D8B886A472E6CD729BB085278D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45396181-d099-460b-8475-8ec08021bd09.roa
Signing time:             Tue 30 Apr 2024 00:00:00 +0000
ROA not before:           Tue 30 Apr 2024 00:00:00 +0000
ROA not after:            Tue 04 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        207.234.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3d:5d:d7:9e:a5:a6:d8:b8:86:a4:72:e6:cd:72:9b:b0:85:27:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 30 00:00:00 2024 GMT
            Not After : Jun  4 23:59:59 2024 GMT
        Subject: serialNumber=c6512ce9ff5bffac159df89c0c9531e7e77d7ab24bc945cbf4cc4f69de586466, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:72:b6:6a:27:e7:37:df:6a:74:b7:60:79:08:
                    c1:fd:30:0f:d6:d8:0e:13:ad:65:e4:7e:2f:7f:c8:
                    e5:0f:23:4e:58:bd:0b:dc:4b:e8:73:33:53:92:c3:
                    b9:d3:1f:ec:01:ca:66:9b:e9:d8:63:f4:79:7b:2b:
                    f5:06:6f:37:db:75:b5:69:9a:ea:6f:ea:a7:db:56:
                    13:4b:13:3e:49:f5:4c:bb:05:3e:5c:79:1b:ad:4b:
                    e1:9b:38:84:8a:52:9b:15:7d:da:4d:02:f4:f7:c0:
                    f8:81:68:29:ac:e7:fe:46:7f:50:d1:c3:11:f1:4a:
                    00:4a:45:3c:cd:7e:b7:78:10:fb:58:60:24:db:4f:
                    c2:67:dc:9a:6e:3d:84:53:99:65:c8:c9:1c:40:b8:
                    4b:96:c2:6e:78:ee:9a:67:3d:83:55:f9:93:c2:17:
                    ee:6f:ac:9e:b3:b1:78:94:43:8a:46:0b:00:52:c6:
                    e3:33:87:3c:38:28:7e:33:e8:79:c9:6d:20:8a:2a:
                    1c:fd:4d:38:f8:83:03:f8:12:bd:dd:67:75:c6:52:
                    e5:05:20:2a:87:4a:96:8a:a4:ef:3b:78:5a:de:c4:
                    38:ab:26:db:ea:55:7d:2f:ce:4a:32:52:50:6c:fd:
                    b2:f7:4b:fe:d2:74:1d:9e:90:e0:7f:62:f6:05:07:
                    c2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:49:20:42:5A:7E:84:7C:5D:9F:88:33:8A:5B:93:CE:A1:1D:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45396181-d099-460b-8475-8ec08021bd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.234.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3e:58:8a:7b:c7:c9:04:22:bf:64:c5:a5:62:ce:12:4d:24:6e:
         6d:fc:13:07:5b:40:52:0a:30:1e:74:9f:01:83:f8:ad:90:dc:
         b9:77:c7:7e:eb:a2:48:07:ed:cf:6b:e7:06:34:ce:ed:01:4f:
         2c:7e:36:ab:80:01:74:5e:b0:1b:1e:d1:6a:9c:4b:32:59:37:
         ce:19:d5:35:38:8e:67:74:8f:67:65:87:45:1d:23:f7:0b:cd:
         8c:31:dc:9b:b1:4a:6c:ee:4a:15:a6:c3:e0:a4:5f:8c:85:56:
         9c:e3:98:33:fb:d4:00:04:4f:91:e0:5a:cd:3c:b7:10:e3:89:
         82:aa:59:4d:24:77:e5:50:c2:dd:3c:94:cf:92:e2:51:26:3c:
         91:49:7e:fa:96:47:7e:ce:0c:21:33:66:6d:b5:40:65:7e:90:
         dd:91:42:95:e6:cc:81:15:5c:77:66:66:5a:a6:14:02:3b:19:
         56:7a:7d:9d:ea:6d:30:b7:b7:26:3a:b2:3a:34:41:1e:c7:21:
         92:4a:10:c0:ce:3a:e1:63:6d:cf:61:bb:9a:23:54:22:27:1a:
         ed:21:2e:1d:2b:25:76:56:61:8a:da:f9:cf:ce:87:35:78:0b:
         98:c3:db:56:56:d3:b0:f4:70:03:20:83:c7:1d:e3:54:fb:30:
         a4:f5:3b:bd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOD1d156lpti4hqRy5s1ym7CFJ40wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDMwMDAwMDAwWhcNMjQwNjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNjUxMmNlOWZmNWJmZmFjMTU5ZGY4OWMwYzk1MzFlN2U3
N2Q3YWIyNGJjOTQ1Y2JmNGNjNGY2OWRlNTg2NDY2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDocrZqJ+c332p0t2B5CMH9MA/W2A4TrWXkfi9/yOUPI05Y
vQvcS+hzM1OSw7nTH+wBymab6dhj9Hl7K/UGbzfbdbVpmupv6qfbVhNLEz5J9Uy7
BT5ceRutS+GbOISKUpsVfdpNAvT3wPiBaCms5/5Gf1DRwxHxSgBKRTzNfrd4EPtY
YCTbT8Jn3JpuPYRTmWXIyRxAuEuWwm547ppnPYNV+ZPCF+5vrJ6zsXiUQ4pGCwBS
xuMzhzw4KH4z6HnJbSCKKhz9TTj4gwP4Er3dZ3XGUuUFICqHSpaKpO87eFrexDir
JtvqVX0vzkoyUlBs/bL3S/7SdB2ekOB/YvYFB8JpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUA/RJIEJafoR8XZ+IM4pbk86hHZMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ1Mzk2MTgxLWQwOTktNDYwYi04NDc1LThlYzA4MDIxYmQwOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfP6oAwDQYJKoZIhvcNAQELBQADggEBAD5YinvHyQQiv2TFpWLOEk0kbm38
EwdbQFIKMB50nwGD+K2Q3Ll3x37rokgH7c9r5wY0zu0BTyx+NquAAXResBse0Wqc
SzJZN84Z1TU4jmd0j2dlh0UdI/cLzYwx3JuxSmzuShWmw+CkX4yFVpzjmDP71AAE
T5HgWs08txDjiYKqWU0kd+VQwt08lM+S4lEmPJFJfvqWR37ODCEzZm21QGV+kN2R
QpXmzIEVXHdmZlqmFAI7GVZ6fZ3qbTC3tyY6sjo0QR7HIZJKEMDOOuFjbc9hu5oj
VCInGu0hLh0rJXZWYYra+c/OhzV4C5jD21ZW07D0cAMgg8cd41T7MKT1O70=
-----END CERTIFICATE-----
Generated at Thu May 2 17:41:07 2024 by rpki-client on console-fra.rpki-client.org