Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45e8eba4-6801-4544-9efc-31142bb91023.roa
File:                     45e8eba4-6801-4544-9efc-31142bb91023.roa (raw, json)
Hash identifier:          L187YIoxvrft2J29iA0pWUTImemsnNKHRatU1chzHrU=
Subject key identifier:   74:29:BD:CB:B8:61:80:FD:00:AE:A1:17:A7:2E:F7:B7:C3:44:A9:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A85E5EE645017CBE0FF5077A66498575E14ADB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45e8eba4-6801-4544-9efc-31142bb91023.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:4000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:85:e5:ee:64:50:17:cb:e0:ff:50:77:a6:64:98:57:5e:14:ad:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=dcd15a220764052c975976ce8156ce6df5ea6eeedc9f78bfa9e1971732ded937, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:cd:3f:4b:e3:77:5e:70:06:7a:21:4a:06:
                    67:07:00:15:68:e3:16:58:90:e3:cf:b1:2e:58:da:
                    56:cc:cc:0e:3f:56:65:fe:55:57:30:22:ea:b7:8d:
                    98:15:d7:17:a6:e0:a2:d4:b4:70:de:b5:04:6d:3c:
                    0f:29:e8:38:5a:8e:6c:39:f7:ce:25:7d:91:99:0c:
                    88:72:cb:bf:f8:4e:54:24:ca:f9:31:02:41:83:1e:
                    b6:f8:e7:ba:a4:12:35:7f:02:a6:4d:c9:03:13:78:
                    d3:2e:f9:15:5d:75:c9:ef:73:d9:6a:8c:96:c9:67:
                    95:b2:d3:0a:df:dd:cc:07:92:83:4a:ab:1c:6a:5e:
                    f2:d8:3a:9b:ed:2b:97:e5:26:0c:ca:d9:d9:9a:23:
                    9b:37:d8:03:29:74:9f:18:dc:ab:bd:ce:f5:ac:6c:
                    57:a4:bc:a0:89:14:f0:fb:18:32:29:df:01:eb:d4:
                    6c:62:8e:16:53:cf:f7:2c:51:da:49:89:63:64:bb:
                    91:7d:07:43:05:22:0b:7c:c1:04:dd:50:9b:98:76:
                    76:ff:b0:2c:f8:73:26:c8:8f:aa:f3:b2:89:cf:ea:
                    dd:37:68:a3:51:97:97:81:20:da:df:26:21:34:fa:
                    5d:3e:cd:75:7a:3f:a2:52:db:fa:dc:83:8a:58:58:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:29:BD:CB:B8:61:80:FD:00:AE:A1:17:A7:2E:F7:B7:C3:44:A9:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45e8eba4-6801-4544-9efc-31142bb91023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:bd:77:f4:e3:4c:2d:6a:cb:36:a6:d9:f9:48:d6:71:2c:
         56:5b:f7:7d:b7:f4:22:73:76:42:d1:e6:4f:3a:0b:e5:44:e6:
         1c:24:e2:ab:d1:bd:67:9a:59:11:1d:c5:7f:5d:45:e4:0c:9a:
         20:41:01:57:63:38:87:f1:d6:e7:e8:81:e0:9c:6b:74:32:a1:
         00:27:29:d0:3e:9b:ed:26:86:64:df:2f:b8:6c:48:8e:1b:da:
         df:8f:75:2a:10:da:d5:ed:8b:ca:f9:00:6e:83:7a:4b:87:fc:
         87:77:ad:63:d0:61:40:4a:d9:51:7b:07:23:f2:7a:37:55:ca:
         90:06:30:59:d3:e8:1f:bc:21:63:7e:4c:b7:24:e6:46:cf:20:
         7c:6d:3f:ba:33:db:59:1f:5f:90:a5:e7:ca:18:b4:1b:9b:ab:
         bc:7c:7d:1b:91:16:7e:0e:2c:87:1d:bd:4e:44:de:34:8f:cc:
         d7:e3:42:b6:35:bc:1f:8a:73:3f:08:8d:7c:c8:75:9b:b6:34:
         3f:12:1c:e4:4f:d0:70:74:2a:19:b4:0b:6f:86:cd:fd:d7:22:
         04:2f:7b:7c:e5:99:f8:ea:6d:17:ca:fd:b5:f3:d1:b7:85:21:
         e3:36:6c:bc:40:6c:98:4c:8b:27:aa:4e:62:76:bc:05:0b:28:
         15:8a:43:be
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUOoXl7mRQF8vg/1B3pmSYV14UrbgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkY2QxNWEyMjA3NjQwNTJjOTc1OTc2Y2U4MTU2Y2U2ZGY1
ZWE2ZWVlZGM5Zjc4YmZhOWUxOTcxNzMyZGVkOTM3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCw2M0/S+N3XnAGeiFKBmcHABVo4xZYkOPPsS5Y2lbMzA4/
VmX+VVcwIuq3jZgV1xem4KLUtHDetQRtPA8p6Dhajmw5984lfZGZDIhyy7/4TlQk
yvkxAkGDHrb457qkEjV/AqZNyQMTeNMu+RVddcnvc9lqjJbJZ5Wy0wrf3cwHkoNK
qxxqXvLYOpvtK5flJgzK2dmaI5s32AMpdJ8Y3Ku9zvWsbFekvKCJFPD7GDIp3wHr
1GxijhZTz/csUdpJiWNku5F9B0MFIgt8wQTdUJuYdnb/sCz4cybIj6rzsonP6t03
aKNRl5eBINrfJiE0+l0+zXV6P6JS2/rcg4pYWB9xAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUdCm9y7hhgP0ArqEXpy73t8NEqV0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ1ZThlYmE0LTY4MDEtNDU0NC05ZWZjLTMxMTQyYmI5MTAyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB/yQDANBgkqhkiG9w0BAQsFAAOCAQEAhPK9d/TjTC1qyzam2flI1nEs
Vlv3fbf0InN2QtHmTzoL5UTmHCTiq9G9Z5pZER3Ff11F5AyaIEEBV2M4h/HW5+iB
4JxrdDKhACcp0D6b7SaGZN8vuGxIjhva3491KhDa1e2LyvkAboN6S4f8h3etY9Bh
QErZUXsHI/J6N1XKkAYwWdPoH7whY35MtyTmRs8gfG0/ujPbWR9fkKXnyhi0G5ur
vHx9G5EWfg4shx29TkTeNI/M1+NCtjW8H4pzPwiNfMh1m7Y0PxIc5E/QcHQqGbQL
b4bN/dciBC97fOWZ+OptF8r9tfPRt4Uh4zZsvEBsmEyLJ6pOYna8BQsoFYpDvg==
-----END CERTIFICATE-----
Generated at Thu Apr 18 00:45:52 2024 by rpki-client on console-fra.rpki-client.org