Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa
File:                     461512e0-a72b-4e95-b675-27ac531c5460.roa (raw, json)
Hash identifier:          7EcxZy+zzoF03diLACQIOu6h1lAguXEnYimhFomtO70=
Subject key identifier:   EA:C1:7B:E7:77:CE:38:C9:28:C9:C1:30:86:BF:EF:5D:54:15:B2:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2AEB79F7AF10800554AB0566C15FB46074315569
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.115.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:eb:79:f7:af:10:80:05:54:ab:05:66:c1:5f:b4:60:74:31:55:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=35286b8bd7746a939e0610716de784c7a10f291fe5f51bbb6caa42bbe4815e07, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:47:0a:38:25:59:6c:13:3b:5d:a1:36:c7:
                    63:60:78:a9:c4:75:14:af:40:c3:01:0e:3f:b5:4c:
                    bb:98:c2:ca:4e:75:92:4e:89:eb:e1:9d:86:22:2d:
                    d9:1d:5c:74:43:70:97:c8:2e:14:9d:00:9f:0b:dc:
                    ff:fe:89:19:ff:63:70:20:8b:6d:cc:ab:22:a8:18:
                    1c:22:89:93:c4:85:47:01:03:55:6d:f4:cc:ac:c8:
                    c0:8f:87:e7:de:3e:a0:e5:0b:cf:dc:b6:19:7a:2c:
                    c1:18:3c:55:7c:54:ba:fc:0f:db:4d:8a:2c:ce:2d:
                    cd:af:e6:c8:0c:5c:f6:9e:28:11:38:08:73:a6:6e:
                    48:f5:de:f7:89:02:c7:cf:84:3c:5a:ca:40:51:70:
                    5f:31:a8:fb:d5:6d:83:fd:de:33:75:91:0f:d5:c1:
                    9d:8e:c2:fb:11:79:3b:58:d0:2f:91:dc:b7:03:2a:
                    6b:e0:e5:bc:05:93:65:32:5c:77:45:8b:9d:7c:e1:
                    c9:7e:cd:a1:ac:3d:f3:1c:e3:de:1b:b3:8f:cb:a8:
                    99:35:c4:bc:28:29:39:47:53:0a:ce:02:18:6e:27:
                    77:f2:5a:bc:52:68:0b:b0:5c:06:f1:cf:6e:8b:bf:
                    0d:05:f8:4b:b7:92:7c:71:e4:a0:4c:5c:61:21:52:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C1:7B:E7:77:CE:38:C9:28:C9:C1:30:86:BF:EF:5D:54:15:B2:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:07:7b:51:ab:b5:18:ed:7c:8b:05:7f:c6:34:28:89:de:26:
         26:0c:af:cd:17:1a:cc:57:ba:29:61:08:03:19:e7:e1:49:8d:
         d6:9e:34:0c:f2:95:98:9c:ff:ad:ec:8f:d1:92:9b:4d:ce:ff:
         8d:87:e5:20:f8:d0:16:1a:cb:5c:cc:ab:f5:41:de:cf:4e:8c:
         88:e1:99:61:0e:7d:a1:90:65:7e:15:af:df:0c:a7:9d:33:c6:
         46:92:a5:2c:e3:bf:e3:98:b3:b1:ed:88:37:c4:7a:9d:b3:f7:
         9e:3e:c3:0a:59:07:f3:6c:69:e6:90:b5:84:97:cd:d3:02:aa:
         47:4e:1b:3a:6c:45:82:57:4b:6d:02:5a:66:0a:69:61:e9:39:
         3e:26:78:a2:b9:e9:d0:87:b6:93:30:7a:91:d3:c2:eb:c6:7b:
         99:a4:28:d9:5c:64:da:b2:ca:5c:3c:18:c1:83:e8:02:ab:ea:
         b2:31:ff:44:57:07:64:f5:e3:b0:72:6e:aa:f7:87:44:d8:4f:
         fa:8e:ec:e0:7c:05:cd:aa:c2:e0:bd:7e:87:3e:e8:80:5f:79:
         2d:71:0b:dc:c8:61:3a:a6:d4:6e:74:00:c3:85:aa:93:9f:75:
         c5:73:f1:2f:29:2f:05:7a:b5:b1:55:cd:29:c1:16:8b:3d:c5:
         45:ee:cc:ee
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUKut5968QgAVUqwVmwV+0YHQxVWkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEwMDAwMDAwWhcNMjQwNTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzNTI4NmI4YmQ3NzQ2YTkzOWUwNjEwNzE2ZGU3ODRjN2Ex
MGYyOTFmZTVmNTFiYmI2Y2FhNDJiYmU0ODE1ZTA3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8UkcKOCVZbBM7XaE2x2NgeKnEdRSvQMMBDj+1TLuYwspO
dZJOievhnYYiLdkdXHRDcJfILhSdAJ8L3P/+iRn/Y3Agi23MqyKoGBwiiZPEhUcB
A1Vt9MysyMCPh+fePqDlC8/cthl6LMEYPFV8VLr8D9tNiizOLc2v5sgMXPaeKBE4
CHOmbkj13veJAsfPhDxaykBRcF8xqPvVbYP93jN1kQ/VwZ2OwvsReTtY0C+R3LcD
Kmvg5bwFk2UyXHdFi5184cl+zaGsPfMc494bs4/LqJk1xLwoKTlHUwrOAhhuJ3fy
WrxSaAuwXAbxz26Lvw0F+Eu3knxx5KBMXGEhUlK/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU6sF753fOOMkoycEwhr/vXVQVsnowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ2MTUxMmUwLWE3MmItNGU5NS1iNjc1LTI3YWM1MzFjNTQ2MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2czANBgkqhkiG9w0BAQsFAAOCAQEAHgd7Uau1GO18iwV/xjQoid4mJgyv
zRcazFe6KWEIAxnn4UmN1p40DPKVmJz/reyP0ZKbTc7/jYflIPjQFhrLXMyr9UHe
z06MiOGZYQ59oZBlfhWv3wynnTPGRpKlLOO/45izse2IN8R6nbP3nj7DClkH82xp
5pC1hJfN0wKqR04bOmxFgldLbQJaZgppYek5PiZ4ornp0Ie2kzB6kdPC68Z7maQo
2Vxk2rLKXDwYwYPoAqvqsjH/RFcHZPXjsHJuqveHRNhP+o7s4HwFzarC4L1+hz7o
gF95LXEL3MhhOqbUbnQAw4Wqk591xXPxLykvBXq1sVXNKcEWiz3FRe7M7g==
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:56:17 2024 by rpki-client on console-fra.rpki-client.org