Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48743620-d852-4c45-84d7-d4a7e3874270.roa
File:                     48743620-d852-4c45-84d7-d4a7e3874270.roa (raw, json)
Hash identifier:          gHmqHLc2D9h5nzc5KN4aeFCqwEHbTNFWkT8e0ezu5gk=
Subject key identifier:   0C:E9:79:B3:87:DB:02:47:10:B9:B6:C2:76:DF:DD:D0:28:E7:A1:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DAC2D9407481C7E6963E648063DDE64C563220B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48743620-d852-4c45-84d7-d4a7e3874270.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        168.192.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Sep 2023 12:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ac:2d:94:07:48:1c:7e:69:63:e6:48:06:3d:de:64:c5:63:22:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=5942df22250f8a04ff23399c39e2d7b9a3cc3fa8e49ca98461d883de236de694, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:f1:39:df:f3:2f:63:0f:0b:8c:7d:d4:fb:
                    f7:b2:de:34:e2:39:bf:82:72:96:36:ab:aa:64:8b:
                    70:02:83:fd:58:69:89:e7:05:a6:50:0a:78:2a:43:
                    b4:b4:a2:a0:f5:17:01:7b:6e:3c:ef:a7:ea:c2:af:
                    b3:5a:4f:ad:da:b4:3a:ec:ac:a9:26:dd:e0:e3:3f:
                    0a:68:42:54:7c:ff:80:08:77:e3:2d:65:0b:5a:3c:
                    b3:e3:47:67:c1:be:0f:2d:17:e3:1e:13:f1:16:99:
                    3f:65:1e:fb:6f:09:07:26:e5:5b:d7:b1:02:45:f5:
                    81:c6:81:b3:f0:13:7f:1f:d3:b5:e4:1d:d5:d1:09:
                    97:6f:62:9b:cb:b8:40:d3:21:6d:4a:07:0c:3b:9c:
                    ca:b4:4a:f4:12:4e:60:a5:57:89:27:5a:a1:56:93:
                    ec:25:86:4f:67:2d:94:7e:bd:da:63:c0:b2:ef:5c:
                    28:a1:91:7c:c8:5a:cc:71:c2:7f:fe:65:93:5d:ce:
                    93:9c:8f:41:f9:74:8f:3d:1d:82:c1:01:b1:62:5f:
                    1c:04:fe:5a:b7:20:72:8f:26:f3:cb:85:8b:ec:06:
                    4b:ab:cb:53:0a:cf:00:f7:3a:db:ee:e5:25:3b:b3:
                    63:5c:85:47:46:a6:1b:8b:c8:78:d9:0d:7a:3a:96:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E9:79:B3:87:DB:02:47:10:B9:B6:C2:76:DF:DD:D0:28:E7:A1:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48743620-d852-4c45-84d7-d4a7e3874270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.192.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         97:ba:8c:56:b7:34:25:be:55:21:0d:d6:b4:06:ff:a8:a2:ab:
         ed:f3:8c:26:9d:2c:95:97:bc:f2:51:48:b1:3f:0b:a1:97:fc:
         0c:ff:35:5c:3e:04:1e:6e:99:c1:8b:47:64:06:b4:61:63:16:
         7e:73:4c:f9:f1:ff:fb:40:5b:d9:83:c1:23:ed:f9:ed:49:0f:
         9a:1c:39:37:22:71:cd:c3:d1:e9:bf:e5:6e:7e:de:30:67:e9:
         34:9a:3e:8a:24:c8:25:20:2d:6b:2b:82:07:6a:c8:c9:fa:d5:
         8c:fb:77:c3:bb:19:ff:91:93:65:74:7a:a0:ec:b8:73:ef:8b:
         c1:ed:10:63:76:e5:3b:a1:cd:fa:ae:06:5a:5b:35:69:12:01:
         39:0f:15:d7:8c:dc:dd:20:d1:74:07:be:88:bc:f0:93:e4:de:
         58:67:ca:ef:0f:b4:54:73:88:31:ed:f3:f2:d9:7f:a4:b9:88:
         71:ac:79:79:9a:ba:5a:cd:16:a7:97:af:c4:fb:4e:25:51:fc:
         13:3d:bb:5d:3e:65:83:a6:2b:5d:69:6e:0e:1b:b7:5d:b4:9c:
         b0:4b:93:03:91:75:38:a8:e9:f6:0a:01:92:26:c6:19:21:d9:
         0b:ac:82:0b:ab:7d:d6:88:6a:07:62:f5:c7:ae:08:7a:2a:80:
         2b:f0:df:94
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbawtlAdIHH5pY+ZIBj3eZMVjIgswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1OTQyZGYyMjI1MGY4YTA0ZmYyMzM5OWMzOWUyZDdiOWEz
Y2MzZmE4ZTQ5Y2E5ODQ2MWQ4ODNkZTIzNmRlNjk0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7bfE53/MvYw8LjH3U+/ey3jTiOb+CcpY2q6pki3ACg/1Y
aYnnBaZQCngqQ7S0oqD1FwF7bjzvp+rCr7NaT63atDrsrKkm3eDjPwpoQlR8/4AI
d+MtZQtaPLPjR2fBvg8tF+MeE/EWmT9lHvtvCQcm5VvXsQJF9YHGgbPwE38f07Xk
HdXRCZdvYpvLuEDTIW1KBww7nMq0SvQSTmClV4knWqFWk+wlhk9nLZR+vdpjwLLv
XCihkXzIWsxxwn/+ZZNdzpOcj0H5dI89HYLBAbFiXxwE/lq3IHKPJvPLhYvsBkur
y1MKzwD3Otvu5SU7s2NchUdGphuLyHjZDXo6lgY3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUDOl5s4fbAkcQubbCdt/d0CjnoSwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ4NzQzNjIwLWQ4NTItNGM0NS04NGQ3LWQ0YTdlMzg3NDI3MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwGowDANBgkqhkiG9w0BAQsFAAOCAQEAl7qMVrc0Jb5VIQ3WtAb/qKKr7fOM
Jp0slZe88lFIsT8LoZf8DP81XD4EHm6ZwYtHZAa0YWMWfnNM+fH/+0Bb2YPBI+35
7UkPmhw5NyJxzcPR6b/lbn7eMGfpNJo+iiTIJSAtayuCB2rIyfrVjPt3w7sZ/5GT
ZXR6oOy4c++Lwe0QY3blO6HN+q4GWls1aRIBOQ8V14zc3SDRdAe+iLzwk+TeWGfK
7w+0VHOIMe3z8tl/pLmIcax5eZq6Ws0Wp5evxPtOJVH8Ez27XT5lg6YrXWluDhu3
XbScsEuTA5F1OKjp9goBkibGGSHZC6yCC6t91ohqB2L1x64IeiqAK/DflA==
-----END CERTIFICATE-----
Generated at Fri Sep 22 00:27:52 2023 by rpki-client on console-ams.rpki-client.org