Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e472895-b434-4391-8576-749405dc5ab2.roa
File:                     4e472895-b434-4391-8576-749405dc5ab2.roa (raw, json)
Hash identifier:          OnB9JYULIpDCpFHhX6+mhiGRQbKizenTYvAOyVqd3d4=
Subject key identifier:   6B:0D:DD:A8:C9:A5:EE:58:B6:E9:D4:36:53:F9:8F:D6:80:82:14:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       072A44759BC7E8EEE1687356EFE61E35329751EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e472895-b434-4391-8576-749405dc5ab2.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.104.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2a:44:75:9b:c7:e8:ee:e1:68:73:56:ef:e6:1e:35:32:97:51:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=d78b7b298308ee41b0cc6a676af3b19d0d812ff45cec6b9d50ada5a5c2c3f014, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:1f:d1:7a:05:4b:d2:1a:ab:f3:6e:61:b8:
                    b1:de:ef:ba:90:63:8c:3d:ae:60:8f:c6:a4:a4:d9:
                    77:bd:7d:4a:1b:8a:76:03:10:f3:54:da:38:b5:e6:
                    db:d8:c4:74:4b:3a:7a:72:1f:48:3a:dd:a1:a9:40:
                    a8:97:6a:49:8b:cc:93:91:38:94:17:35:fd:92:e7:
                    3d:14:92:51:1c:1b:6b:e0:fe:b5:c9:78:3d:a5:11:
                    28:cd:7c:c9:9d:49:a7:90:8b:2f:ac:1c:74:ba:e6:
                    92:4f:5e:53:0d:7b:1e:4d:59:e8:dc:1e:87:33:14:
                    89:6d:3e:86:56:9f:41:c9:db:de:42:a6:c0:6e:74:
                    04:bb:18:26:51:10:6c:d6:a8:6d:66:0a:42:a0:41:
                    3c:08:d8:f9:e7:f7:d3:51:5c:12:da:e2:98:a0:1c:
                    68:cd:1b:9a:1b:78:81:b9:47:b6:17:45:46:c5:bb:
                    bd:f3:11:b6:4d:5b:9a:c8:b1:16:f4:45:87:47:ee:
                    4a:ea:89:cd:8f:66:c2:8b:8c:5c:fd:c4:d2:ca:f2:
                    c9:65:0b:71:dd:12:65:9c:dd:8d:99:dd:4e:2c:a8:
                    80:dd:bf:d5:ff:d2:5c:b7:6b:b0:e7:12:4e:de:88:
                    9a:8f:cb:24:2a:c2:2e:46:ed:29:73:a1:4e:58:57:
                    07:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0D:DD:A8:C9:A5:EE:58:B6:E9:D4:36:53:F9:8F:D6:80:82:14:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e472895-b434-4391-8576-749405dc5ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:8b:04:d7:ef:a0:52:d4:c0:37:9d:41:84:27:3e:da:ba:21:
         49:35:44:16:8e:23:21:1c:b4:46:50:01:7b:b5:cb:03:da:c1:
         29:9d:ac:f2:c5:6c:48:81:f2:0b:77:28:07:88:c5:0e:a4:d8:
         52:46:71:21:39:cf:97:e6:98:83:22:8c:6c:4f:b5:a4:f8:75:
         74:4c:0c:65:69:38:be:71:69:39:5d:9d:fe:4b:69:d8:da:27:
         ee:8c:6c:d6:61:98:64:25:be:16:5f:79:22:f6:81:98:11:fd:
         59:13:72:c3:6a:36:28:43:bf:9e:28:5e:b9:ca:f1:a8:04:f8:
         1a:d1:86:72:fa:2a:53:03:1e:9f:52:81:48:b9:26:65:1c:f0:
         dc:a7:aa:9d:d1:e5:f3:f2:66:4b:94:cb:3e:07:6d:07:1f:d6:
         91:31:89:2d:fc:77:a9:35:7e:20:38:23:9b:c7:73:85:9e:ad:
         b4:c1:04:3f:d8:39:9b:76:34:1f:ec:37:e9:21:9e:50:c2:58:
         62:8a:6e:02:a2:d1:0d:82:13:5d:21:01:5d:26:62:58:52:b0:
         0c:4f:fe:db:df:5a:44:12:fc:0c:53:c5:7c:7a:70:0f:c3:b9:
         5c:39:d9:aa:2f:a4:10:6b:7b:9f:84:f8:33:30:0c:d4:43:70:
         04:28:98:1e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBypEdZvH6O7haHNW7+YeNTKXUe8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNzhiN2IyOTgzMDhlZTQxYjBjYzZhNjc2YWYzYjE5ZDBk
ODEyZmY0NWNlYzZiOWQ1MGFkYTVhNWMyYzNmMDE0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmhR/RegVL0hqr825huLHe77qQY4w9rmCPxqSk2Xe9fUob
inYDEPNU2ji15tvYxHRLOnpyH0g63aGpQKiXakmLzJOROJQXNf2S5z0UklEcG2vg
/rXJeD2lESjNfMmdSaeQiy+sHHS65pJPXlMNex5NWejcHoczFIltPoZWn0HJ295C
psBudAS7GCZREGzWqG1mCkKgQTwI2Pnn99NRXBLa4pigHGjNG5obeIG5R7YXRUbF
u73zEbZNW5rIsRb0RYdH7krqic2PZsKLjFz9xNLK8sllC3HdEmWc3Y2Z3U4sqIDd
v9X/0ly3a7DnEk7eiJqPyyQqwi5G7SlzoU5YVwdbAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUaw3dqMml7li26dQ2U/mP1oCCFOowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRlNDcyODk1LWI0MzQtNDM5MS04NTc2LTc0OTQwNWRjNWFiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4aDANBgkqhkiG9w0BAQsFAAOCAQEAhosE1++gUtTAN51BhCc+2rohSTVE
Fo4jIRy0RlABe7XLA9rBKZ2s8sVsSIHyC3coB4jFDqTYUkZxITnPl+aYgyKMbE+1
pPh1dEwMZWk4vnFpOV2d/ktp2Non7oxs1mGYZCW+Fl95IvaBmBH9WRNyw2o2KEO/
niheucrxqAT4GtGGcvoqUwMen1KBSLkmZRzw3KeqndHl8/JmS5TLPgdtBx/WkTGJ
Lfx3qTV+IDgjm8dzhZ6ttMEEP9g5m3Y0H+w36SGeUMJYYopuAqLRDYITXSEBXSZi
WFKwDE/+299aRBL8DFPFfHpwD8O5XDnZqi+kEGt7n4T4MzAM1ENwBCiYHg==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:15 2024 by rpki-client on console-ams.rpki-client.org