Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54257ca2-0ede-4a74-9c99-1315fa349bdc.roa
File:                     54257ca2-0ede-4a74-9c99-1315fa349bdc.roa (raw, json)
Hash identifier:          3O51hKmeygFFFwZTYs2XtdzmAqH94e+e4ud5Igcba9c=
Subject key identifier:   2A:88:75:43:C4:EF:4A:F8:9B:EA:78:2F:66:2A:5C:53:08:9E:36:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       337D9C2F64958D9B3EFEE2418528CB76B0CE1079
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54257ca2-0ede-4a74-9c99-1315fa349bdc.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     6167
IP address blocks:        204.126.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7d:9c:2f:64:95:8d:9b:3e:fe:e2:41:85:28:cb:76:b0:ce:10:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=02c4c9628098323d5097142997db8517425b6975ea46d498df040f3874c27a55, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:53:eb:c0:c5:b5:3b:6c:74:db:9e:e8:bc:
                    25:c5:b9:4d:e8:3d:0e:bc:7c:3a:a2:a3:b3:b0:2e:
                    86:7e:9b:a5:39:ed:b1:12:44:b0:c9:d7:d1:3d:a4:
                    50:c9:9e:eb:1b:b7:3f:7e:05:05:b7:18:56:e2:cb:
                    66:3e:98:cb:3f:af:74:cb:74:7f:a4:ac:d2:f1:ac:
                    d9:e3:5d:cf:8c:b2:89:68:30:fd:1a:52:24:4f:67:
                    2c:df:dc:bb:0a:f0:1a:8b:0a:1f:93:4e:f3:fa:f5:
                    91:74:e2:0d:11:f6:40:a9:2e:46:7a:f5:c0:e3:b8:
                    f7:5f:3f:bc:06:82:99:3e:9a:7c:f3:57:81:e9:62:
                    a6:9e:d0:f3:fd:2d:6e:45:82:0a:a2:24:94:7f:64:
                    7f:40:a0:a5:ee:54:46:3f:82:d4:92:ae:72:76:4f:
                    6e:9c:50:e4:59:76:84:08:91:d0:63:ac:61:51:a0:
                    54:34:56:a4:9c:a2:c1:fc:6f:8d:85:8d:03:a0:7e:
                    bd:67:cb:ca:a4:9f:a6:e3:00:90:ce:e8:8b:5d:73:
                    0a:38:d9:bb:23:03:75:ed:fd:5e:92:a8:8c:f1:cb:
                    fa:ee:19:3d:bb:63:4b:be:aa:1a:10:51:bf:96:85:
                    b6:bf:85:6a:60:0b:ef:1f:4f:b6:87:31:0b:47:a9:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:88:75:43:C4:EF:4A:F8:9B:EA:78:2F:66:2A:5C:53:08:9E:36:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54257ca2-0ede-4a74-9c99-1315fa349bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:80:7d:43:d7:8c:7f:e7:e8:fd:cf:e2:ef:c9:db:1f:c6:04:
         b0:69:14:12:24:37:04:f9:11:c9:52:bb:71:71:88:53:ed:d5:
         90:40:1b:6b:06:84:72:b9:80:09:4d:b6:0c:37:c7:59:ee:7a:
         ad:e9:d6:e6:98:fa:04:7e:ea:19:3a:38:03:ed:b4:b0:46:3c:
         75:0f:99:62:5a:15:33:a2:0c:c5:ab:f4:2b:51:cb:70:08:3a:
         93:98:05:fb:a4:bc:c9:9f:e7:f6:66:ad:0d:a1:a3:13:94:b2:
         8a:60:de:09:bc:2a:5b:42:5c:a8:da:32:d5:5d:88:e7:dc:ad:
         f5:b9:7a:e8:cf:a5:a0:90:fa:fa:0d:da:ae:e5:c9:b4:4c:1f:
         05:ec:fe:ab:e2:7a:2c:a0:b0:4c:df:74:66:a2:a1:19:0c:67:
         6f:16:98:2d:a5:66:1a:a0:07:79:2b:8c:c3:46:44:40:95:be:
         82:bb:9a:63:47:2d:e4:53:09:51:06:d9:a6:d1:a9:6c:d7:87:
         11:d8:a8:fd:52:aa:3f:84:b6:7f:32:fb:ed:31:25:b6:91:8f:
         c8:01:68:93:6d:33:a7:4a:28:6b:4f:d6:18:b4:2c:89:d9:d7:
         12:f4:41:e6:96:54:17:62:8c:53:95:f2:9f:c6:a7:2a:65:85:
         a8:8b:f3:ee
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM32cL2SVjZs+/uJBhSjLdrDOEHkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMmM0Yzk2MjgwOTgzMjNkNTA5NzE0Mjk5N2RiODUxNzQy
NWI2OTc1ZWE0NmQ0OThkZjA0MGYzODc0YzI3YTU1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6AVPrwMW1O2x0257ovCXFuU3oPQ68fDqio7OwLoZ+m6U5
7bESRLDJ19E9pFDJnusbtz9+BQW3GFbiy2Y+mMs/r3TLdH+krNLxrNnjXc+Msolo
MP0aUiRPZyzf3LsK8BqLCh+TTvP69ZF04g0R9kCpLkZ69cDjuPdfP7wGgpk+mnzz
V4HpYqae0PP9LW5FggqiJJR/ZH9AoKXuVEY/gtSSrnJ2T26cUORZdoQIkdBjrGFR
oFQ0VqScosH8b42FjQOgfr1ny8qkn6bjAJDO6Itdcwo42bsjA3Xt/V6SqIzxy/ru
GT27Y0u+qhoQUb+Whba/hWpgC+8fT7aHMQtHqWjfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKoh1Q8TvSvib6ngvZipcUwieNjwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU0MjU3Y2EyLTBlZGUtNGE3NC05Yzk5LTEzMTVmYTM0OWJkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADMfhgwDQYJKoZIhvcNAQELBQADggEBALaAfUPXjH/n6P3P4u/J2x/GBLBp
FBIkNwT5EclSu3FxiFPt1ZBAG2sGhHK5gAlNtgw3x1nueq3p1uaY+gR+6hk6OAPt
tLBGPHUPmWJaFTOiDMWr9CtRy3AIOpOYBfukvMmf5/ZmrQ2hoxOUsopg3gm8KltC
XKjaMtVdiOfcrfW5eujPpaCQ+voN2q7lybRMHwXs/qvieiygsEzfdGaioRkMZ28W
mC2lZhqgB3krjMNGRECVvoK7mmNHLeRTCVEG2abRqWzXhxHYqP1Sqj+Etn8y++0x
JbaRj8gBaJNtM6dKKGtP1hi0LInZ1xL0QeaWVBdijFOV8p/GpyplhaiL8+4=
-----END CERTIFICATE-----
Generated at Sat May 11 01:28:09 2024 by rpki-client on console-ams.rpki-client.org